$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2c6bf089-7cdb-3e31-8307-e6c5ce091627.roa File: 2c6bf089-7cdb-3e31-8307-e6c5ce091627.roa (raw, json) Hash identifier: nzCU2dqJtdyV2dKnmhd8m/b9aX0Z5VXXN1YS+jhHwV8= Subject key identifier: 03:A3:C8:4E:B7:80:EB:18:C4:F7:ED:D5:1B:76:F6:00:D5:CF:84:3B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2119F37B30B59E0572CA400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2c6bf089-7cdb-3e31-8307-e6c5ce091627.roa Signing time: Thu 24 Apr 2025 14:10:17 +0000 ROA not before: Thu 24 Apr 2025 14:10:17 +0000 ROA not after: Wed 23 Jul 2025 14:10:17 +0000 asID: 207266 IP address blocks: 65.22.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:9f:37:b3:0b:59:e0:57:2c:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:10:17 2025 GMT Not After : Jul 23 14:10:17 2025 GMT Subject: CN=6ab9aa7a-48c2-47a1-9ee8-cfb0150501f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:5e:d1:51:41:ad:14:64:1a:c9:d8:9c:6e: 6e:24:d5:bc:ec:dc:8c:ee:72:2a:96:7d:50:df:99: f6:fc:e6:34:17:5c:bf:3c:91:4c:44:7c:19:eb:b7: 3a:0a:84:b9:4d:1e:e7:87:69:a3:86:29:99:e3:7e: 28:ed:03:c8:81:be:b5:e5:01:6d:ac:48:4b:7f:4a: 1a:cc:dd:84:8e:db:50:2d:a2:44:07:1b:6d:56:fe: 1b:9f:59:1e:08:53:3e:8e:61:c2:86:8e:03:81:92: 62:89:38:97:36:db:8c:1b:47:cb:e1:6a:d2:15:a9: f2:3b:bf:88:8b:e8:d0:c1:7b:75:a0:23:26:7b:c0: d1:ed:0c:bf:0e:0b:6a:56:75:c3:81:94:73:6d:d0: 45:88:d9:10:d3:0c:ea:98:ee:04:58:21:72:8a:16: 7d:06:27:b7:3b:55:18:7b:94:63:71:02:fd:b3:62: 19:df:ae:19:f4:42:52:8a:e9:ab:d3:44:e8:c7:2d: 3e:25:50:1a:d5:a7:f3:44:6d:6b:04:6a:5d:18:56: 91:86:cb:d3:0e:b5:3e:c6:5e:28:4e:3c:c4:7b:a2: 94:b1:3a:84:61:3c:c6:30:82:fb:56:05:f8:ba:5d: bd:b7:21:dc:2b:59:f9:f0:d9:6c:e4:37:55:3e:00: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A3:C8:4E:B7:80:EB:18:C4:F7:ED:D5:1B:76:F6:00:D5:CF:84:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2c6bf089-7cdb-3e31-8307-e6c5ce091627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b2:ce:f1:d3:35:f3:e7:6c:ba:a7:8a:45:9f:95:b1:64:4f: 5a:64:8a:13:97:75:45:c7:6f:ca:49:7a:36:5d:0e:89:f0:68: 9b:19:8f:5c:1a:0d:29:85:1c:86:1e:a8:e0:20:b4:9e:ef:7b: 1b:5d:a9:57:62:8a:7d:1f:3b:fa:50:0d:92:9e:70:8d:a9:6f: 30:bb:3a:db:bd:59:39:d0:c2:2e:ea:3c:32:b9:a2:54:7d:4e: 73:60:45:e7:7d:55:ef:e2:7e:2c:53:f8:49:1e:72:f5:68:a5: cc:4c:43:83:ec:77:f1:e0:91:13:ea:ee:2e:b7:e4:09:51:c1: d7:ed:35:1d:bf:5c:a4:e6:d2:7c:82:0e:9b:15:90:a0:5c:7b: 73:de:fd:f4:02:5b:83:8c:78:ee:07:a6:a0:ec:62:48:6b:97: 39:28:52:b3:b9:db:00:14:30:2d:22:b8:b3:3e:e2:cd:99:ee: c7:8e:98:ac:18:5c:76:34:4a:a8:4b:1d:ee:10:20:a1:86:93: c4:b8:38:58:2e:81:d1:b3:5d:df:cb:82:3e:00:01:01:af:bb: 1d:37:74:5d:2e:b5:fc:e4:b3:dc:81:ad:48:3e:9a:be:cc:a7: e8:ab:71:eb:b8:b3:87:63:97:05:a9:34:21:23:3f:4f:b8:3f: 76:61:4d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEZ83swtZ4FcspAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTAxN1oXDTI1MDcyMzE0MTAxN1owLzEtMCsGA1UEAxMk NmFiOWFhN2EtNDhjMi00N2ExLTllZTgtY2ZiMDE1MDUwMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqNe0VFBrRRkGsnYnG5uJNW87NyM7nIqln1Q 35n2/OY0F1y/PJFMRHwZ67c6CoS5TR7nh2mjhimZ434o7QPIgb615QFtrEhLf0oa zN2EjttQLaJEBxttVv4bn1keCFM+jmHCho4DgZJiiTiXNtuMG0fL4WrSFanyO7+I i+jQwXt1oCMme8DR7Qy/DgtqVnXDgZRzbdBFiNkQ0wzqmO4EWCFyihZ9Bie3O1UY e5RjcQL9s2IZ364Z9EJSiumr00Toxy0+JVAa1afzRG1rBGpdGFaRhsvTDrU+xl4o TjzEe6KUsTqEYTzGMIL7VgX4ul29tyHcK1n58Nls5DdVPgCwxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOjyE63gOsYxPft1Rt29gDVz4Q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmM2YmYwODktN2NkYi0z ZTMxLTgzMDctZTZjNWNlMDkxNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGyzvHTNfPnbLqnikWflbFkT1pkihOXdUXHb8pJejZdDonwaJsZj1wa DSmFHIYeqOAgtJ7vextdqVdiin0fO/pQDZKecI2pbzC7Otu9WTnQwi7qPDK5olR9 TnNgRed9Ve/ifixT+EkecvVopcxMQ4Psd/HgkRPq7i635AlRwdftNR2/XKTm0nyC DpsVkKBce3Pe/fQCW4OMeO4HpqDsYkhrlzkoUrO52wAUMC0iuLM+4s2Z7seOmKwY XHY0SqhLHe4QIKGGk8S4OFgugdGzXd/Lgj4AAQGvux03dF0utfzks9yBrUg+mr7M p+irceu4s4djlwWpNCEjP0+4P3ZhTQ8= -----END CERTIFICATE-----Generated at Wed Apr 30 01:33:52 2025 by rpki-client