$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/45988d5b-d3a5-37af-8d03-d8a76497070d.roa File: 45988d5b-d3a5-37af-8d03-d8a76497070d.roa (raw, json) Hash identifier: dZQt0wo96oHaCpF+SifJoXKAEp2Y0rhJ7aTJ6fEnt1g= Subject key identifier: 49:E6:3F:41:53:20:6E:72:4B:31:52:27:DB:C3:53:FB:D1:6D:62:AC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A211FB57448342350B6AA6C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/45988d5b-d3a5-37af-8d03-d8a76497070d.roa Signing time: Thu 24 Apr 2025 14:11:01 +0000 ROA not before: Thu 24 Apr 2025 14:11:01 +0000 ROA not after: Wed 23 Jul 2025 14:11:01 +0000 asID: 207266 IP address blocks: 65.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:fb:57:44:83:42:35:0b:6a:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:11:01 2025 GMT Not After : Jul 23 14:11:01 2025 GMT Subject: CN=f0163cd9-7dd6-4d31-b890-c4309ba11a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:22:e4:0d:3b:d2:4a:25:8e:5a:60:df:52: c2:0d:77:34:11:15:b3:08:c6:87:0f:7e:cf:58:18: ac:28:91:b9:a9:b5:ee:ad:2b:ae:07:80:4a:09:21: 91:6b:b8:9a:0e:6a:0a:70:a2:73:e8:d6:12:c9:ae: 8d:ed:64:27:d1:b0:96:58:a7:d2:ad:9b:3a:60:9b: 12:b5:ed:0b:16:c2:b3:d7:d8:68:2e:8c:50:95:72: 49:ab:07:75:92:be:2e:7e:17:d7:ea:36:f3:f9:9e: 1e:67:06:28:47:47:e0:1f:8a:3e:74:3c:58:8d:e3: e8:1a:4b:03:42:30:40:97:84:8b:64:f4:c7:bb:92: bc:9c:82:a1:66:f4:51:0f:77:93:b2:76:6a:b2:c7: 13:df:e5:70:6a:6e:02:77:f7:a0:7e:48:f7:87:9c: 3c:14:ac:34:7d:8c:5c:d4:18:11:fc:05:00:0d:e6: ed:34:2b:dd:e1:b6:e1:97:51:6e:63:02:f3:d6:21: a2:02:17:2b:0c:34:65:e7:05:84:93:1a:cd:16:d5: 2b:86:10:cd:47:61:9b:84:f2:e0:e9:69:56:fd:5b: 97:bc:bf:df:f6:d4:2e:68:93:96:24:63:65:48:87: df:02:a3:ac:1c:7f:29:e2:fd:66:6e:15:60:72:e6: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E6:3F:41:53:20:6E:72:4B:31:52:27:DB:C3:53:FB:D1:6D:62:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/45988d5b-d3a5-37af-8d03-d8a76497070d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0c:97:6e:67:e0:85:7b:1d:92:c3:20:04:a3:e8:1b:88:4c: ec:92:51:42:76:14:6b:85:86:9b:fc:ee:c9:24:be:48:49:f1: ab:d9:95:08:15:df:05:7c:dd:b3:fb:e4:b5:5a:fa:3c:d3:aa: da:20:87:e3:33:c5:22:4c:07:d7:1f:7e:b3:61:83:07:0b:a4: c1:f4:9e:80:8b:8a:f1:88:f8:5b:09:d8:5f:2b:cd:ad:9e:f4: a9:83:6d:79:02:5a:2a:b4:66:c7:ef:4a:41:6b:ae:de:94:da: ee:40:67:30:e6:fb:2c:d6:71:d7:c8:e5:45:cd:d4:19:ab:a6: b8:a1:cc:2f:1e:0a:59:5e:85:dd:87:89:b0:a4:67:76:ac:42: a8:99:f5:66:b2:8b:23:6a:a8:43:4c:5e:a9:eb:c1:73:6e:38: 87:f8:c0:4b:fa:0f:c9:94:99:8c:b1:ab:4f:b8:54:35:e6:b4: 65:15:d9:e9:84:df:1e:31:36:93:7a:70:87:2f:4f:f5:12:68: d9:cc:7f:0f:24:6d:61:e4:ab:dd:8d:14:1d:6e:2a:cd:33:9d: 21:c3:ba:b7:2c:18:9f:0b:c5:4c:0e:1c:5b:aa:97:50:43:bc: 45:56:3c:80:e0:02:22:df:67:6f:53:0e:6b:5f:94:95:02:86: 78:1a:0c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEftXRINCNQtqpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTEwMVoXDTI1MDcyMzE0MTEwMVowLzEtMCsGA1UEAxMk ZjAxNjNjZDktN2RkNi00ZDMxLWI4OTAtYzQzMDliYTExYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVoi5A070koljlpg31LCDXc0ERWzCMaHD37P WBisKJG5qbXurSuuB4BKCSGRa7iaDmoKcKJz6NYSya6N7WQn0bCWWKfSrZs6YJsS te0LFsKz19hoLoxQlXJJqwd1kr4ufhfX6jbz+Z4eZwYoR0fgH4o+dDxYjePoGksD QjBAl4SLZPTHu5K8nIKhZvRRD3eTsnZqsscT3+Vwam4Cd/egfkj3h5w8FKw0fYxc 1BgR/AUADebtNCvd4bbhl1FuYwLz1iGiAhcrDDRl5wWEkxrNFtUrhhDNR2GbhPLg 6WlW/VuXvL/f9tQuaJOWJGNlSIffAqOsHH8p4v1mbhVgcuaf3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnmP0FTIG5ySzFSJ9vDU/vRbWKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDU5ODhkNWItZDNhNS0z N2FmLThkMDMtZDhhNzY0OTcwNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkMl25n4IV7HZLDIASj6BuITOySUUJ2FGuFhpv87skkvkhJ8avZlQgV 3wV83bP75LVa+jzTqtogh+MzxSJMB9cffrNhgwcLpMH0noCLivGI+FsJ2F8rza2e 9KmDbXkCWiq0ZsfvSkFrrt6U2u5AZzDm+yzWcdfI5UXN1BmrprihzC8eCllehd2H ibCkZ3asQqiZ9WayiyNqqENMXqnrwXNuOIf4wEv6D8mUmYyxq0+4VDXmtGUV2emE 3x4xNpN6cIcvT/USaNnMfw8kbWHkq92NFB1uKs0znSHDurcsGJ8LxUwOHFuql1BD vEVWPIDgAiLfZ29TDmtflJUChngaDNk= -----END CERTIFICATE-----Generated at Wed Apr 30 07:38:07 2025 by rpki-client