$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa File: 37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa (raw, json) Hash identifier: HMZ0HkzJgqkp5XLhXMfBnTnm8vSyWrn5FEo+SG6Kavc= Subject key identifier: D2:29:D4:62:1D:7B:1C:93:DF:E1:50:6E:E5:39:2A:83:67:3F:88:B5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B85692D544588D93BF3900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa Signing time: Thu 24 Apr 2025 11:10:23 +0000 ROA not before: Thu 24 Apr 2025 11:10:23 +0000 ROA not after: Wed 23 Jul 2025 11:10:23 +0000 asID: 12041 IP address blocks: 65.22.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:56:92:d5:44:58:8d:93:bf:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:23 2025 GMT Not After : Jul 23 11:10:23 2025 GMT Subject: CN=3ee3777d-f928-4f54-8edc-575c943f82a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9a:d3:ac:59:01:ac:62:a3:45:ac:d4:ce:be: f7:f7:af:5f:da:1e:5e:01:53:c6:25:fb:2b:e6:40: e1:60:e0:fe:de:4d:89:42:7c:2f:85:b4:e9:83:5d: 86:bb:49:47:32:81:b9:06:b4:f5:f4:1a:04:5c:72: a0:de:ff:1b:cf:ec:8d:4e:17:1e:f6:4b:bc:b2:bf: 99:a5:d8:3c:c1:ab:36:40:30:fb:e2:d0:20:6d:cc: 45:ec:a1:3b:07:46:86:e0:81:fb:1b:ba:2f:ed:f4: c0:84:f1:53:ce:ec:dc:e4:fe:2a:b0:6d:8b:64:b0: 77:4d:39:09:b6:c7:5e:ef:ce:08:1e:87:64:e3:8c: 8d:d5:99:a3:61:0d:77:80:53:74:1d:a2:7b:52:8d: bb:33:47:e7:6f:c6:e2:f7:ed:a8:a4:40:dd:5f:16: e8:c4:d0:1d:b2:fe:88:eb:fa:03:77:06:e1:cc:e8: 15:fc:aa:b3:fd:29:51:55:f3:99:fe:22:ad:09:b1: d8:82:ef:7a:8f:02:0e:2d:7e:12:99:d7:b5:c8:ab: b5:0d:5f:08:42:2d:61:e7:35:12:76:d0:19:d7:77: 42:c3:3e:c0:a0:1c:7f:3d:21:71:7b:27:a7:05:3c: 4f:c1:fb:f1:b6:a8:b1:f2:52:5f:9b:c5:6b:44:b5: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:29:D4:62:1D:7B:1C:93:DF:E1:50:6E:E5:39:2A:83:67:3F:88:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:60:f5:04:83:cb:6b:30:d0:c4:37:28:63:e2:9c:75:08:a4: 36:7e:d7:62:de:ea:ff:a6:0a:af:c0:6c:9b:3b:8d:b6:74:a1: 38:07:fe:14:20:35:60:3d:c5:34:fa:7f:12:2b:52:74:8b:64: ee:61:ac:07:69:8e:4c:73:2d:44:8b:91:bc:eb:1a:4b:97:f5: bc:d0:cb:20:0f:58:a9:73:fa:35:c6:12:9a:53:ce:79:38:32: 46:ec:e1:65:6e:6d:bb:5c:30:95:58:a4:3a:4c:18:fb:09:94: 24:90:90:64:1e:e9:ae:d2:34:8b:53:a3:39:2b:66:36:9e:a4: c4:89:f6:57:f0:fb:a7:b6:b3:f5:cf:e2:71:8b:6f:b0:12:0b: 72:ab:22:27:52:dd:10:9b:48:65:a5:23:19:ad:32:5e:99:02: c4:3d:f9:50:fc:e8:e4:c4:89:8a:99:86:5c:50:3c:8c:5c:5f: fb:cf:78:bb:39:ca:d1:16:96:50:07:3e:95:c3:f6:56:d5:3a: ee:63:9d:3f:b6:11:52:12:e5:bf:46:68:08:e2:10:b6:e7:22: 1b:cd:22:ea:cc:1a:d6:63:b2:01:bf:aa:7d:51:4a:13:c6:a0: 98:16:6d:66:f8:f4:de:c9:e7:21:29:2f:72:a1:7d:44:ad:34: 73:e1:fd:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuFaS1URYjZO/OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAyM1oXDTI1MDcyMzExMTAyM1owLzEtMCsGA1UEAxMk M2VlMzc3N2QtZjkyOC00ZjU0LThlZGMtNTc1Yzk0M2Y4MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJrTrFkBrGKjRazUzr73969f2h5eAVPGJfsr 5kDhYOD+3k2JQnwvhbTpg12Gu0lHMoG5BrT19BoEXHKg3v8bz+yNThce9ku8sr+Z pdg8was2QDD74tAgbcxF7KE7B0aG4IH7G7ov7fTAhPFTzuzc5P4qsG2LZLB3TTkJ tsde784IHodk44yN1ZmjYQ13gFN0HaJ7Uo27M0fnb8bi9+2opEDdXxboxNAdsv6I 6/oDdwbhzOgV/Kqz/SlRVfOZ/iKtCbHYgu96jwIOLX4Smde1yKu1DV8IQi1h5zUS dtAZ13dCwz7AoBx/PSFxeyenBTxPwfvxtqix8lJfm8VrRLUz1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIp1GIdexyT3+FQbuU5KoNnP4i1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzdhMWZkZTgtNjQ5NC0z YTJkLThjMmYtN2ZhNjdlNWNiOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpg9QSDy2sw0MQ3KGPinHUIpDZ+12Le6v+mCq/AbJs7jbZ0oTgH/hQg NWA9xTT6fxIrUnSLZO5hrAdpjkxzLUSLkbzrGkuX9bzQyyAPWKlz+jXGEppTznk4 Mkbs4WVubbtcMJVYpDpMGPsJlCSQkGQe6a7SNItTozkrZjaepMSJ9lfw+6e2s/XP 4nGLb7ASC3KrIidS3RCbSGWlIxmtMl6ZAsQ9+VD86OTEiYqZhlxQPIxcX/vPeLs5 ytEWllAHPpXD9lbVOu5jnT+2EVIS5b9GaAjiELbnIhvNIurMGtZjsgG/qn1RShPG oJgWbWb49N7J5yEpL3KhfUStNHPh/eE= -----END CERTIFICATE-----Generated at Tue Apr 29 14:57:56 2025 by rpki-client