$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa File: 3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa (raw, json) Hash identifier: GJls7vgepDQUprardUPQTZQGMiZReVxukXMA6opjm1Q= Subject key identifier: 24:29:D1:83:60:EB:95:7C:C1:59:33:81:B0:80:D4:82:A2:A3:97:3A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B808295D087387F72B4F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa Signing time: Thu 24 Apr 2025 11:09:46 +0000 ROA not before: Thu 24 Apr 2025 11:09:46 +0000 ROA not after: Wed 23 Jul 2025 11:09:46 +0000 asID: 12041 IP address blocks: 65.22.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:08:29:5d:08:73:87:f7:2b:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:46 2025 GMT Not After : Jul 23 11:09:46 2025 GMT Subject: CN=1c57aecb-b039-4068-ad75-f35522f2c869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a2:8a:73:66:6e:88:25:e6:8c:47:a1:94:77: ce:89:b8:c1:87:6e:71:a0:66:49:6e:da:ae:d1:13: 78:ad:fb:60:30:37:ea:07:61:85:5c:bb:68:87:07: c1:6c:17:3f:ad:8a:d2:ae:b0:0e:17:0b:78:3a:f5: 0c:ca:52:5b:f5:6f:68:c9:37:12:1a:a2:9d:9f:8d: cb:6f:25:63:80:d0:56:0b:55:0d:5d:51:1d:d8:aa: 58:eb:cf:09:39:c4:6a:77:54:fa:fc:de:15:70:03: cf:ad:4b:c7:0f:bb:86:03:39:79:85:85:a4:f0:f0: 8d:d6:13:59:41:02:43:98:1a:b2:82:0c:90:eb:f7: d9:9c:53:73:1b:92:60:74:89:25:7f:0c:23:27:9d: fe:c1:49:59:73:ae:f4:25:96:1c:3f:c8:ac:33:03: 41:e1:b1:7a:2e:4d:69:50:b9:a3:2d:49:ea:f2:2c: 73:06:a0:24:e6:5e:99:1a:3d:ae:f1:01:4e:53:f9: 45:a5:fc:90:e4:c6:de:1b:68:2b:38:9c:06:4c:a1: 86:ef:5d:36:02:cf:77:5a:d9:47:13:92:eb:82:51: b9:ae:c9:12:d0:ca:2d:95:0c:88:bb:b3:4a:17:03: c0:b7:3b:f7:ee:e1:2b:f4:80:3c:2f:1d:d7:99:90: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:29:D1:83:60:EB:95:7C:C1:59:33:81:B0:80:D4:82:A2:A3:97:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:7d:0e:84:aa:48:c5:19:20:d2:9d:b8:31:4e:8d:f9:15:88: 4c:2e:eb:aa:fa:44:e4:f2:f3:92:6d:04:e5:0d:40:04:d3:e6: 2d:b7:34:ea:05:1c:3f:81:b8:20:25:b2:c8:86:25:d4:33:6c: 65:ff:b1:ef:06:4d:d5:08:38:ee:34:cd:29:c1:59:23:a5:05: 8f:da:8a:9c:db:85:57:b3:ec:fa:b4:f6:6f:45:f2:7b:b4:f7: 0b:05:14:a7:4f:c0:45:75:07:10:86:b2:42:4a:b6:72:59:27: b1:f7:be:5c:3a:40:bc:fe:ae:84:62:6d:f8:dc:5e:45:8d:b4: 53:87:47:92:97:78:b4:4c:f6:e7:c3:31:58:1c:da:70:cd:81: 13:92:95:f4:42:7a:f7:15:db:53:b1:e9:e5:62:85:32:e4:21: d5:63:b8:52:66:d8:29:79:ad:a5:7c:91:40:bf:bc:cd:33:1c: b9:af:d7:fb:9b:f9:bd:59:80:db:9d:0d:d2:0f:17:9f:35:ea: dc:73:2a:81:e0:6d:39:2d:61:f8:81:54:b0:11:9b:50:91:7f: 09:33:dd:41:fb:ea:0f:75:dd:69:24:7d:09:d4:b7:c2:a3:ac: cc:e7:a5:a3:5d:73:28:00:36:41:46:48:00:ce:a2:0d:b4:80: 06:4f:85:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuAgpXQhzh/crT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk0NloXDTI1MDcyMzExMDk0NlowLzEtMCsGA1UEAxMk MWM1N2FlY2ItYjAzOS00MDY4LWFkNzUtZjM1NTIyZjJjODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KKKc2ZuiCXmjEehlHfOibjBh25xoGZJbtqu 0RN4rftgMDfqB2GFXLtohwfBbBc/rYrSrrAOFwt4OvUMylJb9W9oyTcSGqKdn43L byVjgNBWC1UNXVEd2KpY688JOcRqd1T6/N4VcAPPrUvHD7uGAzl5hYWk8PCN1hNZ QQJDmBqyggyQ6/fZnFNzG5JgdIklfwwjJ53+wUlZc670JZYcP8isMwNB4bF6Lk1p ULmjLUnq8ixzBqAk5l6ZGj2u8QFOU/lFpfyQ5MbeG2grOJwGTKGG7102As93WtlH E5LrglG5rskS0MotlQyIu7NKFwPAtzv37uEr9IA8Lx3XmZAALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQp0YNg65V8wVkzgbCA1IKio5c6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2M2OWI5YTAtMzNkOS0z Njg3LWEwYzUtMDc1NjRhZWRkMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG19DoSqSMUZINKduDFOjfkViEwu66r6ROTy85JtBOUNQATT5i23NOoF HD+BuCAlssiGJdQzbGX/se8GTdUIOO40zSnBWSOlBY/aipzbhVez7Pq09m9F8nu0 9wsFFKdPwEV1BxCGskJKtnJZJ7H3vlw6QLz+roRibfjcXkWNtFOHR5KXeLRM9ufD MVgc2nDNgROSlfRCevcV21Ox6eVihTLkIdVjuFJm2Cl5raV8kUC/vM0zHLmv1/ub +b1ZgNudDdIPF5816txzKoHgbTktYfiBVLARm1CRfwkz3UH76g913WkkfQnUt8Kj rMznpaNdcygANkFGSADOog20gAZPhR4= -----END CERTIFICATE-----Generated at Tue Apr 29 12:59:58 2025 by rpki-client