$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b22b322-92ed-3187-89f4-f77e45a98440.roa File: 3b22b322-92ed-3187-89f4-f77e45a98440.roa (raw, json) Hash identifier: vJrqukMNZF9X83OIZeI7oOAGL3faRQqqme1FcAuTspI= Subject key identifier: AB:A4:A7:5A:B1:B6:BC:82:93:65:DD:F0:FE:2F:88:17:EC:91:CF:B0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2122246DB48E2F0267DA220 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b22b322-92ed-3187-89f4-f77e45a98440.roa Signing time: Thu 24 Apr 2025 14:11:19 +0000 ROA not before: Thu 24 Apr 2025 14:11:19 +0000 ROA not after: Wed 23 Jul 2025 14:11:19 +0000 asID: 207266 IP address blocks: 65.22.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:22:46:db:48:e2:f0:26:7d:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:11:19 2025 GMT Not After : Jul 23 14:11:19 2025 GMT Subject: CN=43df8646-63a3-4452-a322-54b5f7071925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:19:13:96:7d:20:43:17:af:89:4b:9c:15: 5a:8f:63:f0:f5:e1:25:c2:b4:61:55:dc:b9:5b:84: a7:18:39:19:38:2c:c6:73:f8:58:40:85:4a:a5:4a: 17:c2:d5:6f:ec:ab:80:7f:b9:6e:3d:51:7c:ad:c3: 40:3f:ee:26:d4:27:cd:43:ab:0a:24:7a:2f:89:05: 99:58:91:c8:48:0d:70:5e:69:5e:e9:61:97:05:a1: 81:1b:99:c4:dd:75:9d:b5:ef:e0:80:51:f6:29:0c: 2a:68:56:d6:13:1a:9b:a8:87:9b:a4:16:26:f2:0d: 7a:46:40:c8:fe:41:d3:cc:1d:67:a1:ea:db:7b:02: a4:04:d0:91:7e:32:67:41:ce:52:43:bc:ab:33:54: 37:a3:ab:da:9d:af:d4:fb:17:96:41:ea:b0:c0:ee: 93:ed:79:86:83:26:cf:08:33:b9:6b:aa:28:1e:ce: 7b:35:c6:85:81:4b:b7:e4:09:d7:25:85:31:2e:2e: 10:ff:a8:8a:7f:c3:69:0c:b4:d0:02:f3:da:5c:d4: 24:37:29:d0:dd:da:e2:5a:92:d3:eb:10:47:1b:02: d5:40:f4:c8:da:71:70:5c:d2:74:8d:23:a4:52:ad: 94:20:10:d2:4c:94:78:f0:13:39:44:56:fd:e5:6f: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A4:A7:5A:B1:B6:BC:82:93:65:DD:F0:FE:2F:88:17:EC:91:CF:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b22b322-92ed-3187-89f4-f77e45a98440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cd:4c:fd:b5:20:cd:c0:68:64:d8:44:a8:5c:ed:43:b5:1d: 30:a1:7e:7b:b2:e2:4e:97:ed:7f:c6:17:55:16:0f:0c:6c:da: 1b:2b:be:c3:3d:1c:df:16:48:2a:01:f2:e8:21:f2:b6:20:59: 20:60:e6:40:4e:42:3e:20:eb:70:c6:41:33:9d:64:56:ec:eb: 91:a4:45:c1:f5:4c:f7:55:7a:01:c7:ee:61:1b:05:4e:ba:49: bb:96:a5:e7:93:9c:a2:eb:37:87:bb:17:f9:2e:16:c0:8a:c1: 09:59:10:a2:ef:13:a2:4f:8d:34:cb:6c:7d:77:f1:10:ce:ae: 41:7e:e7:78:da:1a:73:8e:aa:28:6b:eb:21:39:9c:94:91:c5: 0d:ab:bf:89:30:e4:80:98:bd:30:9f:0b:38:99:a7:ac:7d:5d: 9f:e0:aa:67:96:6b:ce:87:b8:c0:fd:5e:bc:e6:49:8b:92:93: 15:8c:a9:2b:0d:ca:4d:79:64:d5:8e:66:df:b2:6a:08:0a:5f: 3f:9f:c7:fa:6d:49:ad:ae:fe:7f:d9:b5:75:29:15:c5:1d:10: 6c:b0:d7:df:4b:fc:32:30:8e:58:1f:93:53:ab:70:5a:70:5b: 97:88:e7:0c:b5:a6:2d:68:26:5e:96:ca:83:a8:a5:dd:aa:74: f4:d3:da:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEiJG20ji8CZ9oiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTExOVoXDTI1MDcyMzE0MTExOVowLzEtMCsGA1UEAxMk NDNkZjg2NDYtNjNhMy00NDUyLWEzMjItNTRiNWY3MDcxOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvEZE5Z9IEMXr4lLnBVaj2Pw9eElwrRhVdy5 W4SnGDkZOCzGc/hYQIVKpUoXwtVv7KuAf7luPVF8rcNAP+4m1CfNQ6sKJHoviQWZ WJHISA1wXmle6WGXBaGBG5nE3XWdte/ggFH2KQwqaFbWExqbqIebpBYm8g16RkDI /kHTzB1noerbewKkBNCRfjJnQc5SQ7yrM1Q3o6vana/U+xeWQeqwwO6T7XmGgybP CDO5a6ooHs57NcaFgUu35AnXJYUxLi4Q/6iKf8NpDLTQAvPaXNQkNynQ3driWpLT 6xBHGwLVQPTI2nFwXNJ0jSOkUq2UIBDSTJR48BM5RFb95W9r9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKukp1qxtryCk2Xd8P4viBfskc+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2IyMmIzMjItOTJlZC0z MTg3LTg5ZjQtZjc3ZTQ1YTk4NDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrNTP21IM3AaGTYRKhc7UO1HTChfnuy4k6X7X/GF1UWDwxs2hsrvsM9 HN8WSCoB8ugh8rYgWSBg5kBOQj4g63DGQTOdZFbs65GkRcH1TPdVegHH7mEbBU66 SbuWpeeTnKLrN4e7F/kuFsCKwQlZEKLvE6JPjTTLbH138RDOrkF+53jaGnOOqihr 6yE5nJSRxQ2rv4kw5ICYvTCfCziZp6x9XZ/gqmeWa86HuMD9XrzmSYuSkxWMqSsN yk15ZNWOZt+yaggKXz+fx/ptSa2u/n/ZtXUpFcUdEGyw199L/DIwjlgfk1OrcFpw W5eI5wy1pi1oJl6WyoOopd2qdPTT2q0= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:28 2025 by rpki-client