$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/18f5c9dd-745e-3941-870e-7eac0b6e0574.roa File: 18f5c9dd-745e-3941-870e-7eac0b6e0574.roa (raw, json) Hash identifier: UuhKWhBOi8A8+wjBsTJNsppdN7rRvvx7FuVsIcqRSf0= Subject key identifier: B0:8C:FE:7E:00:CD:12:CD:B3:42:AD:54:AC:6C:09:44:85:24:F3:56 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2125B587F280552A62EDDC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/18f5c9dd-745e-3941-870e-7eac0b6e0574.roa Signing time: Thu 24 Apr 2025 14:11:46 +0000 ROA not before: Thu 24 Apr 2025 14:11:46 +0000 ROA not after: Wed 23 Jul 2025 14:11:46 +0000 asID: 207266 IP address blocks: 65.22.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:5b:58:7f:28:05:52:a6:2e:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:11:46 2025 GMT Not After : Jul 23 14:11:46 2025 GMT Subject: CN=f3133c70-9459-4f26-a523-06342e902ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dc:e8:2f:5d:c1:2b:03:e1:f5:0c:d5:39:40: e8:b7:ba:9a:69:56:a8:6f:d9:07:3b:62:b8:9d:f8: 63:1f:7b:47:bb:2a:fe:43:c8:45:c2:79:f4:11:4c: fa:1d:6c:bf:41:61:41:5d:9f:0d:10:75:5f:5f:43: 20:13:04:e9:b6:cf:16:03:95:c8:d3:c3:dc:a7:24: 8f:68:6c:0b:3d:20:54:28:b5:3e:ad:bf:a1:fa:83: 4e:bf:f7:56:c0:f7:fb:38:f3:ed:e2:0d:bd:6a:07: 33:8f:2c:7f:f2:cb:1a:74:83:a3:77:0a:7c:6d:54: 42:fe:c9:b4:c2:04:d3:e5:a1:af:df:90:eb:d8:27: 9a:57:ed:f8:e3:90:c3:2d:df:b6:28:ce:96:67:76: 49:e5:09:32:08:67:8c:ec:c0:e5:94:5e:a9:ae:b6: 6b:17:eb:55:86:bd:2c:fa:7c:7d:e6:ad:1f:eb:57: 81:51:e2:b4:fa:5c:95:14:4a:27:5c:2d:1c:9e:ca: 18:9f:e0:52:41:9a:c0:16:c9:65:69:3e:08:77:10: e1:1f:15:b1:59:2a:8f:93:18:d8:28:d0:fc:f9:f8: 03:a3:a6:47:45:c9:4e:11:6c:16:f9:c7:be:ac:b9: a2:21:f7:cf:85:18:50:92:c8:5c:ee:4b:cc:eb:f3: b9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8C:FE:7E:00:CD:12:CD:B3:42:AD:54:AC:6C:09:44:85:24:F3:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/18f5c9dd-745e-3941-870e-7eac0b6e0574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:ce:fe:4d:f8:5d:61:26:79:fb:9c:3d:8a:5e:d7:f5:06:ca: d1:aa:3a:7d:df:1c:0c:42:c1:e8:11:bf:4b:49:ac:49:71:16: 80:8b:35:9b:a7:50:51:22:d8:44:b4:b9:04:ad:71:c5:69:4b: 6b:3d:a1:77:de:12:36:17:18:0a:02:d4:8f:13:28:66:77:0a: eb:95:55:24:35:c2:d4:f7:79:1b:83:50:f1:8a:60:f9:8d:98: d3:53:19:0b:13:f4:43:40:a0:31:58:70:23:9d:63:9b:9d:06: 9f:e0:2a:90:f0:45:53:6a:5f:cf:a7:f6:a3:c9:55:2a:22:40: 85:93:32:63:93:e5:4b:2f:ad:67:3c:ec:f3:2d:be:c5:6b:28: 13:55:69:51:0b:92:ee:19:c8:fc:23:24:fe:62:f7:7f:1f:93: 12:a4:b1:17:87:db:e1:91:29:5b:8e:85:17:49:0b:fb:0f:c3: 0b:a9:0c:88:38:26:73:bb:77:83:c8:8f:68:e7:72:a1:df:11: 7b:7f:72:f8:52:40:ba:b8:42:9d:ea:48:fd:85:68:3d:8e:d2: cd:f3:f6:26:f4:e6:66:b9:13:94:a3:c3:62:7b:97:d1:c0:d9: 17:27:5f:21:19:4b:e2:ae:dd:18:5d:60:ef:9e:3a:5c:12:2b: 24:5d:28:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEltYfygFUqYu3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTE0NloXDTI1MDcyMzE0MTE0NlowLzEtMCsGA1UEAxMk ZjMxMzNjNzAtOTQ1OS00ZjI2LWE1MjMtMDYzNDJlOTAyZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdzoL13BKwPh9QzVOUDot7qaaVaob9kHO2K4 nfhjH3tHuyr+Q8hFwnn0EUz6HWy/QWFBXZ8NEHVfX0MgEwTpts8WA5XI08PcpySP aGwLPSBUKLU+rb+h+oNOv/dWwPf7OPPt4g29agczjyx/8ssadIOjdwp8bVRC/sm0 wgTT5aGv35Dr2CeaV+3445DDLd+2KM6WZ3ZJ5QkyCGeM7MDllF6prrZrF+tVhr0s +nx95q0f61eBUeK0+lyVFEonXC0cnsoYn+BSQZrAFsllaT4IdxDhHxWxWSqPkxjY KND8+fgDo6ZHRclOEWwW+ce+rLmiIffPhRhQkshc7kvM6/O5AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCM/n4AzRLNs0KtVKxsCUSFJPNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMThmNWM5ZGQtNzQ1ZS0z OTQxLTg3MGUtN2VhYzBiNmUwNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTO/k34XWEmefucPYpe1/UGytGqOn3fHAxCwegRv0tJrElxFoCLNZun UFEi2ES0uQStccVpS2s9oXfeEjYXGAoC1I8TKGZ3CuuVVSQ1wtT3eRuDUPGKYPmN mNNTGQsT9ENAoDFYcCOdY5udBp/gKpDwRVNqX8+n9qPJVSoiQIWTMmOT5UsvrWc8 7PMtvsVrKBNVaVELku4ZyPwjJP5i938fkxKksReH2+GRKVuOhRdJC/sPwwupDIg4 JnO7d4PIj2jncqHfEXt/cvhSQLq4Qp3qSP2FaD2O0s3z9ib05ma5E5Sjw2J7l9HA 2RcnXyEZS+Ku3RhdYO+eOlwSKyRdKDU= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:51 2025 by rpki-client