$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa File: 4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa (raw, json) Hash identifier: pwhI/cNjYxQW5MPK3ZPBGGQv8gIWqSdmQsKrDHMM+/Q= Subject key identifier: FE:74:AD:38:3A:2C:B7:B1:99:CF:E8:39:3D:42:50:61:2D:76:AD:37 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7D9D4324AEAAAC8A7B180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa Signing time: Thu 24 Apr 2025 11:09:24 +0000 ROA not before: Thu 24 Apr 2025 11:09:24 +0000 ROA not after: Wed 23 Jul 2025 11:09:24 +0000 asID: 12041 IP address blocks: 65.22.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:d9:d4:32:4a:ea:aa:c8:a7:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:24 2025 GMT Not After : Jul 23 11:09:24 2025 GMT Subject: CN=e83b1e04-7388-4dfb-957f-c1de175decce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:5f:7b:29:89:f2:74:ee:51:b2:ed:d8:43: 72:98:90:4f:31:a0:78:07:ca:68:c5:49:f1:98:13: b1:ce:8e:02:f4:c8:1b:d2:8d:98:51:6d:a6:b4:4c: ef:81:42:a5:f7:35:d4:02:02:fb:23:ee:ca:34:f9: 7f:f8:c3:21:a9:27:14:25:1c:09:1f:af:f0:c6:45: 0a:f8:76:b9:78:34:9b:f9:f9:f5:08:59:17:a0:8c: 5d:7f:a3:1d:79:5e:a7:a3:43:df:6b:9d:0f:c9:c2: 7a:d1:14:b1:63:30:45:e9:93:f8:37:10:b0:69:77: 87:ee:21:48:ef:af:70:03:7a:6b:01:8e:63:f0:21: 9e:80:4d:94:7d:0b:fd:ae:c8:76:a9:dd:6c:fb:1f: ee:dd:2d:fc:a0:08:9e:7f:3a:45:50:a7:6c:be:79: 89:09:e9:03:34:cb:a1:d5:31:05:37:e3:ba:0e:bf: d7:b5:96:e3:1e:fe:13:86:c5:16:4a:d6:52:26:d2: 5c:73:00:e1:ca:a2:b5:cc:2a:b9:32:eb:20:7f:25: 90:46:c8:36:eb:e3:7e:ca:0c:cc:4f:70:62:20:30: fe:b3:c6:e4:45:08:ac:93:ae:92:b2:91:b2:11:53: 4e:5b:b5:ca:68:ee:bc:8e:49:db:59:66:96:21:c9: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:74:AD:38:3A:2C:B7:B1:99:CF:E8:39:3D:42:50:61:2D:76:AD:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:af:05:8f:1c:cb:6b:dc:7d:c5:9a:a2:d6:07:89:91:7d:e4: 0f:8c:8e:72:ad:2f:72:75:77:b3:a6:ac:a3:ae:0f:ac:27:16: 81:35:12:3e:57:5b:38:6b:59:b2:e0:fc:37:b2:14:17:74:9b: 6b:15:68:b3:cc:06:77:48:ee:9c:71:e4:92:50:82:b0:76:6c: dc:1f:6b:20:99:dc:52:64:aa:96:29:33:a9:40:79:f8:53:30: 99:2c:a3:dd:38:9c:3e:10:ce:1f:07:fe:58:b5:92:ac:74:1d: 92:5c:ab:53:dd:30:d3:78:55:c3:af:fa:8e:fd:ed:a8:5b:37: 4b:94:59:06:dd:74:86:df:b8:0a:0e:48:47:e5:ea:84:ba:b8: 29:fa:73:4e:51:72:8f:ee:20:f3:29:1f:68:9b:17:7f:2b:a4: 60:10:44:40:e0:5b:55:79:30:4e:b8:93:19:5e:b9:03:b2:a1: 38:88:f9:bc:d8:bd:6f:e3:92:e2:16:e8:57:24:f9:7c:10:a9: 6e:52:c3:94:1a:54:19:10:69:f3:29:c4:65:34:84:1d:82:16: f2:61:1f:04:8d:62:5e:9e:71:d2:09:12:9d:6c:e6:48:cd:ab: 9a:d4:d3:57:3c:31:db:14:42:41:c9:c4:da:ff:a5:ea:8c:88: 64:a7:fe:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht9nUMkrqqsinsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyNFoXDTI1MDcyMzExMDkyNFowLzEtMCsGA1UEAxMk ZTgzYjFlMDQtNzM4OC00ZGZiLTk1N2YtYzFkZTE3NWRlY2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYdfeymJ8nTuUbLt2ENymJBPMaB4B8poxUnx mBOxzo4C9Mgb0o2YUW2mtEzvgUKl9zXUAgL7I+7KNPl/+MMhqScUJRwJH6/wxkUK +Ha5eDSb+fn1CFkXoIxdf6MdeV6no0Pfa50PycJ60RSxYzBF6ZP4NxCwaXeH7iFI 769wA3prAY5j8CGegE2UfQv9rsh2qd1s+x/u3S38oAiefzpFUKdsvnmJCekDNMuh 1TEFN+O6Dr/XtZbjHv4ThsUWStZSJtJccwDhyqK1zCq5MusgfyWQRsg26+N+ygzM T3BiIDD+s8bkRQisk66SspGyEVNOW7XKaO68jknbWWaWIclV/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP50rTg6LLexmc/oOT1CUGEtdq03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGJkMmYwMTMtNjU2OC0z OWU4LTljZTMtMWExMDY4ZjI4MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWvBY8cy2vcfcWaotYHiZF95A+MjnKtL3J1d7OmrKOuD6wnFoE1Ej5X WzhrWbLg/DeyFBd0m2sVaLPMBndI7pxx5JJQgrB2bNwfayCZ3FJkqpYpM6lAefhT MJkso904nD4Qzh8H/li1kqx0HZJcq1PdMNN4VcOv+o797ahbN0uUWQbddIbfuAoO SEfl6oS6uCn6c05Rco/uIPMpH2ibF38rpGAQREDgW1V5ME64kxleuQOyoTiI+bzY vW/jkuIW6Fck+XwQqW5Sw5QaVBkQafMpxGU0hB2CFvJhHwSNYl6ecdIJEp1s5kjN q5rU01c8MdsUQkHJxNr/peqMiGSn/vM= -----END CERTIFICATE-----Generated at Tue Apr 29 13:12:22 2025 by rpki-client