$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/376b42c4-3b37-3377-955a-45d8d25e18ec.roa File: 376b42c4-3b37-3377-955a-45d8d25e18ec.roa (raw, json) Hash identifier: rzzexgz4PdMY0hznxJnrjccOcsKmUPr/+6gxI3LQ/RA= Subject key identifier: 66:07:38:21:A0:BB:5B:9E:8F:1F:0E:7D:9E:72:0A:47:E3:35:0A:A5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B8304778B49B3313AB9080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/376b42c4-3b37-3377-955a-45d8d25e18ec.roa Signing time: Thu 24 Apr 2025 11:10:05 +0000 ROA not before: Thu 24 Apr 2025 11:10:05 +0000 ROA not after: Wed 23 Jul 2025 11:10:05 +0000 asID: 12041 IP address blocks: 65.22.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:30:47:78:b4:9b:33:13:ab:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:05 2025 GMT Not After : Jul 23 11:10:05 2025 GMT Subject: CN=82a64804-3a23-48ab-8637-dd6699186498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:33:a9:b9:1e:8b:82:09:68:01:30:44:07:fc: 8a:0c:bd:be:a2:d2:c8:48:6f:2d:a3:e8:52:53:92: 61:a1:ee:e4:8a:0e:ee:a0:47:60:5f:2d:97:f0:3d: 90:45:25:a8:46:ab:8c:b3:ee:60:a7:85:62:fd:94: 7d:a0:1d:56:b7:0d:6e:1e:26:12:6b:04:f8:61:ec: 96:b0:6d:8b:1d:a6:b8:e4:24:69:41:a7:d0:0b:0e: bf:41:2b:a0:38:7f:78:1b:8d:74:fe:58:13:2d:44: ce:e3:19:e4:bc:43:fa:f3:3d:6f:fe:6c:eb:c4:e8: 64:67:ab:f8:fb:7d:93:c8:08:f6:a3:e3:5f:fc:a7: 4e:c7:cf:06:0c:99:79:d1:45:e6:fd:53:f7:95:ed: cd:9f:b7:62:ea:c8:12:35:5f:36:01:10:dc:b5:23: f8:e4:7a:c9:58:66:f2:64:cb:e8:93:26:61:89:4e: 1a:24:ee:4b:5c:01:86:22:d4:db:ef:39:8e:61:50: 45:04:c3:9a:4b:17:e1:e5:5f:e3:40:4c:79:b0:bd: a4:e7:79:2a:30:cd:a0:08:25:8e:33:43:c4:47:0f: 6c:f9:1f:9f:a2:08:99:9e:36:59:ce:89:85:ad:5f: 66:ed:fe:b3:fd:c8:1a:15:3e:f9:da:09:7f:dd:6f: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:07:38:21:A0:BB:5B:9E:8F:1F:0E:7D:9E:72:0A:47:E3:35:0A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/376b42c4-3b37-3377-955a-45d8d25e18ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:40:0a:7f:2c:cd:e9:e4:b5:0b:02:92:f5:09:ce:cb:3d:52: 17:ae:73:c4:f7:5e:ba:f1:ba:4c:38:a6:3e:3c:e5:df:4f:bb: 14:e6:28:b8:44:47:b9:f3:e9:42:c2:04:73:4a:77:e2:c0:a9: a1:af:93:f5:56:54:60:c4:69:89:a4:6d:03:ef:0b:30:8b:a6: 81:1c:14:e2:98:00:d2:94:c5:ea:a3:e9:44:a9:8c:3e:f5:01: 41:c2:95:ca:1b:71:5c:3c:b9:6e:7c:06:2b:11:f9:90:23:92: 01:50:3d:e2:76:2a:d5:94:93:19:53:8c:34:35:d1:ea:5d:f4: c8:18:1e:be:af:b8:b1:ca:c6:72:85:e0:ac:c9:78:50:ab:c8: 4d:35:b3:e5:5c:d3:99:b9:be:5b:72:49:a5:54:0e:1c:63:4b: cf:32:24:3b:c6:93:e9:cd:56:63:7e:03:3e:57:84:be:6d:2f: d2:b8:49:0a:c6:2c:fe:38:2d:bf:3a:4f:ba:8d:a9:1c:dc:1c: b0:10:96:96:08:77:35:43:fb:07:08:55:26:9f:49:6c:36:66: 2c:9c:15:a5:b4:a5:1d:2b:15:c7:24:12:32:ac:09:ad:58:fa: 4f:40:64:3b:8e:86:4b:11:34:17:75:6f:8c:4d:c0:28:bf:0b: ff:c9:ad:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuDBHeLSbMxOrkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAwNVoXDTI1MDcyMzExMTAwNVowLzEtMCsGA1UEAxMk ODJhNjQ4MDQtM2EyMy00OGFiLTg2MzctZGQ2Njk5MTg2NDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDOpuR6LggloATBEB/yKDL2+otLISG8to+hS U5Jhoe7kig7uoEdgXy2X8D2QRSWoRquMs+5gp4Vi/ZR9oB1Wtw1uHiYSawT4YeyW sG2LHaa45CRpQafQCw6/QSugOH94G410/lgTLUTO4xnkvEP68z1v/mzrxOhkZ6v4 +32TyAj2o+Nf/KdOx88GDJl50UXm/VP3le3Nn7di6sgSNV82ARDctSP45HrJWGby ZMvokyZhiU4aJO5LXAGGItTb7zmOYVBFBMOaSxfh5V/jQEx5sL2k53kqMM2gCCWO M0PERw9s+R+fogiZnjZZzomFrV9m7f6z/cgaFT752gl/3W/MRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYHOCGgu1uejx8OfZ5yCkfjNQqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzc2YjQyYzQtM2IzNy0z Mzc3LTk1NWEtNDVkOGQyNWUxOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtACn8szenktQsCkvUJzss9Uheuc8T3Xrrxukw4pj485d9PuxTmKLhE R7nz6ULCBHNKd+LAqaGvk/VWVGDEaYmkbQPvCzCLpoEcFOKYANKUxeqj6USpjD71 AUHClcobcVw8uW58BisR+ZAjkgFQPeJ2KtWUkxlTjDQ10epd9MgYHr6vuLHKxnKF 4KzJeFCryE01s+Vc05m5vltySaVUDhxjS88yJDvGk+nNVmN+Az5XhL5tL9K4SQrG LP44Lb86T7qNqRzcHLAQlpYIdzVD+wcIVSafSWw2ZiycFaW0pR0rFcckEjKsCa1Y +k9AZDuOhksRNBd1b4xNwCi/C//Jrcs= -----END CERTIFICATE-----Generated at Tue Apr 29 12:56:34 2025 by rpki-client