$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4e2b59e0-0afb-39e7-b183-8f1d2f1b42e9.roa File: 4e2b59e0-0afb-39e7-b183-8f1d2f1b42e9.roa (raw, json) Hash identifier: 4emQaaDTiLcQ0l+UvqxEbQeo0JkiH1Esxwsq6dcGnVQ= Subject key identifier: 2A:A1:4C:24:3F:B2:82:F0:32:45:64:CF:F4:4B:25:F0:FC:14:7C:D0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7DEABF31C3A3780C7BFE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4e2b59e0-0afb-39e7-b183-8f1d2f1b42e9.roa Signing time: Thu 24 Apr 2025 11:09:27 +0000 ROA not before: Thu 24 Apr 2025 11:09:27 +0000 ROA not after: Wed 23 Jul 2025 11:09:27 +0000 asID: 12041 IP address blocks: 65.22.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:de:ab:f3:1c:3a:37:80:c7:bf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:27 2025 GMT Not After : Jul 23 11:09:27 2025 GMT Subject: CN=b6135465-3a09-4178-8248-9de27b005a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:8c:2b:e8:9b:99:59:58:74:7b:f6:08:32: 9f:41:a2:27:59:38:a4:af:6e:90:89:ee:02:f3:c6: 66:d6:d1:ce:ec:5b:b1:c4:eb:95:a4:ee:30:15:3b: 37:a9:19:af:bd:30:72:0b:db:05:43:cd:a3:77:9b: ce:e9:19:0e:30:73:08:70:14:a7:92:12:09:8c:0a: 7b:b8:fa:e6:14:3d:f7:7e:55:53:cd:54:25:5e:38: e2:b2:5b:cf:ac:8f:b8:0b:74:41:ba:1d:68:2d:ee: f3:3f:8c:c3:30:40:33:82:67:fa:08:ab:71:5c:df: c0:04:3c:51:64:f2:3e:be:7b:5c:16:cd:ea:15:84: 9d:db:50:74:16:da:11:b2:ca:7c:87:50:4b:00:c1: cd:8d:77:68:c4:72:5a:50:35:14:4f:fd:d2:97:ce: fc:c1:33:ea:00:5e:50:99:ca:e7:4d:4f:88:e8:14: 01:60:54:82:10:8e:7e:06:8a:a2:9e:bf:4d:cb:a0: 01:d6:aa:d0:94:67:0d:fb:55:62:77:70:f2:c2:fc: 92:c2:de:3e:79:57:7a:60:e6:ea:49:c4:89:eb:8a: 01:b5:f3:d5:cb:2d:23:eb:77:04:d8:e4:c1:73:c6: df:b3:2f:ac:14:b3:eb:e7:07:ff:18:3b:2a:0d:58: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A1:4C:24:3F:B2:82:F0:32:45:64:CF:F4:4B:25:F0:FC:14:7C:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4e2b59e0-0afb-39e7-b183-8f1d2f1b42e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:69:b4:fb:32:71:e5:8b:b4:64:1f:5b:7d:13:ec:57:23:0f: 3f:27:5b:1b:87:d0:85:db:2f:d8:7b:5e:df:d4:5a:7f:fe:1b: ca:df:1f:a7:53:cf:31:b9:22:ac:6a:37:96:98:3e:90:4a:3f: 40:ea:a9:19:08:9e:65:8d:1a:83:81:cc:09:76:e4:e8:54:52: 05:c4:98:f3:fb:35:62:81:6f:96:09:42:1b:3e:06:46:9a:6d: 40:da:8c:e2:a0:fe:43:96:94:94:6c:11:76:a8:de:fa:34:45: 27:dc:31:8f:54:8e:b2:b2:e1:b7:25:fc:4d:f7:3f:7a:eb:7b: ce:45:6f:99:58:94:5f:54:c7:a9:b7:7f:db:cb:23:12:80:c9: 0d:57:72:3a:07:89:9e:9c:ff:3a:6a:d0:4d:64:f4:bf:5c:93: 59:97:f8:b0:c3:3f:4d:c9:21:6a:86:04:21:fa:19:54:64:74: 5e:d2:f1:d2:08:9b:75:6c:dc:86:a0:5b:65:ce:41:ef:2b:81: de:db:93:a8:c5:b2:ba:e0:03:bf:fb:cd:db:24:e5:a5:2d:85: 6d:6e:5e:62:93:07:aa:88:b1:a5:4c:90:c0:69:98:5b:aa:bd: 73:9a:ea:59:94:3a:be:d2:91:04:78:f3:9a:d2:7c:f3:08:df: 54:95:24:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht96r8xw6N4DHv+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyN1oXDTI1MDcyMzExMDkyN1owLzEtMCsGA1UEAxMk YjYxMzU0NjUtM2EwOS00MTc4LTgyNDgtOWRlMjdiMDA1YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2CMK+ibmVlYdHv2CDKfQaInWTikr26Qie4C 88Zm1tHO7FuxxOuVpO4wFTs3qRmvvTByC9sFQ82jd5vO6RkOMHMIcBSnkhIJjAp7 uPrmFD33flVTzVQlXjjislvPrI+4C3RBuh1oLe7zP4zDMEAzgmf6CKtxXN/ABDxR ZPI+vntcFs3qFYSd21B0FtoRssp8h1BLAMHNjXdoxHJaUDUUT/3Sl878wTPqAF5Q mcrnTU+I6BQBYFSCEI5+Boqinr9Ny6AB1qrQlGcN+1Vid3DywvySwt4+eVd6YObq ScSJ64oBtfPVyy0j63cE2OTBc8bfsy+sFLPr5wf/GDsqDVg8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqhTCQ/soLwMkVkz/RLJfD8FHzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGUyYjU5ZTAtMGFmYi0z OWU3LWIxODMtOGYxZDJmMWI0MmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItptPsyceWLtGQfW30T7FcjDz8nWxuH0IXbL9h7Xt/UWn/+G8rfH6dT zzG5IqxqN5aYPpBKP0DqqRkInmWNGoOBzAl25OhUUgXEmPP7NWKBb5YJQhs+Bkaa bUDajOKg/kOWlJRsEXao3vo0RSfcMY9UjrKy4bcl/E33P3rre85Fb5lYlF9Ux6m3 f9vLIxKAyQ1XcjoHiZ6c/zpq0E1k9L9ck1mX+LDDP03JIWqGBCH6GVRkdF7S8dII m3Vs3IagW2XOQe8rgd7bk6jFsrrgA7/7zdsk5aUthW1uXmKTB6qIsaVMkMBpmFuq vXOa6lmUOr7SkQR485rSfPMI31SVJB0= -----END CERTIFICATE-----Generated at Sun Jun 15 12:06:36 2025 by rpki-client