$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bc94367-c0eb-3a36-ab0f-4b7d302ef6b2.roa File: 1bc94367-c0eb-3a36-ab0f-4b7d302ef6b2.roa (raw, json) Hash identifier: oeRC5fug5ZAoTLdMFfsK2EczNV1eegoN3N/Kg0hftaI= Subject key identifier: 1C:A8:1A:81:0B:3C:BE:67:94:B8:1B:C5:33:FB:E0:DD:A5:3B:EF:AD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7207EF6C26524CAB17780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bc94367-c0eb-3a36-ab0f-4b7d302ef6b2.roa Signing time: Thu 24 Apr 2025 11:07:57 +0000 ROA not before: Thu 24 Apr 2025 11:07:57 +0000 ROA not after: Wed 23 Jul 2025 11:07:57 +0000 asID: 12041 IP address blocks: 65.22.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:20:7e:f6:c2:65:24:ca:b1:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:07:57 2025 GMT Not After : Jul 23 11:07:57 2025 GMT Subject: CN=63a9a5ce-2ac8-4eba-a7d1-5ad87b550506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:ca:cd:9f:f4:10:cf:c5:33:c0:85:e0:e1: 47:d0:eb:14:2d:eb:17:a0:39:e2:54:0b:0c:d4:73: fe:0e:6e:df:e3:89:4b:a4:7a:1f:66:64:c5:d4:fc: c7:d7:a9:c5:e7:03:81:a8:1a:90:08:79:29:d7:73: ec:bb:c1:26:6d:c9:13:ec:8a:a5:f7:61:92:47:6d: 7e:da:f0:60:d4:96:9b:58:68:fa:f1:1e:1f:e7:34: 71:f0:84:82:0c:33:17:82:64:6c:3b:77:f6:81:c7: a7:08:09:54:ae:00:45:f6:fd:08:7d:a4:ef:da:f7: bb:5f:c7:01:68:07:16:39:98:40:1e:04:a1:92:23: 68:1f:f2:3f:7e:4b:56:91:85:93:71:61:b9:fb:21: 02:7f:b7:9a:1b:b4:97:1f:8e:1f:a8:c6:2a:fb:a0: 22:36:09:43:5b:62:29:6f:71:a9:8a:f4:75:d2:2a: 45:e3:2a:54:22:e2:c3:b8:4f:12:d0:7e:f3:e0:40: 54:7f:ca:29:e8:f9:00:7f:12:f8:b9:09:01:c0:c3: ed:c9:44:2f:af:ba:64:0f:ad:b5:4f:fe:59:43:9d: b5:4b:f2:79:27:c6:ea:f7:1e:03:b5:10:1c:76:02: ad:ec:8b:15:9e:12:2d:de:06:5d:ac:cd:fe:6b:28: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A8:1A:81:0B:3C:BE:67:94:B8:1B:C5:33:FB:E0:DD:A5:3B:EF:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bc94367-c0eb-3a36-ab0f-4b7d302ef6b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:eb:ab:9e:48:33:35:10:ca:0c:f7:d1:31:8c:09:61:4c:8d: b6:45:44:55:60:50:f1:68:e7:23:c3:4c:8c:b1:b4:fb:a8:c6: ae:ec:89:92:3a:4f:f0:68:ff:12:f6:51:6c:43:d7:90:90:59: 6b:c4:81:ac:d1:a7:5c:e7:1a:3a:6e:57:c0:d5:a0:22:96:27: fd:0f:af:12:9c:fc:0f:14:9d:b7:f2:00:64:d1:ed:32:15:35: 37:e4:14:69:02:42:74:bb:17:af:42:11:9e:c0:2c:e7:16:e0: d0:a5:a5:91:c7:b7:e8:87:ca:92:07:80:73:02:75:46:7c:ac: 1a:17:50:44:c2:81:5f:d7:02:4c:78:01:7d:8e:df:3e:e1:76: fb:43:28:de:fc:a4:1f:f2:41:ee:2b:47:01:25:da:f4:03:14: c1:8c:cd:47:a5:de:ac:40:a4:0b:f7:93:57:9e:62:9a:11:0d: 8d:bb:23:e9:13:f9:b8:ee:49:a4:34:49:65:08:e8:a2:8b:a6: 3b:36:dd:23:fb:61:c7:d3:ac:27:f9:30:be:ba:25:77:68:fc: 4f:39:0c:e5:41:9c:8d:f1:4d:41:71:1b:f9:0b:f0:93:9b:49: be:19:ef:dd:9e:9a:4d:76:7c:e1:46:7f:a2:05:fb:57:a6:b6: 38:c9:7a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtyB+9sJlJMqxd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDc1N1oXDTI1MDcyMzExMDc1N1owLzEtMCsGA1UEAxMk NjNhOWE1Y2UtMmFjOC00ZWJhLWE3ZDEtNWFkODdiNTUwNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYvKzZ/0EM/FM8CF4OFH0OsULesXoDniVAsM 1HP+Dm7f44lLpHofZmTF1PzH16nF5wOBqBqQCHkp13Psu8EmbckT7Iql92GSR21+ 2vBg1JabWGj68R4f5zRx8ISCDDMXgmRsO3f2gcenCAlUrgBF9v0IfaTv2ve7X8cB aAcWOZhAHgShkiNoH/I/fktWkYWTcWG5+yECf7eaG7SXH44fqMYq+6AiNglDW2Ip b3GpivR10ipF4ypUIuLDuE8S0H7z4EBUf8op6PkAfxL4uQkBwMPtyUQvr7pkD621 T/5ZQ521S/J5J8bq9x4DtRAcdgKt7IsVnhIt3gZdrM3+aygf9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByoGoELPL5nlLgbxTP74N2lO++tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWJjOTQzNjctYzBlYi0z YTM2LWFiMGYtNGI3ZDMwMmVmNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfrq55IMzUQygz30TGMCWFMjbZFRFVgUPFo5yPDTIyxtPuoxq7siZI6 T/Bo/xL2UWxD15CQWWvEgazRp1znGjpuV8DVoCKWJ/0PrxKc/A8UnbfyAGTR7TIV NTfkFGkCQnS7F69CEZ7ALOcW4NClpZHHt+iHypIHgHMCdUZ8rBoXUETCgV/XAkx4 AX2O3z7hdvtDKN78pB/yQe4rRwEl2vQDFMGMzUel3qxApAv3k1eeYpoRDY27I+kT +bjuSaQ0SWUI6KKLpjs23SP7YcfTrCf5ML66JXdo/E85DOVBnI3xTUFxG/kL8JOb Sb4Z792emk12fOFGf6IF+1emtjjJeok= -----END CERTIFICATE-----Generated at Tue Apr 29 18:38:11 2025 by rpki-client