$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa File: 1bea22db-543c-392b-894a-1a3fd5009750.roa (raw, json) Hash identifier: h2yM3kSo4Ya93gJ0zQOb+4d3xCj9gK3gvt7CRnUy5Mg= Subject key identifier: B9:7B:07:20:8D:2D:CF:55:F2:22:E4:68:34:5B:4E:44:0F:95:1C:C1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B78EFB9D8E7F2C5ADA0B40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa Signing time: Thu 24 Apr 2025 11:08:49 +0000 ROA not before: Thu 24 Apr 2025 11:08:49 +0000 ROA not after: Wed 23 Jul 2025 11:08:49 +0000 asID: 12041 IP address blocks: 65.22.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:8e:fb:9d:8e:7f:2c:5a:da:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:49 2025 GMT Not After : Jul 23 11:08:49 2025 GMT Subject: CN=0a14c661-e392-4e0a-8ac8-0720a9ad8832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:3d:cf:dc:1e:98:b0:0e:f2:c2:c4:cd:a3: 0d:3c:4a:40:73:36:46:78:29:af:af:dc:cf:ac:a1: e2:cb:c4:bd:1f:d3:c5:f1:ae:42:27:f3:e7:4b:74: 6e:55:d5:f0:12:3d:cf:47:5c:61:d3:8e:57:b1:15: f4:78:b0:32:f0:ca:a1:b6:c2:a1:5c:16:e9:2f:8e: bf:4a:ea:ae:d6:f8:3e:76:2f:8b:01:5e:36:89:af: 19:9a:0b:88:af:51:92:cf:5c:cc:fd:6e:7a:ca:79: 69:05:06:50:1f:cb:00:24:e4:7b:5f:b1:3c:7f:f8: 7c:3d:15:77:8e:56:d6:22:4a:a5:35:c2:40:1e:ef: 83:21:44:e9:98:39:60:82:6b:c3:dc:78:5b:4c:02: 56:1a:0b:81:9c:54:17:05:3a:09:ea:ba:7b:28:8e: a2:f5:4d:71:6e:11:ba:3f:a1:d0:51:65:ab:27:26: f8:e2:4d:16:e1:f3:76:12:d0:27:54:b1:fa:7b:99: 69:e1:8d:10:b1:ab:2d:60:f4:77:a2:f9:81:a2:c9: 16:90:e3:36:dd:3c:f9:bc:47:8c:6c:1c:30:4e:21: bf:bc:65:73:47:e4:e3:20:3b:b1:ec:2e:5c:04:70: a1:b0:58:f8:39:66:b0:dc:0d:74:a8:e6:af:ae:72: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7B:07:20:8D:2D:CF:55:F2:22:E4:68:34:5B:4E:44:0F:95:1C:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a1:5f:67:63:bd:e2:2c:96:a0:44:ec:87:ce:55:73:ab:14: d2:d1:47:40:85:3a:4d:eb:58:dc:68:20:70:ab:47:9b:4e:e5: 0e:fe:54:92:d9:92:35:82:42:ea:64:e8:05:9d:31:7f:04:1b: a7:c1:b5:68:5f:b6:85:2b:74:05:0d:27:6f:8c:76:02:fe:5d: 74:eb:2d:07:48:e1:37:be:1e:7d:5d:d1:c4:be:c6:42:73:8a: ab:23:e2:72:33:0d:e7:70:8b:9e:26:3b:f3:b0:07:29:6d:fa: ea:c4:24:9d:a0:33:7f:52:ae:6e:23:c9:04:13:a7:9d:a7:58: 53:1b:56:6c:62:9d:d7:39:00:fa:c0:19:96:fd:6e:22:75:1e: 27:3a:99:7e:61:67:cb:34:83:59:98:53:e6:21:7d:ac:2f:1c: bf:ad:13:c8:99:2e:8f:a8:4d:94:a9:aa:34:41:aa:e4:47:b8: 17:62:ba:35:7b:77:ef:60:86:18:87:29:79:b9:b4:7d:46:e5: e0:a5:00:a6:31:2d:50:6c:c3:88:04:21:00:db:a3:47:b2:b8: 49:fb:08:dd:19:96:94:4a:88:85:79:aa:fe:80:d6:a8:3a:b6: 8c:5f:50:1f:a0:9c:99:c3:43:f5:a9:a0:02:b2:2e:6f:75:2c: fe:a6:ba:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht477nY5/LFraC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg0OVoXDTI1MDcyMzExMDg0OVowLzEtMCsGA1UEAxMk MGExNGM2NjEtZTM5Mi00ZTBhLThhYzgtMDcyMGE5YWQ4ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1I9z9wemLAO8sLEzaMNPEpAczZGeCmvr9zP rKHiy8S9H9PF8a5CJ/PnS3RuVdXwEj3PR1xh045XsRX0eLAy8MqhtsKhXBbpL46/ Suqu1vg+di+LAV42ia8ZmguIr1GSz1zM/W56ynlpBQZQH8sAJOR7X7E8f/h8PRV3 jlbWIkqlNcJAHu+DIUTpmDlggmvD3HhbTAJWGguBnFQXBToJ6rp7KI6i9U1xbhG6 P6HQUWWrJyb44k0W4fN2EtAnVLH6e5lp4Y0QsastYPR3ovmBoskWkOM23Tz5vEeM bBwwTiG/vGVzR+TjIDux7C5cBHChsFj4OWaw3A10qOavrnK/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLl7ByCNLc9V8iLkaDRbTkQPlRzBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWJlYTIyZGItNTQzYy0z OTJiLTg5NGEtMWEzZmQ1MDA5NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmhX2djveIslqBE7IfOVXOrFNLRR0CFOk3rWNxoIHCrR5tO5Q7+VJLZ kjWCQupk6AWdMX8EG6fBtWhftoUrdAUNJ2+MdgL+XXTrLQdI4Te+Hn1d0cS+xkJz iqsj4nIzDedwi54mO/OwBylt+urEJJ2gM39Srm4jyQQTp52nWFMbVmxindc5APrA GZb9biJ1Hic6mX5hZ8s0g1mYU+YhfawvHL+tE8iZLo+oTZSpqjRBquRHuBdiujV7 d+9ghhiHKXm5tH1G5eClAKYxLVBsw4gEIQDbo0eyuEn7CN0ZlpRKiIV5qv6A1qg6 toxfUB+gnJnDQ/WpoAKyLm91LP6muvk= -----END CERTIFICATE-----Generated at Sun Jun 15 11:54:53 2025 by rpki-client