$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa File: 17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa (raw, json) Hash identifier: jOsfv0BPU+CtBMJ/aj0qKQhnn1SEYBlTvGqYWTPSDeg= Subject key identifier: AC:2F:86:2F:D1:B7:2E:5B:E2:E0:30:C6:53:F0:EA:71:87:33:91:37 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7879FCA8F739C391FCE14 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa Signing time: Thu 24 Apr 2025 11:08:46 +0000 ROA not before: Thu 24 Apr 2025 11:08:46 +0000 ROA not after: Wed 23 Jul 2025 11:08:46 +0000 asID: 12041 IP address blocks: 65.22.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:87:9f:ca:8f:73:9c:39:1f:ce:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:46 2025 GMT Not After : Jul 23 11:08:46 2025 GMT Subject: CN=626a9b0f-9315-4c6e-af39-68421cd5a7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b3:1d:65:4d:ad:9f:8c:22:87:bd:08:96:b9: 29:ac:7c:70:7a:cb:5f:16:23:0a:85:76:5d:91:b2: 2b:3e:82:f4:11:aa:d4:13:e3:82:ce:85:53:1f:d7: 35:86:11:29:f8:3d:36:cf:65:47:06:18:5e:1a:10: ec:d2:2f:c2:ab:ed:9b:3b:7f:5d:17:13:e0:50:b0: e7:99:87:a2:09:d4:4b:af:f9:26:cf:76:84:6b:02: 76:8c:fd:ad:10:7c:9a:97:27:bb:9a:44:d9:5f:b4: 78:87:e9:8d:7b:96:fd:3f:20:76:e0:0f:a2:d8:51: 88:80:73:94:f5:4d:23:71:47:79:57:ed:00:2f:c8: f5:15:fe:f9:b2:2f:a3:2f:9f:a6:a2:2a:78:79:1c: 6d:d3:91:a9:62:1d:4e:32:96:c6:d1:af:8c:c2:05: ef:29:8f:8b:82:b0:c2:ec:b0:f3:cb:7c:27:57:eb: 70:bc:c5:a0:ec:a9:a9:71:43:25:0e:9c:34:ad:3d: ac:25:39:19:73:a6:81:44:ba:3e:97:97:43:0b:dd: c6:81:65:60:6c:e7:ca:52:42:b2:eb:cf:d2:34:b9: 94:2d:37:a9:3b:0a:69:58:70:49:65:a2:66:be:1a: f6:46:12:45:24:ac:dd:68:a9:d8:d3:86:ff:9c:91: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2F:86:2F:D1:B7:2E:5B:E2:E0:30:C6:53:F0:EA:71:87:33:91:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:3b:3b:f7:09:f6:37:54:ee:35:7f:86:b9:6d:30:d6:d0:01: ef:8b:56:72:fe:5c:91:90:b8:90:1f:88:7f:00:2a:1d:2e:6e: f4:30:45:f0:d4:41:d4:a5:ed:cf:df:1f:3f:0d:e3:53:ef:9b: 76:62:8a:7b:ee:fa:ce:51:47:b9:32:4c:7c:29:a1:3d:1f:43: ca:fa:0b:8e:5e:e8:e4:dc:bb:a4:74:7a:68:47:5a:81:23:a5: a7:5b:3c:3b:f3:a9:36:01:d2:c9:ac:ca:9e:87:a0:e4:9c:fc: f6:12:09:25:88:8f:0e:db:33:bf:36:af:95:0c:e8:70:ea:d1: 1b:56:e2:24:fa:1c:6e:76:2b:5e:39:e0:90:05:a9:ec:46:8e: 18:a5:7f:af:a1:49:9b:d3:4d:fd:68:1e:1d:06:03:ec:b7:39: c5:f1:00:8a:09:20:03:cd:4b:9c:9d:28:b5:fb:de:bf:63:39: d8:1c:e2:0f:de:2f:ad:75:24:f1:1b:ff:0f:99:d6:31:54:10: 24:96:16:29:0e:36:79:cf:fb:94:76:d2:5e:c6:76:39:e4:c0: fd:28:1e:d7:67:61:a8:5e:75:89:b7:3d:b0:42:69:3a:02:17: ff:2a:d3:03:97:c9:1a:9e:5c:4b:ee:dc:91:00:e8:f3:a4:b1: 39:7a:9f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht4efyo9znDkfzhQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg0NloXDTI1MDcyMzExMDg0NlowLzEtMCsGA1UEAxMk NjI2YTliMGYtOTMxNS00YzZlLWFmMzktNjg0MjFjZDVhN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLMdZU2tn4wih70IlrkprHxwestfFiMKhXZd kbIrPoL0EarUE+OCzoVTH9c1hhEp+D02z2VHBhheGhDs0i/Cq+2bO39dFxPgULDn mYeiCdRLr/kmz3aEawJ2jP2tEHyalye7mkTZX7R4h+mNe5b9PyB24A+i2FGIgHOU 9U0jcUd5V+0AL8j1Ff75si+jL5+moip4eRxt05GpYh1OMpbG0a+MwgXvKY+LgrDC 7LDzy3wnV+twvMWg7KmpcUMlDpw0rT2sJTkZc6aBRLo+l5dDC93GgWVgbOfKUkKy 68/SNLmULTepOwppWHBJZaJmvhr2RhJFJKzdaKnY04b/nJH1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwvhi/Rty5b4uAwxlPw6nGHM5E3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTdhY2I5ZTUtNGUzMC0z NDhhLTg5YjktZWE0MWFjMWJjNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc7O/cJ9jdU7jV/hrltMNbQAe+LVnL+XJGQuJAfiH8AKh0ubvQwRfDU QdSl7c/fHz8N41Pvm3Ziinvu+s5RR7kyTHwpoT0fQ8r6C45e6OTcu6R0emhHWoEj padbPDvzqTYB0smsyp6HoOSc/PYSCSWIjw7bM782r5UM6HDq0RtW4iT6HG52K145 4JAFqexGjhilf6+hSZvTTf1oHh0GA+y3OcXxAIoJIAPNS5ydKLX73r9jOdgc4g/e L611JPEb/w+Z1jFUECSWFikONnnP+5R20l7GdjnkwP0oHtdnYahedYm3PbBCaToC F/8q0wOXyRqeXEvu3JEA6POksTl6nxs= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:41 2025 by rpki-client