$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa File: 4575c36b-b988-3070-998f-2c18e11901f4.roa (raw, json) Hash identifier: RsebI9ZkvodA0+jq6QswpOQGqrKpG9Od9ayWtkGjE5A= Subject key identifier: CE:BE:13:95:41:BF:9F:65:12:10:5A:2E:BB:D7:8B:07:3E:36:63:78 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B738792C2CDCF334571C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa Signing time: Thu 24 Apr 2025 11:08:08 +0000 ROA not before: Thu 24 Apr 2025 11:08:08 +0000 ROA not after: Wed 23 Jul 2025 11:08:08 +0000 asID: 12041 IP address blocks: 65.22.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:38:79:2c:2c:dc:f3:34:57:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:08 2025 GMT Not After : Jul 23 11:08:08 2025 GMT Subject: CN=e2c8a318-7358-4f9e-ae76-c5593cc56c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:77:f7:50:52:fd:49:39:fe:09:f1:6f:66: fa:85:ce:5a:9b:8d:66:c3:1a:e0:fe:3c:e9:08:8d: 59:4a:e9:d3:fd:f2:35:f6:8f:7f:73:2f:8d:29:94: f4:72:12:1d:cf:eb:63:b0:e0:8c:90:e3:72:31:03: 11:70:ff:b9:06:78:6e:78:ca:a2:92:15:f5:3c:56: 28:1d:78:a9:79:d4:74:45:44:1f:3a:80:28:c5:13: f1:b4:95:60:36:80:8b:24:bc:01:02:21:ad:db:39: ee:bc:a2:30:ef:f1:b6:37:38:8a:cc:01:b8:df:f4: f4:10:a9:e3:f7:1d:8b:8c:10:0f:a9:ec:f9:9c:42: 5d:ad:05:b3:47:bc:c3:e7:d9:45:66:72:0a:0a:ef: 3d:a4:4b:bd:52:8b:38:29:4a:c5:81:1c:ae:fa:e5: de:f2:03:3a:08:7a:98:97:6b:de:53:dd:d5:62:4b: 75:19:0e:fa:43:41:ee:d6:70:8c:03:ef:f3:df:83: f8:e9:a6:ed:85:f8:47:80:7c:db:f0:22:cc:bd:24: 62:62:af:a0:21:66:25:69:b9:5e:77:e3:f3:0d:c6: f7:c4:b4:1a:72:73:34:74:20:11:bb:41:12:a7:6b: 8b:7a:d5:f9:b2:ba:8d:c7:c7:1a:5a:90:8a:e0:8e: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BE:13:95:41:BF:9F:65:12:10:5A:2E:BB:D7:8B:07:3E:36:63:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:51:60:43:7d:bf:22:0d:76:17:81:4a:d1:eb:89:0a:0d:08: 4b:b1:c1:25:0f:09:da:8f:de:e8:e0:e7:c2:0a:e5:a4:97:17: 12:2e:bc:5e:37:be:c2:42:33:43:33:6e:df:98:79:39:39:8f: b4:87:55:63:bc:17:e9:c9:35:90:bc:a3:01:64:77:f2:b9:60: 5c:0d:04:ed:7e:0f:fa:5f:e4:4c:6a:fc:14:6f:44:65:f2:1c: c8:2b:82:c6:00:c4:7a:08:c3:a0:5a:c7:71:60:03:ff:0b:55: be:ce:bb:03:c8:5a:48:7d:73:53:05:70:e8:a5:06:c2:f7:d4: 7d:94:2c:e5:bd:ca:75:fa:c6:bf:23:e4:4a:fe:5d:21:19:0a: 69:d5:5e:77:6c:d2:8f:a6:ca:11:e8:ad:19:b6:76:82:a7:b0: 08:de:6f:47:a4:32:6f:37:60:5e:66:92:7f:12:b1:de:e3:67: 89:98:a9:04:15:d6:92:09:b2:8b:42:48:a5:3e:f6:31:09:a8: 40:44:b7:e5:d0:1a:fe:00:00:d8:9e:b2:4e:88:fc:00:b0:f0: 58:0d:32:87:82:98:c4:f5:ee:2e:a3:a5:7b:38:bf:00:b0:36: fe:c7:b4:ca:04:83:b3:de:e9:ed:bd:c1:5a:df:89:39:98:69: cd:a5:36:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtzh5LCzc8zRXHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgwOFoXDTI1MDcyMzExMDgwOFowLzEtMCsGA1UEAxMk ZTJjOGEzMTgtNzM1OC00ZjllLWFlNzYtYzU1OTNjYzU2YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/J391BS/Uk5/gnxb2b6hc5am41mwxrg/jzp CI1ZSunT/fI19o9/cy+NKZT0chIdz+tjsOCMkONyMQMRcP+5BnhueMqikhX1PFYo HXipedR0RUQfOoAoxRPxtJVgNoCLJLwBAiGt2znuvKIw7/G2NziKzAG43/T0EKnj 9x2LjBAPqez5nEJdrQWzR7zD59lFZnIKCu89pEu9Uos4KUrFgRyu+uXe8gM6CHqY l2veU93VYkt1GQ76Q0Hu1nCMA+/z34P46abthfhHgHzb8CLMvSRiYq+gIWYlable d+PzDcb3xLQacnM0dCARu0ESp2uLetX5srqNx8caWpCK4I6r3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6+E5VBv59lEhBaLrvXiwc+NmN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDU3NWMzNmItYjk4OC0z MDcwLTk5OGYtMmMxOGUxMTkwMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9RYEN9vyINdheBStHriQoNCEuxwSUPCdqP3ujg58IK5aSXFxIuvF43 vsJCM0Mzbt+YeTk5j7SHVWO8F+nJNZC8owFkd/K5YFwNBO1+D/pf5Exq/BRvRGXy HMgrgsYAxHoIw6Bax3FgA/8LVb7OuwPIWkh9c1MFcOilBsL31H2ULOW9ynX6xr8j 5Er+XSEZCmnVXnds0o+myhHorRm2doKnsAjeb0ekMm83YF5mkn8Ssd7jZ4mYqQQV 1pIJsotCSKU+9jEJqEBEt+XQGv4AANiesk6I/ACw8FgNMoeCmMT17i6jpXs4vwCw Nv7HtMoEg7Pe6e29wVrfiTmYac2lNoU= -----END CERTIFICATE-----Generated at Tue Apr 29 13:23:22 2025 by rpki-client