$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa File: 1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa (raw, json) Hash identifier: UmKuEBZGB+5iCH3bqS5nSYb4cObk6BJbxwsm/FCpfx4= Subject key identifier: 6B:C7:4D:64:49:76:3F:21:43:20:75:17:C2:91:A9:6B:0E:48:C5:F5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B43AD71DECB4C7F6EEAD00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa Signing time: Thu 24 Apr 2025 11:02:07 +0000 ROA not before: Thu 24 Apr 2025 11:02:07 +0000 ROA not after: Wed 23 Jul 2025 11:02:07 +0000 asID: 12041 IP address blocks: 65.22.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:3a:d7:1d:ec:b4:c7:f6:ee:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:02:07 2025 GMT Not After : Jul 23 11:02:07 2025 GMT Subject: CN=12270363-95e3-4534-8e2d-c6266a033f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:62:9e:3a:5f:9c:05:c1:3b:a8:fe:d9:49:2a: 9f:b7:68:9e:d4:ff:f1:1b:3c:f4:be:00:a6:1b:b2: bc:0b:3f:2a:80:d3:64:ad:d8:7e:4f:28:e6:8c:29: 8c:bd:bc:29:15:96:d2:08:87:d2:af:78:b9:dd:7e: 15:7e:40:f3:ea:01:55:b6:36:79:84:c8:cc:fe:7c: 99:dc:67:47:21:4a:81:78:41:98:21:e5:3d:31:39: 23:b4:cc:f2:10:2c:83:43:85:cb:ab:75:1b:28:2e: f3:3a:9d:e9:6a:be:96:eb:86:53:38:72:28:33:1b: 2f:a8:9a:94:54:af:24:87:3b:b2:b1:8f:23:09:f1: be:76:7f:3d:67:e9:69:9e:97:cc:19:13:b1:44:38: f8:c7:72:17:da:ec:2e:85:fd:ea:9a:76:0f:19:b1: 21:60:e3:15:cd:96:58:86:d7:54:85:57:94:00:3a: a5:0b:10:4f:4c:4b:1f:6f:ae:b5:20:a6:c8:7d:71: 34:48:ea:09:b4:0c:ae:83:3e:10:d0:ec:f9:4e:bf: 7d:8a:1c:40:b1:ab:5c:4f:11:28:1e:15:98:b5:70: 42:63:de:5e:6e:51:18:60:7f:7e:ff:b9:50:39:bc: 63:5a:66:03:9f:02:13:7e:21:74:f8:ef:5c:55:e4: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C7:4D:64:49:76:3F:21:43:20:75:17:C2:91:A9:6B:0E:48:C5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2d:47:a3:05:7e:f8:c7:0d:c3:d1:7d:8b:a0:4b:99:7c:cf: c5:3f:df:b5:40:5b:b2:0d:ec:4c:1f:3f:73:87:58:7f:c4:77: f4:52:03:03:f3:78:c8:3c:e1:53:b2:c7:9f:66:da:6d:fb:51: b7:3b:1f:ad:5e:b0:e2:f2:ef:00:3b:86:f4:66:35:f4:77:aa: 01:cc:10:ec:98:ef:6f:e3:17:2c:5f:45:b2:7c:ff:7d:52:dd: c0:e0:a4:c6:ec:b1:d4:7d:94:7e:6b:93:27:4b:bf:72:93:e7: 1b:d4:9a:1b:d3:99:6f:43:e7:32:58:2c:89:80:77:b6:e5:78: ff:8d:e0:9c:43:8d:66:ce:97:56:4d:dd:70:fc:98:6d:09:9a: fc:d0:00:32:cc:36:39:1d:81:6e:e9:75:01:06:cb:3a:97:74: f6:a2:b3:cd:e5:70:34:d6:ff:e9:ea:12:bb:53:07:50:24:3e: c5:4a:28:ee:e0:8e:db:59:e1:00:bb:7d:34:65:53:8e:73:7e: b9:e1:04:39:63:a5:1e:ed:10:94:e6:3b:e7:ee:e2:27:22:d2: 63:19:37:33:70:f4:7a:08:c4:50:31:10:3f:51:84:37:fa:3f: 7d:b3:89:08:ed:bf:04:17:af:d9:1f:99:95:75:86:fb:6d:aa: 8c:86:ba:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtDrXHey0x/burQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDIwN1oXDTI1MDcyMzExMDIwN1owLzEtMCsGA1UEAxMk MTIyNzAzNjMtOTVlMy00NTM0LThlMmQtYzYyNjZhMDMzZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWKeOl+cBcE7qP7ZSSqft2ie1P/xGzz0vgCm G7K8Cz8qgNNkrdh+TyjmjCmMvbwpFZbSCIfSr3i53X4VfkDz6gFVtjZ5hMjM/nyZ 3GdHIUqBeEGYIeU9MTkjtMzyECyDQ4XLq3UbKC7zOp3par6W64ZTOHIoMxsvqJqU VK8khzuysY8jCfG+dn89Z+lpnpfMGROxRDj4x3IX2uwuhf3qmnYPGbEhYOMVzZZY htdUhVeUADqlCxBPTEsfb661IKbIfXE0SOoJtAyugz4Q0Oz5Tr99ihxAsatcTxEo HhWYtXBCY95eblEYYH9+/7lQObxjWmYDnwITfiF0+O9cVeRIwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvHTWRJdj8hQyB1F8KRqWsOSMX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWNmMDYyMGQtZjJmMS0z YzVhLTg5N2YtN2FhMTEzZjQ4ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYtR6MFfvjHDcPRfYugS5l8z8U/37VAW7IN7EwfP3OHWH/Ed/RSAwPz eMg84VOyx59m2m37Ubc7H61esOLy7wA7hvRmNfR3qgHMEOyY72/jFyxfRbJ8/31S 3cDgpMbssdR9lH5rkydLv3KT5xvUmhvTmW9D5zJYLImAd7bleP+N4JxDjWbOl1ZN 3XD8mG0JmvzQADLMNjkdgW7pdQEGyzqXdPais83lcDTW/+nqErtTB1AkPsVKKO7g jttZ4QC7fTRlU45zfrnhBDljpR7tEJTmO+fu4ici0mMZNzNw9HoIxFAxED9RhDf6 P32ziQjtvwQXr9kfmZV1hvttqoyGuuQ= -----END CERTIFICATE-----Generated at Tue Apr 29 17:40:27 2025 by rpki-client