$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4e54e9a3-1804-3909-8d1c-efaffdfc41c4.roa File: 4e54e9a3-1804-3909-8d1c-efaffdfc41c4.roa (raw, json) Hash identifier: tUf5dNDI8T91HomL8KxWiLoyUEEqcatK2trfSNcLDxs= Subject key identifier: 2D:9F:61:5E:06:AE:CB:CD:F2:B5:4B:72:53:CD:38:A0:6B:19:3C:31 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B839EA07139468D5386180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4e54e9a3-1804-3909-8d1c-efaffdfc41c4.roa Signing time: Thu 24 Apr 2025 11:10:10 +0000 ROA not before: Thu 24 Apr 2025 11:10:10 +0000 ROA not after: Wed 23 Jul 2025 11:10:10 +0000 asID: 12041 IP address blocks: 65.22.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:39:ea:07:13:94:68:d5:38:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:10 2025 GMT Not After : Jul 23 11:10:10 2025 GMT Subject: CN=e99ff8fe-c00f-43f4-a1cd-8e87fca1f003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:fb:b9:16:b5:e2:cc:88:96:a5:66:b6:f4: 3d:d4:7a:c1:b2:12:3f:8f:a7:bc:61:7d:13:75:87: de:a5:b5:cc:e9:c9:e9:88:10:40:48:25:78:c7:73: d3:8d:23:26:b5:fa:87:0b:56:b2:85:d6:f1:a5:5b: a0:83:2b:21:30:9a:99:10:e6:51:ab:c1:8c:d6:85: 55:07:32:da:f3:91:94:65:9d:21:98:ca:91:b9:6c: 05:a7:da:0f:06:8d:a9:b0:cf:3e:df:b6:80:16:6e: 79:2a:73:43:83:6c:10:56:e8:d5:78:db:9e:9b:24: 32:97:7f:d3:cf:71:95:23:0c:7a:87:61:36:8a:02: c1:2e:1e:5c:b9:88:79:7a:87:08:12:19:6a:3d:11: ed:e5:92:6b:0a:63:5c:2a:6c:e4:d2:18:48:34:5f: 35:02:a5:ed:e0:6b:9a:e6:15:7e:21:13:66:0e:be: ad:c3:29:89:2e:e4:f6:30:15:98:f6:2b:dd:08:ef: ae:ee:fe:7b:08:82:fa:7c:94:33:0f:32:99:82:fe: 4a:13:f1:bd:b7:08:cb:2a:fa:98:d8:6f:a9:d4:04: fa:71:9c:b7:9c:8a:e1:b1:ad:f4:75:e6:97:ee:52: bc:f5:1a:11:ab:d8:fa:17:5a:42:20:b8:18:01:47: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9F:61:5E:06:AE:CB:CD:F2:B5:4B:72:53:CD:38:A0:6B:19:3C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4e54e9a3-1804-3909-8d1c-efaffdfc41c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:52:39:bd:28:88:93:2b:14:0e:ad:34:6b:f7:30:08:26:5a: f2:e0:49:31:dd:dc:c9:8d:0a:dd:c0:7e:df:40:77:11:70:85: 7d:8d:f4:7c:86:65:96:9e:73:1d:03:08:61:59:43:36:af:af: 6c:e5:e2:e6:2b:ba:41:dc:e5:a4:92:cb:8a:cc:5e:38:7b:fc: 78:1a:d5:7d:ce:92:b6:44:d8:98:4e:4b:2d:d7:ae:d2:50:ad: e2:ec:3e:20:16:b4:37:8c:4f:cb:29:0f:7d:15:18:2f:ec:ce: 23:eb:1e:fb:7d:9b:09:00:a2:cf:d7:ba:e4:c0:a1:21:5e:98: 6d:5d:10:1c:01:d9:fc:90:d2:aa:50:eb:e9:24:43:a6:1d:23: 99:63:0e:a4:8a:2c:ab:d6:3f:fd:94:0d:dc:03:7c:02:b7:91: 37:d2:0c:35:f7:fb:10:29:a9:e1:fd:19:24:d6:74:7c:9c:36: 35:61:f5:bf:58:3a:f1:a9:d5:e2:8b:ce:49:33:d4:74:2f:5e: 6a:af:eb:3e:94:60:24:45:b5:1c:64:ad:16:12:e9:19:e6:90: 0c:a0:78:ba:f6:7d:40:38:b5:07:ba:e1:a1:d8:d2:3b:9d:9c: 04:01:1f:bd:82:5e:b5:39:b6:f6:81:5c:ba:74:6c:a3:e6:01: e7:a2:73:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuDnqBxOUaNU4YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAxMFoXDTI1MDcyMzExMTAxMFowLzEtMCsGA1UEAxMk ZTk5ZmY4ZmUtYzAwZi00M2Y0LWExY2QtOGU4N2ZjYTFmMDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKz7uRa14syIlqVmtvQ91HrBshI/j6e8YX0T dYfepbXM6cnpiBBASCV4x3PTjSMmtfqHC1ayhdbxpVuggyshMJqZEOZRq8GM1oVV BzLa85GUZZ0hmMqRuWwFp9oPBo2psM8+37aAFm55KnNDg2wQVujVeNuemyQyl3/T z3GVIwx6h2E2igLBLh5cuYh5eocIEhlqPRHt5ZJrCmNcKmzk0hhINF81AqXt4Gua 5hV+IRNmDr6twymJLuT2MBWY9ivdCO+u7v57CIL6fJQzDzKZgv5KE/G9twjLKvqY 2G+p1AT6cZy3nIrhsa30deaX7lK89RoRq9j6F1pCILgYAUdKTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2fYV4GrsvN8rVLclPNOKBrGTwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGU1NGU5YTMtMTgwNC0z OTA5LThkMWMtZWZhZmZkZmM0MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhSOb0oiJMrFA6tNGv3MAgmWvLgSTHd3MmNCt3Aft9AdxFwhX2N9HyG ZZaecx0DCGFZQzavr2zl4uYrukHc5aSSy4rMXjh7/Hga1X3OkrZE2JhOSy3XrtJQ reLsPiAWtDeMT8spD30VGC/sziPrHvt9mwkAos/XuuTAoSFemG1dEBwB2fyQ0qpQ 6+kkQ6YdI5ljDqSKLKvWP/2UDdwDfAK3kTfSDDX3+xApqeH9GSTWdHycNjVh9b9Y OvGp1eKLzkkz1HQvXmqv6z6UYCRFtRxkrRYS6RnmkAygeLr2fUA4tQe64aHY0jud nAQBH72CXrU5tvaBXLp0bKPmAeeic2M= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:01 2025 by rpki-client