$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41758d69-049a-3c34-bc9f-336becf7d819.roa File: 41758d69-049a-3c34-bc9f-336becf7d819.roa (raw, json) Hash identifier: Vs8J0ZwFObsn/+gFKzOBQ2tXs8eferHEwKbVpowexno= Subject key identifier: 61:61:0D:FA:11:4C:6D:8F:D8:69:7E:15:9A:C8:C4:7A:7A:52:91:6D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B869365F59ED9A1E275E40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41758d69-049a-3c34-bc9f-336becf7d819.roa Signing time: Thu 24 Apr 2025 11:10:32 +0000 ROA not before: Thu 24 Apr 2025 11:10:32 +0000 ROA not after: Wed 23 Jul 2025 11:10:32 +0000 asID: 12041 IP address blocks: 65.22.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:69:36:5f:59:ed:9a:1e:27:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:32 2025 GMT Not After : Jul 23 11:10:32 2025 GMT Subject: CN=1d9ff14f-4234-48e2-a3d0-2960caf96916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:e4:f0:44:64:3d:ca:96:c9:eb:cd:69:cb: b4:26:b9:a1:3b:82:55:88:45:83:a2:8c:ad:2b:48: e8:54:9c:96:31:db:b0:62:fd:02:98:a3:8e:c1:4d: 50:a5:65:fe:75:02:64:b3:8a:81:50:e5:cf:31:46: a6:c0:36:0a:82:ce:08:a5:ac:ed:7c:29:01:08:fd: 91:78:c2:fb:2e:dc:b5:94:c8:32:30:8c:54:46:c2: c8:1f:43:1e:f9:47:59:aa:c7:6a:e4:65:68:90:99: 0f:87:42:bf:c6:99:50:19:87:d0:8e:cd:3b:f4:1b: 13:84:80:74:d3:bf:14:74:2f:cd:bc:42:00:0e:be: 79:d8:35:93:29:cb:b8:07:d5:8b:53:81:4b:78:c8: 70:84:bd:03:b7:a6:cc:3c:e3:50:91:76:a5:1d:48: 74:0e:bf:e6:6d:2d:85:9c:e8:a0:ec:2e:47:0c:c5: a8:fd:c1:bd:35:e4:5d:96:99:51:2e:2d:44:82:58: 74:71:29:b5:fa:37:c1:93:9e:d1:68:a4:d3:82:14: 35:be:ee:a2:bb:43:7c:5e:4f:84:92:f9:50:ec:45: b4:9c:78:84:8e:b3:44:09:f9:5f:83:32:56:4e:4a: 16:f8:b7:08:5c:ed:1d:f2:ef:a7:51:f2:39:34:5b: 17:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:61:0D:FA:11:4C:6D:8F:D8:69:7E:15:9A:C8:C4:7A:7A:52:91:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41758d69-049a-3c34-bc9f-336becf7d819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:cd:19:c6:8b:f1:2d:82:80:15:29:96:d1:9c:16:9e:50:48: e4:11:e9:54:71:5a:01:64:9b:fd:ac:2a:b5:e9:95:d8:ed:a8: f6:58:91:ee:0f:02:96:29:7f:48:d5:b5:3b:7b:f4:0f:ef:08: c2:06:27:84:dc:7b:32:dc:a8:68:0b:b6:00:5d:92:d2:1e:fc: 4b:8b:fa:b4:0d:18:fa:d3:1c:b0:8e:35:d3:ef:a6:f8:f5:ac: 41:c7:c8:cc:c3:65:64:5b:f7:41:44:ca:f2:ed:2e:d7:1e:1d: 30:e2:3c:81:7c:e5:ca:e6:79:63:a5:16:79:9e:6f:09:8b:62: 32:96:7a:53:a4:c8:73:8f:cf:bf:27:3d:01:e0:c2:a7:1f:ca: 6a:e5:dc:11:bf:c5:32:01:53:e6:ba:fd:2c:46:e7:64:a4:46: 15:96:ed:16:10:37:01:f7:1f:e8:19:7c:8b:77:68:c6:ef:52: 6a:32:7a:3a:5a:fd:a9:19:9a:ff:7f:71:22:93:9e:bf:bb:4a: 9b:42:9c:19:74:05:7b:18:22:94:8e:4b:01:e4:a6:5d:c1:0e: bc:53:70:37:86:c5:27:bb:42:f1:0c:0f:a4:d0:4e:64:d5:3b: 81:3e:82:45:37:d0:5a:de:27:61:17:b1:55:62:ae:2d:1d:18: 64:f7:91:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuGk2X1ntmh4nXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAzMloXDTI1MDcyMzExMTAzMlowLzEtMCsGA1UEAxMk MWQ5ZmYxNGYtNDIzNC00OGUyLWEzZDAtMjk2MGNhZjk2OTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOHk8ERkPcqWyevNacu0JrmhO4JViEWDooyt K0joVJyWMduwYv0CmKOOwU1QpWX+dQJks4qBUOXPMUamwDYKgs4IpaztfCkBCP2R eML7Lty1lMgyMIxURsLIH0Me+UdZqsdq5GVokJkPh0K/xplQGYfQjs079BsThIB0 078UdC/NvEIADr552DWTKcu4B9WLU4FLeMhwhL0Dt6bMPONQkXalHUh0Dr/mbS2F nOig7C5HDMWo/cG9NeRdlplRLi1Eglh0cSm1+jfBk57RaKTTghQ1vu6iu0N8Xk+E kvlQ7EW0nHiEjrNECflfgzJWTkoW+LcIXO0d8u+nUfI5NFsXqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFhDfoRTG2P2Gl+FZrIxHp6UpFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDE3NThkNjktMDQ5YS0z YzM0LWJjOWYtMzM2YmVjZjdkODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDNGcaL8S2CgBUpltGcFp5QSOQR6VRxWgFkm/2sKrXpldjtqPZYke4P ApYpf0jVtTt79A/vCMIGJ4TcezLcqGgLtgBdktIe/EuL+rQNGPrTHLCONdPvpvj1 rEHHyMzDZWRb90FEyvLtLtceHTDiPIF85crmeWOlFnmebwmLYjKWelOkyHOPz78n PQHgwqcfymrl3BG/xTIBU+a6/SxG52SkRhWW7RYQNwH3H+gZfIt3aMbvUmoyejpa /akZmv9/cSKTnr+7SptCnBl0BXsYIpSOSwHkpl3BDrxTcDeGxSe7QvEMD6TQTmTV O4E+gkU30FreJ2EXsVViri0dGGT3kSE= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:26 2025 by rpki-client