$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4ba292da-9e44-3b3c-9633-1b1bd7cbcc56.roa File: 4ba292da-9e44-3b3c-9633-1b1bd7cbcc56.roa (raw, json) Hash identifier: 8CJxH/5QApr6SHaJ6AQrdljhIG765qCaBilE8heTogg= Subject key identifier: E0:2C:6E:DB:CD:26:25:5A:B9:98:43:DA:5B:A7:60:0F:59:E1:D5:12 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7EC877CDDE97060971680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4ba292da-9e44-3b3c-9633-1b1bd7cbcc56.roa Signing time: Thu 24 Apr 2025 11:09:33 +0000 ROA not before: Thu 24 Apr 2025 11:09:33 +0000 ROA not after: Wed 23 Jul 2025 11:09:33 +0000 asID: 12041 IP address blocks: 65.22.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:ec:87:7c:dd:e9:70:60:97:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:33 2025 GMT Not After : Jul 23 11:09:33 2025 GMT Subject: CN=4d3dc782-b47e-412b-ba68-327d58536a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:3f:df:2c:61:c9:62:5a:a2:69:9b:d6:b3: f5:f9:fa:d5:68:c7:34:21:4c:39:b9:d5:e1:62:2b: 37:57:5f:12:f6:be:a9:13:8f:91:e1:bd:11:0d:6d: ca:26:08:78:16:b4:1a:fe:fb:b6:60:4e:23:4e:95: 9e:a8:a9:30:08:bc:9c:4d:49:38:9a:b9:af:35:7c: 9c:37:6f:9a:a1:83:ad:b0:5a:f6:0d:57:20:bc:cf: c6:14:98:61:65:bb:c1:5a:36:df:9a:cf:52:ca:5c: 30:a6:2e:54:50:38:24:ce:47:f6:33:dc:19:72:7d: 55:c0:f8:aa:a2:d7:00:8b:4b:c6:d9:b4:de:c3:15: 5b:58:7a:04:c2:8f:e8:16:bd:0e:fc:28:f1:4a:2a: ef:b4:33:d0:2d:ec:63:e9:e3:59:ec:12:82:2c:9f: 07:eb:97:bf:fb:a5:85:bd:90:a1:dc:1b:98:7e:64: bd:d9:f8:0f:34:6f:e1:e9:bb:e0:76:db:71:a1:71: 68:73:eb:49:3e:b6:71:21:f1:fd:e7:0a:d4:c3:5f: e4:15:93:ad:4f:bd:d0:b2:cb:0c:65:c6:af:c5:6b: 17:2a:6a:94:c4:1e:60:4c:42:05:e5:c1:ee:63:29: fc:90:69:ec:eb:06:bb:99:55:8d:23:5b:fb:43:52: a8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2C:6E:DB:CD:26:25:5A:B9:98:43:DA:5B:A7:60:0F:59:E1:D5:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4ba292da-9e44-3b3c-9633-1b1bd7cbcc56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b9:07:89:58:ec:03:52:91:a1:33:1a:8c:48:32:d8:85:2c: cf:99:0d:ac:d9:8c:23:a8:9f:d3:1d:3f:5c:28:37:f2:97:81: 03:b9:f2:e4:6e:97:d5:c3:78:24:41:e9:4c:ba:5a:d3:79:ba: 39:c4:85:2e:89:75:0f:df:4f:6a:06:a7:41:35:89:b6:51:2f: 7f:55:ff:4c:1b:5f:37:fc:33:cb:bc:13:8c:29:f8:72:49:6c: b0:b3:55:f1:ff:6a:a5:d6:1d:d0:92:82:5e:16:98:07:49:66: 2f:ed:3e:6d:b0:47:bb:89:1c:92:53:e6:77:8e:4a:a1:11:0b: 27:ba:4f:20:d3:d4:c9:92:53:f2:b6:fb:97:70:01:4b:5e:62: df:8a:30:75:22:16:03:49:c0:1c:0d:ff:75:f3:b1:71:aa:76: 30:20:b5:7b:b0:68:e3:d3:f7:3a:8e:57:b1:e9:78:31:ca:c6: 31:ad:8a:c2:69:36:59:fa:41:72:b1:76:0b:6b:73:53:64:46: de:e7:b3:6f:a1:8e:89:cd:0c:a4:5b:f1:2d:76:6e:a7:b1:b5: 27:28:d1:7a:b1:cc:f4:06:e2:c2:b1:e5:b0:46:38:95:2b:85: d2:cc:00:5a:f1:b7:45:b3:73:7d:63:85:15:5e:90:6a:b0:5a: cb:9c:a3:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht+yHfN3pcGCXFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkzM1oXDTI1MDcyMzExMDkzM1owLzEtMCsGA1UEAxMk NGQzZGM3ODItYjQ3ZS00MTJiLWJhNjgtMzI3ZDU4NTM2YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0k/3yxhyWJaommb1rP1+frVaMc0IUw5udXh Yis3V18S9r6pE4+R4b0RDW3KJgh4FrQa/vu2YE4jTpWeqKkwCLycTUk4mrmvNXyc N2+aoYOtsFr2DVcgvM/GFJhhZbvBWjbfms9Sylwwpi5UUDgkzkf2M9wZcn1VwPiq otcAi0vG2bTewxVbWHoEwo/oFr0O/CjxSirvtDPQLexj6eNZ7BKCLJ8H65e/+6WF vZCh3BuYfmS92fgPNG/h6bvgdttxoXFoc+tJPrZxIfH95wrUw1/kFZOtT73QsssM ZcavxWsXKmqUxB5gTEIF5cHuYyn8kGns6wa7mVWNI1v7Q1Ko6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAsbtvNJiVauZhD2lunYA9Z4dUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGJhMjkyZGEtOWU0NC0z YjNjLTk2MzMtMWIxYmQ3Y2JjYzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRatMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu5B4lY7ANSkaEzGoxIMtiFLM+ZDazZjCOon9MdP1woN/KXgQO58uRu l9XDeCRB6Uy6WtN5ujnEhS6JdQ/fT2oGp0E1ibZRL39V/0wbXzf8M8u8E4wp+HJJ bLCzVfH/aqXWHdCSgl4WmAdJZi/tPm2wR7uJHJJT5neOSqERCye6TyDT1MmSU/K2 +5dwAUteYt+KMHUiFgNJwBwN/3XzsXGqdjAgtXuwaOPT9zqOV7HpeDHKxjGtisJp Nln6QXKxdgtrc1NkRt7ns2+hjonNDKRb8S12bqextSco0XqxzPQG4sKx5bBGOJUr hdLMAFrxt0Wzc31jhRVekGqwWsuco1o= -----END CERTIFICATE-----Generated at Tue Apr 29 22:31:52 2025 by rpki-client