$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a455cc3-9abe-3dad-95d6-93b7407f4803.roa File: 1a455cc3-9abe-3dad-95d6-93b7407f4803.roa (raw, json) Hash identifier: NnqYKoFeFU01mNTh2WLIrb5shaM9pbXyJYtjtth93WE= Subject key identifier: 61:63:53:DD:94:88:5D:E5:2D:A9:92:ED:FA:EB:86:B6:48:FF:E0:0F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B42A2306A31AB20C0F9580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a455cc3-9abe-3dad-95d6-93b7407f4803.roa Signing time: Thu 24 Apr 2025 11:01:59 +0000 ROA not before: Thu 24 Apr 2025 11:01:59 +0000 ROA not after: Wed 23 Jul 2025 11:01:59 +0000 asID: 12041 IP address blocks: 65.22.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:2a:23:06:a3:1a:b2:0c:0f:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:01:59 2025 GMT Not After : Jul 23 11:01:59 2025 GMT Subject: CN=69b1ebc7-cf0a-45d7-96a3-99b23d41765f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c5:64:fd:c1:65:bc:6e:2d:54:7d:75:be:b0: 77:c0:35:d5:14:50:1a:cd:a8:e0:1d:47:36:79:c6: db:32:df:14:21:ae:6c:d5:0a:86:c7:db:9a:a7:50: 47:da:12:a7:d5:f6:d6:43:04:db:d4:61:e8:da:9a: 71:37:8d:ff:51:37:a0:93:f3:0c:d6:68:0d:a4:fc: 82:cb:1d:c5:f0:9d:61:76:7a:a2:ae:84:da:b6:cd: 61:b2:6f:08:4a:2a:ef:c4:07:f8:3b:07:c8:f1:ed: 6a:b6:77:7b:59:87:d1:7b:15:18:e1:83:4b:8a:96: 85:1b:24:04:4a:3b:e4:38:88:c6:71:bb:a4:8d:63: 74:d1:85:15:ad:a7:44:d8:a0:7f:08:f7:33:23:d9: b8:ba:b2:56:d5:ce:c1:db:fa:0d:d7:3f:9d:91:f4: 17:90:08:86:a1:a5:4b:83:51:d3:83:90:90:3d:86: df:58:99:78:93:61:20:30:7c:87:7b:18:47:10:00: 30:21:06:84:16:e6:4f:a9:5f:33:1d:21:31:a4:7b: 72:fb:30:2b:99:1e:04:30:c5:34:53:52:f0:78:0d: 62:d3:cf:f3:1d:9c:ea:43:52:5e:5b:f0:36:1d:9a: d2:2e:f6:8e:5d:90:25:4d:06:20:f9:55:b5:a7:e2: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:63:53:DD:94:88:5D:E5:2D:A9:92:ED:FA:EB:86:B6:48:FF:E0:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a455cc3-9abe-3dad-95d6-93b7407f4803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ae:e9:4f:a4:96:21:49:17:59:0d:92:18:24:8b:3f:74:31: f8:9a:27:a0:20:11:32:7f:09:cd:c3:04:d8:b9:7d:d8:61:1e: 78:4f:61:fb:ee:70:4b:28:db:59:94:09:06:db:05:0a:38:ad: ad:b2:a5:04:5d:07:80:af:08:da:f7:27:8a:1e:1b:40:45:8c: 16:4f:37:1f:e5:c1:4c:a1:c6:79:c5:49:1d:55:9b:5b:d9:06: a7:bc:c0:6f:42:dd:ed:19:e6:7c:48:a4:b5:57:d9:45:18:82: 88:5c:40:f3:15:17:79:9c:f1:a1:fc:d0:c9:03:42:57:08:d3: 0c:03:34:c1:32:68:a7:e2:8b:01:7a:a6:21:b6:5b:e6:37:aa: c8:72:2d:c8:18:75:a3:ed:50:41:5d:e2:e1:de:ae:72:1c:6c: fd:af:16:91:f2:96:3c:c7:c3:bd:89:4c:86:a4:38:c6:99:82: c2:09:d3:37:31:08:80:89:cc:ea:12:4e:7d:ed:20:9a:b5:49: e5:17:36:c6:c8:d1:7c:48:b1:d7:4f:da:e1:b4:8e:31:f5:c6: 80:34:5a:7f:c3:a6:7a:2d:98:0c:ff:f7:16:d2:c4:d0:02:9e: 60:e8:78:43:73:b6:5f:44:59:ce:a0:bf:c8:a3:cf:a2:70:30: e1:cf:39:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtCojBqMasgwPlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDE1OVoXDTI1MDcyMzExMDE1OVowLzEtMCsGA1UEAxMk NjliMWViYzctY2YwYS00NWQ3LTk2YTMtOTliMjNkNDE3NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8Vk/cFlvG4tVH11vrB3wDXVFFAazajgHUc2 ecbbMt8UIa5s1QqGx9uap1BH2hKn1fbWQwTb1GHo2ppxN43/UTegk/MM1mgNpPyC yx3F8J1hdnqiroTats1hsm8ISirvxAf4OwfI8e1qtnd7WYfRexUY4YNLipaFGyQE SjvkOIjGcbukjWN00YUVradE2KB/CPczI9m4urJW1c7B2/oN1z+dkfQXkAiGoaVL g1HTg5CQPYbfWJl4k2EgMHyHexhHEAAwIQaEFuZPqV8zHSExpHty+zArmR4EMMU0 U1LweA1i08/zHZzqQ1JeW/A2HZrSLvaOXZAlTQYg+VW1p+JlmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFjU92UiF3lLamS7frrhrZI/+APMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWE0NTVjYzMtOWFiZS0z ZGFkLTk1ZDYtOTNiNzQwN2Y0ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuu6U+kliFJF1kNkhgkiz90MfiaJ6AgETJ/Cc3DBNi5fdhhHnhPYfvu cEso21mUCQbbBQo4ra2ypQRdB4CvCNr3J4oeG0BFjBZPNx/lwUyhxnnFSR1Vm1vZ Bqe8wG9C3e0Z5nxIpLVX2UUYgohcQPMVF3mc8aH80MkDQlcI0wwDNMEyaKfiiwF6 piG2W+Y3qshyLcgYdaPtUEFd4uHernIcbP2vFpHyljzHw72JTIakOMaZgsIJ0zcx CICJzOoSTn3tIJq1SeUXNsbI0XxIsddP2uG0jjH1xoA0Wn/DpnotmAz/9xbSxNAC nmDoeENztl9EWc6gv8ijz6JwMOHPOXg= -----END CERTIFICATE-----Generated at Wed Apr 30 00:18:28 2025 by rpki-client