$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa File: 3f64db9d-d1d8-3530-a912-accd8e8cae42.roa (raw, json) Hash identifier: qpb9dCjeUvWWMNAz3MuOJcoc+X4v/saD+gpWVW9lYPs= Subject key identifier: 70:65:D3:1F:A5:90:B0:FE:F5:5C:34:89:82:0A:0F:AE:1A:C7:0F:B3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7A2D17A6B4243F716A2C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa Signing time: Thu 24 Apr 2025 11:08:58 +0000 ROA not before: Thu 24 Apr 2025 11:08:58 +0000 ROA not after: Wed 23 Jul 2025 11:08:58 +0000 asID: 12041 IP address blocks: 65.22.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:a2:d1:7a:6b:42:43:f7:16:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:58 2025 GMT Not After : Jul 23 11:08:58 2025 GMT Subject: CN=57b63b8e-b480-461a-91bc-514d31740502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:b5:87:ad:c9:49:06:31:0a:fd:9d:ef:f5: f0:65:8b:fe:43:6c:64:8b:b4:b0:98:6b:8b:3b:42: 05:1d:e4:19:da:00:d2:12:d1:01:e6:ad:93:8d:45: 8e:d2:19:f4:d4:5d:bf:bd:2d:b3:67:98:3d:e8:76: 8c:4f:76:07:40:a2:93:bd:d0:cc:7f:86:3f:9f:62: 22:c3:37:ae:96:0c:0b:19:6d:2b:99:bc:e2:78:eb: eb:f3:52:30:be:15:dc:98:d8:b4:16:a5:c7:b9:c1: 5f:1c:08:43:b4:b5:cd:25:60:13:73:0a:79:b0:ce: 64:27:c8:ed:8b:ae:96:e3:34:47:f7:fc:6b:46:cd: 56:77:c4:90:5d:77:14:32:ca:8f:a1:98:5c:9a:16: bf:ae:96:e4:c9:c2:9a:a1:96:55:d3:5c:3a:24:94: 4a:fb:08:16:bc:3f:aa:cb:d3:c2:f3:d9:fe:c0:5d: 4f:4f:77:5e:d6:7b:28:c6:6e:14:93:c2:78:a0:d0: 01:74:4e:6e:c4:50:78:91:66:e0:55:c6:8d:6d:d6: e4:db:28:62:c4:d8:7b:ac:6f:56:e8:35:b4:2f:b9: 3d:e6:f7:a3:ac:28:12:52:eb:d5:bd:92:37:25:45: 3e:03:1a:e6:0a:ba:55:99:40:7a:d4:47:db:d8:9d: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:65:D3:1F:A5:90:B0:FE:F5:5C:34:89:82:0A:0F:AE:1A:C7:0F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:97:04:3c:83:da:2a:cb:25:27:6b:11:6a:48:c9:fe:d1:5d: 95:97:25:6f:9a:cf:ac:b8:f0:df:7e:77:61:3a:0c:c0:b6:38: 15:c0:88:32:5b:84:2c:84:f5:47:0c:4b:69:7f:48:c0:d0:ef: 32:fe:e6:21:69:d8:64:60:20:54:30:d5:96:32:3f:4c:63:02: 08:43:40:d4:ac:ec:a4:b3:13:db:cc:5c:cb:5e:73:02:07:84: 82:b9:cc:92:8b:3b:67:32:c3:64:8d:86:eb:1c:2e:8c:06:05: 05:b7:06:2f:e4:4a:2f:5d:93:1a:33:6a:d4:e7:1a:51:81:66: 28:39:5e:06:18:a0:27:58:00:8b:d8:04:0a:de:a0:18:6c:e3: 63:4e:6b:56:44:11:8f:a4:29:87:66:df:47:e3:fc:3c:db:5f: 4e:2d:fe:88:68:bd:16:45:5c:27:bc:de:52:25:d9:50:f7:39: ad:e1:a3:1f:39:c8:91:ec:f5:28:46:9a:0e:0c:79:c5:67:eb: c6:05:17:80:60:d5:ec:9f:48:6b:d9:00:4e:4f:35:c3:1c:28: a6:f1:55:f7:3e:08:79:1f:86:35:37:78:ca:cf:0d:51:f0:8e: 02:e8:4e:4c:98:e2:b2:2e:36:1b:16:db:5d:ef:be:e9:2c:3b: f3:54:c3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht6LRemtCQ/cWosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1OFoXDTI1MDcyMzExMDg1OFowLzEtMCsGA1UEAxMk NTdiNjNiOGUtYjQ4MC00NjFhLTkxYmMtNTE0ZDMxNzQwNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+y1h63JSQYxCv2d7/XwZYv+Q2xki7SwmGuL O0IFHeQZ2gDSEtEB5q2TjUWO0hn01F2/vS2zZ5g96HaMT3YHQKKTvdDMf4Y/n2Ii wzeulgwLGW0rmbzieOvr81IwvhXcmNi0FqXHucFfHAhDtLXNJWATcwp5sM5kJ8jt i66W4zRH9/xrRs1Wd8SQXXcUMsqPoZhcmha/rpbkycKaoZZV01w6JJRK+wgWvD+q y9PC89n+wF1PT3de1nsoxm4Uk8J4oNABdE5uxFB4kWbgVcaNbdbk2yhixNh7rG9W 6DW0L7k95vejrCgSUuvVvZI3JUU+AxrmCrpVmUB61Efb2J12ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBl0x+lkLD+9Vw0iYIKD64axw+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Y2NGRiOWQtZDFkOC0z NTMwLWE5MTItYWNjZDhlOGNhZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqXBDyD2irLJSdrEWpIyf7RXZWXJW+az6y48N9+d2E6DMC2OBXAiDJb hCyE9UcMS2l/SMDQ7zL+5iFp2GRgIFQw1ZYyP0xjAghDQNSs7KSzE9vMXMtecwIH hIK5zJKLO2cyw2SNhuscLowGBQW3Bi/kSi9dkxozatTnGlGBZig5XgYYoCdYAIvY BAreoBhs42NOa1ZEEY+kKYdm30fj/DzbX04t/ohovRZFXCe83lIl2VD3Oa3hox85 yJHs9ShGmg4MecVn68YFF4Bg1eyfSGvZAE5PNcMcKKbxVfc+CHkfhjU3eMrPDVHw jgLoTkyY4rIuNhsW213vvuksO/NUw50= -----END CERTIFICATE-----Generated at Tue Apr 29 16:19:01 2025 by rpki-client