$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa File: 3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa (raw, json) Hash identifier: byIbmHXOuGvVKNdGK2W0dJWvnkEffboQh1ghQZzQwF8= Subject key identifier: 7D:3B:CD:1D:7C:17:DD:A5:99:D3:7D:F3:4C:F9:7B:0E:94:59:A1:F8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B842DF1AC02B2CAD41FF40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa Signing time: Thu 24 Apr 2025 11:10:14 +0000 ROA not before: Thu 24 Apr 2025 11:10:14 +0000 ROA not after: Wed 23 Jul 2025 11:10:14 +0000 asID: 12041 IP address blocks: 65.22.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:42:df:1a:c0:2b:2c:ad:41:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:14 2025 GMT Not After : Jul 23 11:10:14 2025 GMT Subject: CN=e91f20b7-c0d0-49bd-8390-8c7cb51cde8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d0:f2:5c:5c:a7:4c:5b:00:62:c6:7e:f6:1c: de:10:12:f0:e9:79:bd:23:5a:1f:fa:b3:bf:91:6a: a7:36:32:85:6a:d1:5d:f1:ae:c2:23:3d:a6:1e:d4: 30:a5:c1:43:40:a3:4f:89:73:48:7a:e2:73:8b:77: 45:89:04:6a:b9:1a:98:2b:ad:8e:82:36:09:13:45: e9:e6:e0:bc:80:85:4e:e0:5a:b5:54:40:d6:b4:7a: 89:0f:ce:1b:d3:7c:1f:53:9d:09:ec:ec:7d:c5:25: 34:e6:7b:3b:9c:41:9c:ce:ad:b6:0d:ee:c9:f3:83: 7a:86:4c:0d:57:6f:1e:c3:5b:db:3b:0e:4c:d2:6a: ef:2c:51:1b:94:b9:0b:cc:52:23:95:e0:d6:0c:33: b4:6f:e2:c3:ab:77:fc:88:2b:14:55:51:ca:d2:a5: 97:b7:0f:89:19:02:62:2b:97:e1:59:aa:a4:49:8c: 36:3c:e4:fc:d4:79:c6:5c:05:2b:a1:b6:5d:d7:f7: b4:ae:37:f4:5d:42:c8:a5:eb:3d:7a:72:6d:a9:13: 1e:03:53:ec:03:e6:f5:cd:98:f0:b9:57:c0:31:ef: 17:72:2c:d5:03:79:6d:71:60:16:67:c2:75:80:43: e9:19:d1:0c:ba:2a:ca:c0:c5:c7:6f:f7:b8:d1:f1: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3B:CD:1D:7C:17:DD:A5:99:D3:7D:F3:4C:F9:7B:0E:94:59:A1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:58:48:03:c8:cf:73:c9:18:bc:2a:17:fa:72:3f:26:b0:22: 90:f5:87:a6:3d:32:29:50:b7:75:34:01:47:86:4c:1b:4a:ce: 25:2c:80:26:77:21:34:5f:02:13:39:eb:fa:f3:4d:14:66:52: e2:dc:a8:63:e6:79:d9:41:c0:0f:5b:19:f6:ec:18:b3:7d:f0: 3b:9b:d9:63:f3:de:e1:c6:2e:b9:27:1b:ba:27:67:ab:09:83: 4d:44:3b:77:ba:4c:69:f4:6f:ac:b6:7d:80:5c:2c:16:e7:ef: 39:28:04:52:b0:a0:57:c5:89:b3:be:24:b4:b7:ba:eb:e0:23: 62:07:61:e4:4a:44:12:3a:20:8d:ea:11:61:50:d5:9d:8d:ad: 90:77:ae:57:66:6f:7e:d1:54:6d:10:32:de:be:92:99:a8:41: ac:a1:0c:9c:fa:76:0f:d4:86:10:de:74:75:f3:48:ae:2e:bb: c4:c0:61:17:15:ad:f5:45:2b:0b:db:40:8f:bb:de:88:e6:e9: f5:56:95:40:97:c9:44:b0:83:f8:6a:f2:ee:d0:8c:33:6e:ff: 38:9f:6e:f3:3d:7a:6c:2c:ee:38:77:fb:f8:fd:2a:45:fa:f3: d9:db:be:a9:66:c9:c1:7f:70:67:f8:61:70:16:25:94:4a:d5: a6:a9:5d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuELfGsArLK1B/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAxNFoXDTI1MDcyMzExMTAxNFowLzEtMCsGA1UEAxMk ZTkxZjIwYjctYzBkMC00OWJkLTgzOTAtOGM3Y2I1MWNkZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdDyXFynTFsAYsZ+9hzeEBLw6Xm9I1of+rO/ kWqnNjKFatFd8a7CIz2mHtQwpcFDQKNPiXNIeuJzi3dFiQRquRqYK62OgjYJE0Xp 5uC8gIVO4Fq1VEDWtHqJD84b03wfU50J7Ox9xSU05ns7nEGczq22De7J84N6hkwN V28ew1vbOw5M0mrvLFEblLkLzFIjleDWDDO0b+LDq3f8iCsUVVHK0qWXtw+JGQJi K5fhWaqkSYw2POT81HnGXAUrobZd1/e0rjf0XULIpes9enJtqRMeA1PsA+b1zZjw uVfAMe8XcizVA3ltcWAWZ8J1gEPpGdEMuirKwMXHb/e40fGfMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH07zR18F92lmdN980z5ew6UWaH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2EyZGVmMTMtMmRjZS0z ZmEyLTg2MGEtZTYwMDFjYzhhMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRblMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBYSAPIz3PJGLwqF/pyPyawIpD1h6Y9MilQt3U0AUeGTBtKziUsgCZ3 ITRfAhM56/rzTRRmUuLcqGPmedlBwA9bGfbsGLN98Dub2WPz3uHGLrknG7onZ6sJ g01EO3e6TGn0b6y2fYBcLBbn7zkoBFKwoFfFibO+JLS3uuvgI2IHYeRKRBI6II3q EWFQ1Z2NrZB3rldmb37RVG0QMt6+kpmoQayhDJz6dg/UhhDedHXzSK4uu8TAYRcV rfVFKwvbQI+73ojm6fVWlUCXyUSwg/hq8u7QjDNu/zifbvM9emws7jh3+/j9KkX6 89nbvqlmycF/cGf4YXAWJZRK1aapXUY= -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:22 2025 by rpki-client