$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4d63ab30-aa27-3669-84ae-b496cb926295.roa File: 4d63ab30-aa27-3669-84ae-b496cb926295.roa (raw, json) Hash identifier: 6rTWtL2oFfYfxTV3I/njFXFuREks0I+sMSFGJ6rAG18= Subject key identifier: B0:52:1D:11:0E:82:11:22:C2:85:76:BE:36:72:2E:FB:53:5C:CC:A8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7B7437A0F4749A0944500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4d63ab30-aa27-3669-84ae-b496cb926295.roa Signing time: Thu 24 Apr 2025 11:09:08 +0000 ROA not before: Thu 24 Apr 2025 11:09:08 +0000 ROA not after: Wed 23 Jul 2025 11:09:08 +0000 asID: 12041 IP address blocks: 65.22.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:b7:43:7a:0f:47:49:a0:94:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:08 2025 GMT Not After : Jul 23 11:09:08 2025 GMT Subject: CN=91d4c093-499c-4ae2-835e-d0352b6cd61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:63:9b:14:44:97:00:a5:48:5f:84:bb:8f: 10:64:f0:e5:04:3e:7a:54:ad:51:4d:0c:4a:8c:81: b0:41:ca:13:c2:a0:7a:46:95:69:49:84:e1:85:b8: 66:bf:36:bb:1f:9d:23:f8:bc:47:61:1e:c6:5d:53: 26:40:4f:ba:c9:75:8e:1f:c1:ec:c5:59:1b:ee:c5: f6:95:9f:77:57:39:f0:6a:10:1c:7d:33:23:2e:aa: 05:65:f6:2e:b7:29:22:45:5d:fe:6e:23:ec:82:8f: e3:25:a5:f8:84:55:cd:ec:8f:d5:98:2c:ad:f1:e5: c2:ed:bb:73:91:30:c2:74:3b:9a:8e:88:b8:71:29: f2:7b:a3:6b:ec:04:5a:33:ed:86:f5:16:c8:15:e7: e7:c9:50:1a:bd:b8:f9:51:ab:25:4e:7e:e5:25:45: 3c:e0:a1:f3:c6:71:32:e2:09:fa:d7:f6:ee:6a:70: ca:56:8c:a0:1c:45:24:76:1e:a8:92:a7:3f:23:22: ce:34:6e:6b:50:40:be:0d:79:28:92:dc:52:51:f6: 0f:bc:d5:8f:5a:cb:49:b0:6c:ab:d9:66:25:0d:5b: e8:89:cd:4c:4f:64:c1:81:45:d7:ae:4a:ab:51:31: 4d:0d:6d:d1:26:96:70:92:0e:de:e5:e8:4c:85:f7: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:52:1D:11:0E:82:11:22:C2:85:76:BE:36:72:2E:FB:53:5C:CC:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4d63ab30-aa27-3669-84ae-b496cb926295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ac:d9:c3:b5:89:db:2d:19:16:16:d5:ff:fa:49:aa:0b:58: cc:ea:27:7d:77:e6:5f:59:5d:0a:17:8e:dd:b8:91:64:e7:f1: f6:42:96:08:f4:68:7d:3c:f1:38:49:12:99:fd:ce:9d:89:49: e9:a2:15:84:35:51:fc:ed:14:b4:44:c4:44:7a:53:70:8c:44: 54:6b:1e:35:f9:99:c7:f0:2b:cc:2c:f2:1d:fd:59:c0:54:53: 2b:f8:b0:70:c6:6f:21:9f:4b:51:31:08:fb:5e:8e:77:13:02: 98:7e:a0:45:d2:71:7c:1f:dd:f3:f4:45:91:27:54:e3:f1:af: e5:c8:d0:17:12:40:49:32:53:85:16:38:fa:f6:7a:65:59:da: 9c:ee:05:ee:b4:36:fb:96:1c:f5:91:8e:5e:a5:20:07:e6:a2: 0b:9b:3f:5b:ae:a6:27:74:cd:72:48:31:ed:c9:f2:0f:b9:cf: 44:bb:95:1c:47:21:15:8a:16:5f:91:ed:e3:d9:86:5c:0c:cc: 32:7b:07:58:76:da:7b:c1:ab:b9:c3:a0:dd:74:32:62:1b:44: a4:5e:31:ab:4c:3b:af:a3:41:68:9b:ef:f8:f2:e3:5a:89:d3: 73:1e:3f:cd:7d:3b:69:23:d8:a0:ce:b1:5c:b4:03:b1:e1:e8: 4a:d2:cd:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht7dDeg9HSaCURQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkwOFoXDTI1MDcyMzExMDkwOFowLzEtMCsGA1UEAxMk OTFkNGMwOTMtNDk5Yy00YWUyLTgzNWUtZDAzNTJiNmNkNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlhjmxRElwClSF+Eu48QZPDlBD56VK1RTQxK jIGwQcoTwqB6RpVpSYThhbhmvza7H50j+LxHYR7GXVMmQE+6yXWOH8HsxVkb7sX2 lZ93VznwahAcfTMjLqoFZfYutykiRV3+biPsgo/jJaX4hFXN7I/VmCyt8eXC7btz kTDCdDuajoi4cSnye6Nr7ARaM+2G9RbIFefnyVAavbj5UaslTn7lJUU84KHzxnEy 4gn61/buanDKVoygHEUkdh6okqc/IyLONG5rUEC+DXkoktxSUfYPvNWPWstJsGyr 2WYlDVvoic1MT2TBgUXXrkqrUTFNDW3RJpZwkg7e5ehMhfdrNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBSHREOghEiwoV2vjZyLvtTXMyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGQ2M2FiMzAtYWEyNy0z NjY5LTg0YWUtYjQ5NmNiOTI2Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKs2cO1idstGRYW1f/6SaoLWMzqJ3135l9ZXQoXjt24kWTn8fZClgj0 aH088ThJEpn9zp2JSemiFYQ1UfztFLRExER6U3CMRFRrHjX5mcfwK8ws8h39WcBU Uyv4sHDGbyGfS1ExCPtejncTAph+oEXScXwf3fP0RZEnVOPxr+XI0BcSQEkyU4UW OPr2emVZ2pzuBe60NvuWHPWRjl6lIAfmogubP1uupid0zXJIMe3J8g+5z0S7lRxH IRWKFl+R7ePZhlwMzDJ7B1h22nvBq7nDoN10MmIbRKReMatMO6+jQWib7/jy41qJ 03MeP819O2kj2KDOsVy0A7Hh6ErSzXc= -----END CERTIFICATE-----Generated at Tue Apr 29 14:33:48 2025 by rpki-client