$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/257d7c39-dbbe-342d-bc1e-846679ee5b40.roa File: 257d7c39-dbbe-342d-bc1e-846679ee5b40.roa (raw, json) Hash identifier: TRQl1bqcYgWeWLoPOU4mhwejrORDED7Bug1PjQU2yR8= Subject key identifier: 59:0C:F7:96:E9:F5:1B:96:63:38:49:B2:FD:54:8B:F7:D0:FC:5D:85 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B759DE195E8CE39742C500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/257d7c39-dbbe-342d-bc1e-846679ee5b40.roa Signing time: Thu 24 Apr 2025 11:08:24 +0000 ROA not before: Thu 24 Apr 2025 11:08:24 +0000 ROA not after: Wed 23 Jul 2025 11:08:24 +0000 asID: 12041 IP address blocks: 65.22.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:59:de:19:5e:8c:e3:97:42:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:24 2025 GMT Not After : Jul 23 11:08:24 2025 GMT Subject: CN=825136c1-8924-4683-b709-2414261e0aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:85:56:55:71:bc:c5:a4:65:45:93:47:0b:38: f6:4a:9b:1a:62:71:ec:1b:4f:8b:26:35:ff:1c:94: 0d:16:8c:0a:56:30:1f:d2:c5:d8:e3:44:bd:26:86: d1:a1:fa:2f:77:a6:f2:2c:91:52:89:a7:0a:d9:09: c8:1e:95:a6:04:a3:18:08:2b:96:70:61:37:b3:b0: 9b:57:68:9d:74:59:0b:c3:c2:61:31:fa:f5:5b:01: 9b:93:27:58:fd:a6:0d:c2:32:2b:ba:83:24:35:28: b0:21:6c:fb:29:7d:ac:86:f4:24:4d:30:08:9b:da: 34:34:c0:9d:0a:79:53:1a:4a:3f:d0:a9:67:f0:a9: 3e:fe:c8:50:46:d3:a9:8b:62:ef:88:d6:70:46:0e: 36:cd:f5:38:fa:42:20:21:b4:8f:ff:4b:f2:0b:79: d8:2d:b8:93:c7:75:af:07:b4:54:53:20:d0:2b:ad: bc:e6:9b:1b:d5:eb:e9:9f:f9:bc:75:26:45:a0:06: 36:f4:e1:39:62:fc:35:92:df:7c:67:a2:4f:95:69: a9:bb:58:27:49:ec:63:56:cf:18:d1:6c:7a:79:b8: b3:3c:30:49:52:db:ce:d6:d2:1f:61:79:4f:10:67: 3c:f6:de:fc:1d:58:58:b0:8c:37:25:93:b9:f4:f4: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0C:F7:96:E9:F5:1B:96:63:38:49:B2:FD:54:8B:F7:D0:FC:5D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/257d7c39-dbbe-342d-bc1e-846679ee5b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:71:1a:17:8c:07:d1:4f:fe:1b:03:0f:ac:84:c4:39:67:d1: 43:7f:cc:e6:7c:d8:38:52:7b:ac:c7:d3:ad:34:92:95:30:9a: 2f:73:de:12:2f:0b:f5:81:6e:d8:bd:06:00:dc:99:79:92:f2: 92:42:48:4d:20:7d:c1:71:bb:14:2e:ee:25:fc:83:61:a5:d0: 44:80:06:e2:d2:48:6c:e8:ee:37:5e:4e:d4:99:14:3b:4b:58: e0:13:f1:72:62:e0:08:2f:c3:d7:61:c2:36:13:21:9a:16:4b: 87:a1:7a:1e:86:a6:1d:67:2d:63:43:1f:de:1d:7b:2b:51:50: c6:c4:bf:e6:4b:46:d2:68:af:db:64:98:fb:08:de:3d:88:74: c2:21:29:42:3a:26:64:72:63:e0:a3:6a:42:af:18:5d:c1:62: 1a:de:62:51:ef:06:53:b1:b3:b6:a9:b6:e3:9e:fc:d1:69:ed: 13:56:36:43:6c:cb:80:82:1b:72:63:2e:d8:ef:62:df:8f:c2: 26:b6:09:59:f4:c6:d0:ba:9a:df:93:71:01:a9:27:a4:bc:0e: 21:34:b1:3d:4c:15:01:10:82:00:50:fb:8c:40:5a:80:cb:a9: 34:25:5b:6c:eb:b0:db:a2:98:60:51:3c:9b:c4:05:26:e5:4e: ab:44:7a:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht1neGV6M45dCxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgyNFoXDTI1MDcyMzExMDgyNFowLzEtMCsGA1UEAxMk ODI1MTM2YzEtODkyNC00NjgzLWI3MDktMjQxNDI2MWUwYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIVWVXG8xaRlRZNHCzj2SpsaYnHsG0+LJjX/ HJQNFowKVjAf0sXY40S9JobRofovd6byLJFSiacK2QnIHpWmBKMYCCuWcGE3s7Cb V2iddFkLw8JhMfr1WwGbkydY/aYNwjIruoMkNSiwIWz7KX2shvQkTTAIm9o0NMCd CnlTGko/0Kln8Kk+/shQRtOpi2LviNZwRg42zfU4+kIgIbSP/0vyC3nYLbiTx3Wv B7RUUyDQK6285psb1evpn/m8dSZFoAY29OE5Yvw1kt98Z6JPlWmpu1gnSexjVs8Y 0Wx6ebizPDBJUtvO1tIfYXlPEGc89t78HVhYsIw3JZO59PRPJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkM95bp9RuWYzhJsv1Ui/fQ/F2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjU3ZDdjMzktZGJiZS0z NDJkLWJjMWUtODQ2Njc5ZWU1YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABxGheMB9FP/hsDD6yExDln0UN/zOZ82DhSe6zH0600kpUwmi9z3hIv C/WBbti9BgDcmXmS8pJCSE0gfcFxuxQu7iX8g2Gl0ESABuLSSGzo7jdeTtSZFDtL WOAT8XJi4Agvw9dhwjYTIZoWS4eheh6Gph1nLWNDH94deytRUMbEv+ZLRtJor9tk mPsI3j2IdMIhKUI6JmRyY+CjakKvGF3BYhreYlHvBlOxs7aptuOe/NFp7RNWNkNs y4CCG3JjLtjvYt+Pwia2CVn0xtC6mt+TcQGpJ6S8DiE0sT1MFQEQggBQ+4xAWoDL qTQlW2zrsNuimGBRPJvEBSblTqtEeng= -----END CERTIFICATE-----Generated at Tue Apr 29 11:53:31 2025 by rpki-client