$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa File: 3de969ab-1b6a-3c75-99c4-6b44162fead1.roa (raw, json) Hash identifier: Hh7hM3+Ux1aFjn3sNW2vcmW61JXptW6av4r6+IYNTXM= Subject key identifier: 53:63:79:E2:0D:30:A7:37:3B:82:B7:26:42:91:E8:D4:C7:E0:14:6B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B86DA130C78FC360C5DCB0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa Signing time: Thu 24 Apr 2025 11:10:34 +0000 ROA not before: Thu 24 Apr 2025 11:10:34 +0000 ROA not after: Wed 23 Jul 2025 11:10:34 +0000 asID: 12041 IP address blocks: 65.22.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:6d:a1:30:c7:8f:c3:60:c5:dc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:34 2025 GMT Not After : Jul 23 11:10:34 2025 GMT Subject: CN=3e469364-d962-45c2-ae7c-89a6c30a376f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:d0:a1:58:8a:3a:62:c3:e5:79:b7:5e:2c: 2a:48:1b:54:7b:11:9b:b5:2a:f2:b2:8b:2a:ca:96: 2a:42:15:2a:37:d6:a1:0d:b6:b5:fb:6d:77:4b:04: f8:23:4b:7a:93:da:de:60:cc:89:62:99:b8:6d:6c: e1:81:5f:36:cf:75:1c:ed:c2:22:07:e4:f3:1f:98: ed:bf:3f:cf:a2:74:4c:1e:91:3f:36:bd:a7:e5:2f: 17:58:84:ac:d2:6f:24:6e:85:1d:0f:75:38:15:09: 94:cc:93:ce:d3:e0:84:56:2f:01:12:83:9d:9c:64: 88:0c:11:9a:10:66:c5:a6:a9:53:fd:8d:14:99:11: ea:2e:d0:48:38:50:c0:ac:ef:4c:6e:34:ca:0a:3d: 2f:87:df:44:58:3e:cc:9c:92:2f:5b:8e:67:57:27: 77:33:35:52:65:08:79:46:17:3a:09:6e:c8:9b:3a: 75:c7:a7:2b:78:35:50:b4:ea:7d:6e:99:6d:7d:5a: 99:ed:42:2b:a4:e8:dc:2a:dc:b5:22:a2:2d:6e:64: f1:bc:8f:2c:18:da:0d:4e:16:7c:23:f8:19:08:55: 7b:e1:d3:6f:ea:83:6d:80:51:a7:94:17:45:1f:c2: 4f:d2:a8:8f:7b:de:69:eb:45:08:c0:06:df:13:f0: 89:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:63:79:E2:0D:30:A7:37:3B:82:B7:26:42:91:E8:D4:C7:E0:14:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:eb:a2:91:3a:66:da:c2:3f:4f:98:6a:3e:f5:f9:b8:b5:75: e8:9b:bd:a7:0b:90:88:25:7f:b6:bf:e0:d8:96:a9:8b:a7:e5: ac:53:c1:4c:d9:0e:a6:e1:cd:95:75:ab:16:e8:98:01:01:42: 53:ee:ec:4f:9b:57:75:fa:aa:f1:33:a4:46:57:d0:6c:71:3a: 0a:bb:24:6a:53:84:12:38:f6:17:16:36:3a:e7:15:61:a3:e3: 6f:10:9c:e5:cf:71:91:d3:e4:1e:3d:1c:13:2b:55:bf:48:b0: 78:77:8f:2e:8d:f9:46:b6:e1:81:94:44:1e:a9:3a:85:5d:60: 95:e1:08:90:5e:22:0b:65:ae:55:8b:9a:b8:b5:53:90:0b:16: d0:97:88:7a:4f:0f:a6:a4:17:a7:01:a2:20:bf:94:cb:d4:56: 72:df:e7:d3:37:a3:29:6f:2a:63:36:3c:80:2c:8b:10:a2:3f: ab:3d:e2:cf:74:e3:0b:5a:09:aa:4e:4a:c9:ab:09:d4:0d:c3: 8b:d8:d4:5c:8d:a6:f0:4b:6e:af:0c:a5:6a:76:a3:1f:5f:2a: 14:bb:dd:48:7c:db:5c:ea:0f:6c:7b:89:4f:9b:7c:de:14:cd: 9f:e9:8a:ba:58:fa:69:17:15:f8:48:0b:60:f6:d7:a4:9d:aa: dc:47:28:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuG2hMMePw2DF3LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAzNFoXDTI1MDcyMzExMTAzNFowLzEtMCsGA1UEAxMk M2U0NjkzNjQtZDk2Mi00NWMyLWFlN2MtODlhNmMzMGEzNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7fQoViKOmLD5Xm3XiwqSBtUexGbtSrysosq ypYqQhUqN9ahDba1+213SwT4I0t6k9reYMyJYpm4bWzhgV82z3Uc7cIiB+TzH5jt vz/PonRMHpE/Nr2n5S8XWISs0m8kboUdD3U4FQmUzJPO0+CEVi8BEoOdnGSIDBGa EGbFpqlT/Y0UmRHqLtBIOFDArO9MbjTKCj0vh99EWD7MnJIvW45nVyd3MzVSZQh5 Rhc6CW7Imzp1x6creDVQtOp9bpltfVqZ7UIrpOjcKty1IqItbmTxvI8sGNoNThZ8 I/gZCFV74dNv6oNtgFGnlBdFH8JP0qiPe95p60UIwAbfE/CJxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNjeeINMKc3O4K3JkKR6NTH4BRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2RlOTY5YWItMWI2YS0z Yzc1LTk5YzQtNmI0NDE2MmZlYWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTropE6ZtrCP0+Yaj71+bi1deibvacLkIglf7a/4NiWqYun5axTwUzZ DqbhzZV1qxbomAEBQlPu7E+bV3X6qvEzpEZX0GxxOgq7JGpThBI49hcWNjrnFWGj 428QnOXPcZHT5B49HBMrVb9IsHh3jy6N+Ua24YGURB6pOoVdYJXhCJBeIgtlrlWL mri1U5ALFtCXiHpPD6akF6cBoiC/lMvUVnLf59M3oylvKmM2PIAsixCiP6s94s90 4wtaCapOSsmrCdQNw4vY1FyNpvBLbq8MpWp2ox9fKhS73Uh821zqD2x7iU+bfN4U zZ/pirpY+mkXFfhIC2D216SdqtxHKOM= -----END CERTIFICATE-----Generated at Wed Apr 30 05:38:57 2025 by rpki-client