$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa File: 30218baa-fe66-3d19-aa8d-27ecd60001e3.roa (raw, json) Hash identifier: oX8S3Nttpd6BgryuwALG5NxHMM9Y4ArP1dvxJgXXk+Y= Subject key identifier: E5:CA:CC:2F:6E:95:A6:75:71:CE:03:61:91:C8:C6:9A:DF:E7:0E:46 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A211956FB7BF82EFE6C167E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa Signing time: Thu 24 Apr 2025 14:10:12 +0000 ROA not before: Thu 24 Apr 2025 14:10:12 +0000 ROA not after: Wed 23 Jul 2025 14:10:12 +0000 asID: 207266 IP address blocks: 65.22.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:95:6f:b7:bf:82:ef:e6:c1:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:10:12 2025 GMT Not After : Jul 23 14:10:12 2025 GMT Subject: CN=61e792a3-8d06-4a04-92f7-a73a68da6861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:72:92:97:31:03:f6:ee:55:7f:ff:e5:0e:35: 74:56:29:6c:7f:50:48:fc:2c:c0:6c:a9:15:be:08: 1f:f9:0d:ed:ef:56:19:c4:af:1a:2c:32:e7:41:a5: b2:ad:2d:1b:ff:c5:2b:cc:f3:e3:1d:4b:51:da:99: 3b:37:4a:26:d3:8d:44:c4:0b:58:a5:99:fe:c9:5b: b6:fb:dc:fe:bc:38:54:e0:70:82:54:a2:bf:54:98: f8:bf:ae:43:f0:73:77:f6:0c:da:a8:e5:55:eb:bf: 12:e3:4a:5a:56:70:e9:75:63:b1:38:6e:af:57:a9: b9:f1:bc:96:4e:cf:b2:38:a8:eb:a1:37:c4:f7:42: 64:6a:a3:42:79:8b:39:f9:b9:d9:4a:5e:df:99:c8: de:57:77:2b:18:e0:32:b2:9f:5d:3d:55:b5:a0:64: 4d:36:54:da:4a:9b:c8:73:2f:b2:50:63:39:30:bd: f0:fc:75:42:ae:37:4c:bc:7b:e8:50:c1:dd:88:d9: d7:8d:65:48:69:e0:f2:e6:00:5f:dc:7a:96:7a:1b: 50:a3:87:db:57:01:1b:f5:6f:8f:78:50:fe:be:b5: 95:07:2c:b9:c3:04:3d:a0:e4:71:b5:21:d8:78:6d: 46:f4:0e:95:18:fd:d4:d8:26:80:ec:cd:40:80:92: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CA:CC:2F:6E:95:A6:75:71:CE:03:61:91:C8:C6:9A:DF:E7:0E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:a0:13:be:30:d9:08:7e:bc:02:2e:8a:85:40:ac:6e:ed:fd: 47:ea:93:e4:91:fd:5c:a6:7e:49:00:4c:53:ac:10:80:04:e5: cc:fb:54:2b:d4:3e:32:01:0a:32:12:10:d3:b3:f2:07:57:99: 5b:92:c5:18:8d:28:94:89:d8:30:b8:cd:a2:9f:91:e1:ba:11: 25:e8:1c:20:fa:5b:a3:c9:1c:a5:81:6e:1a:50:2b:3f:0e:3d: 51:21:c2:f8:1f:e8:c3:1f:e1:97:7b:61:d3:d8:3f:2d:ce:6e: 25:a7:8b:c1:ff:cb:b4:d6:2c:76:29:2f:df:fb:e7:38:b1:27: b7:77:e6:ed:69:ca:60:87:d0:cc:b5:71:37:32:c5:51:e7:e8: 08:a5:6c:68:97:ae:c6:4a:93:c0:fe:83:41:c6:eb:ae:9c:b8: ef:82:78:2d:a7:a2:8f:8e:91:ac:72:79:de:1f:cf:ad:6e:48: 04:f7:f0:87:b2:d0:7d:33:30:47:79:21:ca:d2:f6:6c:5a:94: 6f:de:b1:63:a4:35:bb:27:19:c3:bc:0a:df:46:56:d5:cc:de: ab:40:14:5b:80:28:80:a7:2f:2a:39:00:79:16:98:74:7b:83: 9c:b6:a0:89:0d:fb:8f:8c:f1:51:40:82:dc:d8:2b:39:ea:8f: a6:83:22:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEZVvt7+C7+bBZ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTAxMloXDTI1MDcyMzE0MTAxMlowLzEtMCsGA1UEAxMk NjFlNzkyYTMtOGQwNi00YTA0LTkyZjctYTczYTY4ZGE2ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHKSlzED9u5Vf//lDjV0Vilsf1BI/CzAbKkV vggf+Q3t71YZxK8aLDLnQaWyrS0b/8UrzPPjHUtR2pk7N0om041ExAtYpZn+yVu2 +9z+vDhU4HCCVKK/VJj4v65D8HN39gzaqOVV678S40paVnDpdWOxOG6vV6m58byW Ts+yOKjroTfE90JkaqNCeYs5+bnZSl7fmcjeV3crGOAysp9dPVW1oGRNNlTaSpvI cy+yUGM5ML3w/HVCrjdMvHvoUMHdiNnXjWVIaeDy5gBf3HqWehtQo4fbVwEb9W+P eFD+vrWVByy5wwQ9oORxtSHYeG1G9A6VGP3U2CaA7M1AgJJXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXKzC9ulaZ1cc4DYZHIxprf5w5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzAyMThiYWEtZmU2Ni0z ZDE5LWFhOGQtMjdlY2Q2MDAwMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+gE74w2Qh+vAIuioVArG7t/Ufqk+SR/VymfkkATFOsEIAE5cz7VCvU PjIBCjISENOz8gdXmVuSxRiNKJSJ2DC4zaKfkeG6ESXoHCD6W6PJHKWBbhpQKz8O PVEhwvgf6MMf4Zd7YdPYPy3ObiWni8H/y7TWLHYpL9/75zixJ7d35u1pymCH0My1 cTcyxVHn6AilbGiXrsZKk8D+g0HG666cuO+CeC2noo+Okaxyed4fz61uSAT38Iey 0H0zMEd5IcrS9mxalG/esWOkNbsnGcO8Ct9GVtXM3qtAFFuAKICnLyo5AHkWmHR7 g5y2oIkN+4+M8VFAgtzYKznqj6aDInE= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:26 2025 by rpki-client