$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53149a74-a3be-3b69-a7f8-608a2a078fa9.roa File: 53149a74-a3be-3b69-a7f8-608a2a078fa9.roa (raw, json) Hash identifier: Rlr9Rzr1q5qMfCoi7+t0y+EDnVpQlibH/0k+61Q4Xzk= Subject key identifier: 2E:13:60:BA:9C:6C:5D:42:C8:33:01:53:AE:96:90:1D:C8:7E:35:7C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B726487D64E14213DCAA10 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53149a74-a3be-3b69-a7f8-608a2a078fa9.roa Signing time: Thu 24 Apr 2025 11:08:00 +0000 ROA not before: Thu 24 Apr 2025 11:08:00 +0000 ROA not after: Wed 23 Jul 2025 11:08:00 +0000 asID: 12041 IP address blocks: 65.22.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:26:48:7d:64:e1:42:13:dc:aa:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:00 2025 GMT Not After : Jul 23 11:08:00 2025 GMT Subject: CN=bd287c1c-9676-4872-bb73-3852ac8fe75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:76:c6:13:97:f5:56:9f:27:b5:f7:66:d1: 79:5d:1b:4a:d3:b1:09:7c:5a:73:a1:ee:89:9c:ee: 80:de:dc:fd:d0:ec:0b:be:fb:84:58:03:96:61:9b: b2:f9:b6:f0:01:1d:57:6f:a2:68:ed:3c:6c:1d:6a: fb:b8:32:35:d9:73:85:08:e0:e5:05:c4:0d:ca:71: f1:91:5b:b0:6f:01:6f:e5:c3:a7:01:06:60:86:56: 8e:d6:b7:28:03:31:f8:25:b7:a7:f1:00:62:65:7f: f2:95:ce:f7:a2:1a:54:17:ef:98:5d:5f:1e:39:ba: 05:c4:08:11:11:88:56:6b:39:a0:99:63:47:34:42: 3a:ff:de:0f:17:86:3e:99:db:d7:23:52:f0:36:69: 68:98:24:19:15:1a:09:47:ee:44:72:7e:ca:1e:b7: af:ab:84:e6:a0:95:3d:fb:db:1f:07:b2:2a:58:81: db:91:38:d3:9b:1d:58:29:94:1a:9e:ae:e2:98:51: 6a:21:5d:2c:8d:b1:bf:f8:c9:7a:77:dd:5c:34:db: 01:c3:2f:97:b6:aa:c9:aa:90:ba:ed:cc:64:28:eb: 73:8b:31:e8:34:44:f3:85:1b:93:1b:0a:43:a7:d7: 1b:02:2f:5f:88:13:98:c4:1a:0d:30:ca:6e:a1:0b: cf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:13:60:BA:9C:6C:5D:42:C8:33:01:53:AE:96:90:1D:C8:7E:35:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53149a74-a3be-3b69-a7f8-608a2a078fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:7a:90:12:1a:23:09:17:ca:6d:2c:dc:19:a6:cf:89:60:6c: 3b:c1:0a:be:e1:e8:06:65:5a:02:4c:e1:c5:27:04:80:20:19: 4c:09:13:02:46:38:86:61:ac:ef:38:c3:59:4a:75:0b:2a:b5: 15:4f:dd:7c:6d:84:67:01:21:ca:bb:a9:72:ba:30:8f:51:72: b1:63:61:81:0e:cc:11:41:b4:35:63:ef:07:45:aa:86:40:08: 96:6f:8f:ce:e4:94:7f:7d:8f:69:36:3f:ab:56:3e:52:9d:19: 3a:c3:6e:26:b8:52:16:74:a4:cd:79:b6:d8:49:04:4d:b9:c1: 57:dd:60:ed:74:b0:57:59:3d:d2:1a:0e:9d:c5:ef:44:0a:8c: 41:e2:12:50:ed:7d:df:dd:8e:f8:31:42:65:81:2a:cc:23:e0: 10:87:38:ed:d9:37:4f:b7:c7:57:9b:85:11:dd:e0:5a:cd:e1: 67:83:fc:ab:9d:67:be:a5:b2:de:fa:e0:c4:77:92:63:30:68: ba:99:9c:e7:d3:f3:96:95:c6:10:93:a9:26:fd:19:b4:8f:c9: 25:56:ba:3a:d8:6f:38:be:d5:7f:a0:e2:8e:e6:bf:92:09:3a: 57:07:97:7e:c1:eb:52:78:9c:d8:aa:0a:db:41:02:57:c4:70: b8:d1:da:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtyZIfWThQhPcqhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgwMFoXDTI1MDcyMzExMDgwMFowLzEtMCsGA1UEAxMk YmQyODdjMWMtOTY3Ni00ODcyLWJiNzMtMzg1MmFjOGZlNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngR2xhOX9VafJ7X3ZtF5XRtK07EJfFpzoe6J nO6A3tz90OwLvvuEWAOWYZuy+bbwAR1Xb6Jo7TxsHWr7uDI12XOFCODlBcQNynHx kVuwbwFv5cOnAQZghlaO1rcoAzH4Jben8QBiZX/ylc73ohpUF++YXV8eOboFxAgR EYhWazmgmWNHNEI6/94PF4Y+mdvXI1LwNmlomCQZFRoJR+5Ecn7KHrevq4TmoJU9 +9sfB7IqWIHbkTjTmx1YKZQanq7imFFqIV0sjbG/+Ml6d91cNNsBwy+XtqrJqpC6 7cxkKOtzizHoNETzhRuTGwpDp9cbAi9fiBOYxBoNMMpuoQvPjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4TYLqcbF1CyDMBU66WkB3IfjV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTMxNDlhNzQtYTNiZS0z YjY5LWE3ZjgtNjA4YTJhMDc4ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZ6kBIaIwkXym0s3Bmmz4lgbDvBCr7h6AZlWgJM4cUnBIAgGUwJEwJG OIZhrO84w1lKdQsqtRVP3XxthGcBIcq7qXK6MI9RcrFjYYEOzBFBtDVj7wdFqoZA CJZvj87klH99j2k2P6tWPlKdGTrDbia4UhZ0pM15tthJBE25wVfdYO10sFdZPdIa Dp3F70QKjEHiElDtfd/djvgxQmWBKswj4BCHOO3ZN0+3x1ebhRHd4FrN4WeD/Kud Z76lst764MR3kmMwaLqZnOfT85aVxhCTqSb9GbSPySVWujrYbzi+1X+g4o7mv5IJ OlcHl37B61J4nNiqCttBAlfEcLjR2vs= -----END CERTIFICATE-----Generated at Wed Apr 30 03:40:44 2025 by rpki-client