$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c81f92a-6586-3bd4-b015-3106413e66cc.roa File: 1c81f92a-6586-3bd4-b015-3106413e66cc.roa (raw, json) Hash identifier: tYL/jDdmEqoDOiNLB4K1QUF1/ehED55Y/7b0Y+zc5MY= Subject key identifier: E4:C2:0F:57:17:54:71:3A:B5:5A:28:91:33:6F:BB:6C:90:A8:CA:83 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B43C8584B471D290590AC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c81f92a-6586-3bd4-b015-3106413e66cc.roa Signing time: Thu 24 Apr 2025 11:02:07 +0000 ROA not before: Thu 24 Apr 2025 11:02:07 +0000 ROA not after: Wed 23 Jul 2025 11:02:07 +0000 asID: 12041 IP address blocks: 65.22.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:3c:85:84:b4:71:d2:90:59:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:02:07 2025 GMT Not After : Jul 23 11:02:07 2025 GMT Subject: CN=27d78e6f-3552-45af-9b30-84cc4f434518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:6b:da:be:ee:14:4c:73:de:cb:1b:3e:5c: e6:b0:16:e5:84:a0:34:fe:b9:74:8e:3d:07:94:a7: 5c:20:88:16:d1:35:12:0a:4d:60:38:bf:e1:08:03: 67:19:4b:77:9d:36:78:4c:2f:40:ca:7e:a5:e1:9c: cf:29:43:b8:b5:ae:24:43:cc:dd:13:b6:20:c3:bc: c8:8b:e1:4c:6e:3b:e3:9a:9c:20:af:b1:b4:38:fa: ed:23:56:47:14:0b:d4:8a:54:3b:cf:7b:59:7b:7f: 73:06:ad:87:ca:86:43:ca:62:5a:a1:91:5f:ed:64: 3e:26:94:27:f1:76:99:10:a9:c7:ac:b3:c7:68:67: fe:ed:65:ef:47:31:64:13:b4:0e:46:e7:aa:6a:11: 4b:35:ac:b7:36:8e:71:f9:27:a9:ff:3f:96:9f:bf: 1f:c8:b0:56:26:6e:07:53:a9:ce:f1:26:61:b1:ed: 0d:3a:af:47:26:7f:b6:bd:8c:4c:99:c7:30:e0:ad: 49:36:9b:ad:4e:c1:94:45:97:74:ae:0d:27:74:dc: 76:08:be:f3:cf:fd:34:18:84:86:c1:a0:29:d0:47: 63:79:e5:2d:a6:29:63:52:8f:1a:5d:d9:63:cf:af: 09:55:7c:4e:4a:c9:69:8c:a8:b9:76:f8:aa:ab:74: 70:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C2:0F:57:17:54:71:3A:B5:5A:28:91:33:6F:BB:6C:90:A8:CA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c81f92a-6586-3bd4-b015-3106413e66cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:91:02:98:e8:9a:c0:1b:61:a7:48:17:0d:c3:77:11:30:e8: 84:a1:73:67:4b:f8:8e:a5:9e:5e:44:36:4e:59:ba:db:43:1a: fe:6f:d3:05:0d:20:80:06:79:75:d1:3a:99:2a:8d:e9:ab:ac: d4:44:cd:7d:73:ff:1f:8c:7b:7c:d7:69:56:a6:dd:81:3b:1b: ec:95:f8:21:27:9a:48:a8:a4:80:db:31:c0:26:f6:ea:ee:57: 2c:cc:ea:1d:6c:66:05:b1:2d:7a:29:96:c2:84:76:36:16:a0: 6d:5b:4d:c7:7e:43:ff:f4:a2:e5:94:01:ba:88:50:d6:6d:8d: 2f:4a:48:6d:25:f5:be:c4:d5:12:06:16:60:b6:d6:17:dc:4f: b6:64:89:f3:96:ff:ec:c9:5d:ba:71:42:ca:73:53:bb:72:1d: ae:65:3c:73:e0:5e:0a:ee:f8:a6:4b:cf:9b:30:9a:12:b9:9c: 7b:38:36:14:d5:8e:b3:5a:29:5d:c1:d9:b3:77:d8:83:b5:47: 7f:6c:d2:eb:42:33:1b:36:dc:2a:dd:bf:63:fd:3d:ac:29:fd: 3d:81:06:51:2a:e7:bc:87:db:62:e6:0a:02:a1:de:3b:2a:04: cd:e3:4c:42:d7:fd:96:56:44:22:6b:3b:14:b2:ec:72:6a:82: d9:f6:e0:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtDyFhLRx0pBZCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDIwN1oXDTI1MDcyMzExMDIwN1owLzEtMCsGA1UEAxMk MjdkNzhlNmYtMzU1Mi00NWFmLTliMzAtODRjYzRmNDM0NTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSpr2r7uFExz3ssbPlzmsBblhKA0/rl0jj0H lKdcIIgW0TUSCk1gOL/hCANnGUt3nTZ4TC9Ayn6l4ZzPKUO4ta4kQ8zdE7Ygw7zI i+FMbjvjmpwgr7G0OPrtI1ZHFAvUilQ7z3tZe39zBq2HyoZDymJaoZFf7WQ+JpQn 8XaZEKnHrLPHaGf+7WXvRzFkE7QORueqahFLNay3No5x+Sep/z+Wn78fyLBWJm4H U6nO8SZhse0NOq9HJn+2vYxMmccw4K1JNputTsGURZd0rg0ndNx2CL7zz/00GISG waAp0EdjeeUtpiljUo8aXdljz68JVXxOSslpjKi5dviqq3RwjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTCD1cXVHE6tVookTNvu2yQqMqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWM4MWY5MmEtNjU4Ni0z YmQ0LWIwMTUtMzEwNjQxM2U2NmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqRApjomsAbYadIFw3DdxEw6IShc2dL+I6lnl5ENk5ZuttDGv5v0wUN IIAGeXXROpkqjemrrNREzX1z/x+Me3zXaVam3YE7G+yV+CEnmkiopIDbMcAm9uru VyzM6h1sZgWxLXoplsKEdjYWoG1bTcd+Q//0ouWUAbqIUNZtjS9KSG0l9b7E1RIG FmC21hfcT7ZkifOW/+zJXbpxQspzU7tyHa5lPHPgXgru+KZLz5swmhK5nHs4NhTV jrNaKV3B2bN32IO1R39s0utCMxs23Crdv2P9Pawp/T2BBlEq57yH22LmCgKh3jsq BM3jTELX/ZZWRCJrOxSy7HJqgtn24G4= -----END CERTIFICATE-----Generated at Tue Apr 29 20:31:00 2025 by rpki-client