$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/32f9a1cc-eae9-36f5-9c08-779779b567b6.roa File: 32f9a1cc-eae9-36f5-9c08-779779b567b6.roa (raw, json) Hash identifier: eq8AqoGVTXcA+cC8VHzUrR4jWfB5fg5KTYjIoGDTPJk= Subject key identifier: BB:2D:4A:3A:C3:F7:45:59:D0:CC:5B:49:2D:76:5D:C3:FC:8C:BA:BA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B84D96AF886A41F1004880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/32f9a1cc-eae9-36f5-9c08-779779b567b6.roa Signing time: Thu 24 Apr 2025 11:10:19 +0000 ROA not before: Thu 24 Apr 2025 11:10:19 +0000 ROA not after: Wed 23 Jul 2025 11:10:19 +0000 asID: 12041 IP address blocks: 65.22.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:4d:96:af:88:6a:41:f1:00:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:19 2025 GMT Not After : Jul 23 11:10:19 2025 GMT Subject: CN=06b9b33d-5f1b-41be-aeb4-a5bf955e0d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6c:47:f5:58:12:53:2c:2c:3d:8d:a6:2e:89: f7:dc:8f:12:ee:cc:88:0b:98:17:dc:22:9d:40:42: 8b:9e:a9:d4:06:01:87:b5:fb:ce:f4:8e:02:0c:6c: 8a:0a:b1:65:27:76:1e:57:6e:a8:8b:5b:e6:c7:aa: e5:c7:e2:6a:cd:0b:cc:7f:30:61:72:a5:8b:16:15: e2:22:7a:76:89:e5:2a:7a:95:f7:37:c2:65:05:41: 79:85:08:f0:b4:c3:14:68:f9:ae:0e:7c:a9:b2:fb: 83:d7:f3:c1:16:59:88:cc:3d:dc:c1:af:a4:77:57: 0c:e7:50:d1:4c:b8:3a:d3:72:a6:b0:13:4a:e5:ca: 7b:2a:af:5b:9a:0a:34:26:db:98:07:ed:1f:b9:cb: 4a:5a:58:e4:33:81:ad:35:01:1f:fe:07:17:86:70: 50:f0:bf:75:a8:13:ae:f3:00:35:54:4b:cb:88:42: b3:a0:1f:b3:31:f3:09:a8:a1:9c:ae:2a:98:4f:eb: c7:32:f2:45:ef:60:1d:cc:18:26:40:ac:5c:c2:95: 31:8e:bf:58:97:5c:28:5d:14:c5:eb:d9:49:a2:73: 16:13:21:a4:fb:8c:73:d9:ae:3a:da:9f:e8:e4:23: a0:74:b2:d3:b9:ab:31:10:6b:c1:57:17:7c:51:66: b4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2D:4A:3A:C3:F7:45:59:D0:CC:5B:49:2D:76:5D:C3:FC:8C:BA:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/32f9a1cc-eae9-36f5-9c08-779779b567b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b3:29:ec:35:21:8d:e8:81:38:f6:2a:d0:cd:52:14:87:40: 93:ac:0a:25:a4:69:23:f9:d5:71:11:98:6f:cb:df:46:a4:14: 4f:22:87:3b:0e:b4:91:92:9e:90:b3:0a:74:d9:0e:73:db:ef: 39:9e:46:54:b0:78:94:9c:32:f2:58:4d:b9:7b:ae:60:64:1e: 96:43:8c:a7:0f:f9:88:3d:2e:c7:e8:bf:34:6b:73:a7:f5:79: e1:de:80:62:06:4e:18:62:6f:9f:8e:45:2d:ff:0d:2b:a1:84: 67:91:be:f3:b2:54:02:5b:28:17:d7:84:dc:e5:c9:a7:26:64: 07:96:31:88:be:b4:bb:93:0e:a4:1a:bb:0c:af:8e:73:41:5f: 14:43:91:66:99:50:68:80:0c:51:78:6b:98:7b:1b:b0:d8:e9: 77:c8:3a:1e:3d:1f:21:b6:27:ee:08:95:4a:bf:f7:4c:81:96: 72:bc:69:28:f6:51:69:64:88:76:4a:6a:2b:d3:4f:f4:b0:0e: 41:81:2e:37:68:6d:de:44:b3:b4:20:32:8b:3b:fd:d7:97:00: c3:c1:1c:78:ff:79:41:25:2c:ab:fc:28:15:1d:95:f7:6c:ec: b1:4e:87:0b:34:f0:d9:28:45:f4:07:79:22:f5:61:9f:c1:71: 88:03:91:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuE2Wr4hqQfEASIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAxOVoXDTI1MDcyMzExMTAxOVowLzEtMCsGA1UEAxMk MDZiOWIzM2QtNWYxYi00MWJlLWFlYjQtYTViZjk1NWUwZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GxH9VgSUywsPY2mLon33I8S7syIC5gX3CKd QEKLnqnUBgGHtfvO9I4CDGyKCrFlJ3YeV26oi1vmx6rlx+JqzQvMfzBhcqWLFhXi Inp2ieUqepX3N8JlBUF5hQjwtMMUaPmuDnypsvuD1/PBFlmIzD3cwa+kd1cM51DR TLg603KmsBNK5cp7Kq9bmgo0JtuYB+0fuctKWljkM4GtNQEf/gcXhnBQ8L91qBOu 8wA1VEvLiEKzoB+zMfMJqKGcriqYT+vHMvJF72AdzBgmQKxcwpUxjr9Yl1woXRTF 69lJonMWEyGk+4xz2a462p/o5COgdLLTuasxEGvBVxd8UWa0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLstSjrD90VZ0MxbSS12XcP8jLq6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzJmOWExY2MtZWFlOS0z NmY1LTljMDgtNzc5Nzc5YjU2N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISzKew1IY3ogTj2KtDNUhSHQJOsCiWkaSP51XERmG/L30akFE8ihzsO tJGSnpCzCnTZDnPb7zmeRlSweJScMvJYTbl7rmBkHpZDjKcP+Yg9LsfovzRrc6f1 eeHegGIGThhib5+ORS3/DSuhhGeRvvOyVAJbKBfXhNzlyacmZAeWMYi+tLuTDqQa uwyvjnNBXxRDkWaZUGiADFF4a5h7G7DY6XfIOh49HyG2J+4IlUq/90yBlnK8aSj2 UWlkiHZKaivTT/SwDkGBLjdobd5Es7QgMos7/deXAMPBHHj/eUElLKv8KBUdlfds 7LFOhws08NkoRfQHeSL1YZ/BcYgDkUc= -----END CERTIFICATE-----Generated at Tue Apr 29 18:35:24 2025 by rpki-client