$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/423b1791-30f2-3145-9fcd-ee9730cf9596.roa File: 423b1791-30f2-3145-9fcd-ee9730cf9596.roa (raw, json) Hash identifier: oYa8aJx5a0F+COam69yDFiSYnTVjHyNP+BdCvDM/Uso= Subject key identifier: 31:BB:13:DF:FA:3E:24:7F:67:55:4B:05:AB:B5:DE:BA:F5:54:B7:3D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B774FC418A5CA3F347DC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/423b1791-30f2-3145-9fcd-ee9730cf9596.roa Signing time: Thu 24 Apr 2025 11:08:37 +0000 ROA not before: Thu 24 Apr 2025 11:08:37 +0000 ROA not after: Wed 23 Jul 2025 11:08:37 +0000 asID: 12041 IP address blocks: 65.22.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:74:fc:41:8a:5c:a3:f3:47:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:37 2025 GMT Not After : Jul 23 11:08:37 2025 GMT Subject: CN=52ca9554-375c-41eb-8d2a-afbea19bc2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:fc:28:4a:c3:dd:09:f5:d4:3b:9c:a3:fe: 6d:d0:ad:46:9e:91:15:9b:6b:7b:92:47:69:ba:92: ab:79:0f:4a:de:04:76:3e:4f:05:f3:e8:e0:d7:b0: b6:09:76:0f:e5:67:b8:d0:ce:99:2b:b3:ee:dc:6a: 59:1f:ad:2d:2d:69:2a:1d:15:9a:ce:47:43:5a:ef: e8:81:61:53:d6:e6:4b:b6:43:f5:82:c0:28:b0:3a: 48:ad:38:a8:dc:ed:40:d6:50:fe:4c:15:52:0e:14: d4:1b:11:4a:03:a1:4a:d4:d1:f3:68:dd:c1:9f:39: b1:28:cd:ef:c5:61:68:e0:ed:9a:8c:ab:e7:f1:20: aa:6c:99:65:65:ca:da:90:85:cc:aa:ff:0e:9b:36: f5:be:15:e0:19:a6:8f:f3:b7:b4:87:7e:dd:34:37: 14:76:28:19:cc:57:d7:43:4d:42:ca:92:85:15:8f: 8c:5a:a8:f8:7e:55:85:3d:ca:89:aa:a8:04:6e:5d: e1:0c:c1:2c:51:33:c7:02:4b:1f:58:24:d0:9a:c0: 8b:8e:7e:67:29:b4:cc:80:da:e8:30:f1:e2:5e:18: 69:1c:5d:18:1f:0e:0e:4e:2f:5c:11:65:a7:60:ba: c0:9c:19:91:bd:36:44:df:82:be:4b:cf:a7:40:d2: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BB:13:DF:FA:3E:24:7F:67:55:4B:05:AB:B5:DE:BA:F5:54:B7:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/423b1791-30f2-3145-9fcd-ee9730cf9596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0b:35:46:99:d2:6c:b5:18:15:2d:dc:3d:14:17:88:ba:8b: dc:aa:dc:fe:60:5c:f9:ff:7b:41:e3:a3:3d:de:b2:45:2b:d2: 4b:45:29:79:1b:b6:67:73:69:7c:32:36:34:d8:91:16:09:50: c2:55:6f:30:52:0d:01:a3:ae:4b:7e:9f:9c:e9:ec:20:1b:71: 8a:c4:e8:1c:13:21:64:4b:cd:5a:57:45:49:c3:15:81:a1:16: b5:6f:8a:a5:2b:c4:96:83:4e:7d:f4:40:18:6f:49:71:b3:c9: e6:fa:a2:84:b3:27:f3:56:97:d1:3e:9f:3d:c8:84:46:c3:09: 11:ea:95:9f:9a:87:00:6e:7b:23:2c:a1:13:35:ef:99:ca:42: e3:9e:7a:ea:68:8e:9e:78:e1:69:d3:93:d5:ad:7d:86:67:fb: 9e:6e:42:04:81:37:10:89:c7:6e:2c:d7:42:1e:0a:ea:59:2b: d6:3b:4a:36:da:63:89:b4:9e:35:91:c7:d7:6b:e5:e0:f8:44: cd:4b:cd:eb:be:4f:6f:8c:15:5a:78:39:01:bf:42:b7:65:53: 06:90:4b:16:c1:d5:d7:2c:93:e5:03:e6:18:7b:8a:34:36:57: 37:34:a3:99:23:8a:45:4a:a1:1a:89:e0:ec:26:fd:3e:a5:52: c7:e8:b6:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht3T8QYpco/NH3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgzN1oXDTI1MDcyMzExMDgzN1owLzEtMCsGA1UEAxMk NTJjYTk1NTQtMzc1Yy00MWViLThkMmEtYWZiZWExOWJjMmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1f8KErD3Qn11Duco/5t0K1GnpEVm2t7kkdp upKreQ9K3gR2Pk8F8+jg17C2CXYP5We40M6ZK7Pu3GpZH60tLWkqHRWazkdDWu/o gWFT1uZLtkP1gsAosDpIrTio3O1A1lD+TBVSDhTUGxFKA6FK1NHzaN3BnzmxKM3v xWFo4O2ajKvn8SCqbJllZcrakIXMqv8Omzb1vhXgGaaP87e0h37dNDcUdigZzFfX Q01CypKFFY+MWqj4flWFPcqJqqgEbl3hDMEsUTPHAksfWCTQmsCLjn5nKbTMgNro MPHiXhhpHF0YHw4OTi9cEWWnYLrAnBmRvTZE34K+S8+nQNKScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG7E9/6PiR/Z1VLBau13rr1VLc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDIzYjE3OTEtMzBmMi0z MTQ1LTlmY2QtZWU5NzMwY2Y5NTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACALNUaZ0my1GBUt3D0UF4i6i9yq3P5gXPn/e0Hjoz3eskUr0ktFKXkb tmdzaXwyNjTYkRYJUMJVbzBSDQGjrkt+n5zp7CAbcYrE6BwTIWRLzVpXRUnDFYGh FrVviqUrxJaDTn30QBhvSXGzyeb6ooSzJ/NWl9E+nz3IhEbDCRHqlZ+ahwBueyMs oRM175nKQuOeeupojp544WnTk9WtfYZn+55uQgSBNxCJx24s10IeCupZK9Y7Sjba Y4m0njWRx9dr5eD4RM1Lzeu+T2+MFVp4OQG/QrdlUwaQSxbB1dcsk+UD5hh7ijQ2 Vzc0o5kjikVKoRqJ4Owm/T6lUsfotsc= -----END CERTIFICATE-----Generated at Wed Apr 30 00:57:02 2025 by rpki-client