$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5493c31b-d972-3447-bd2f-01669e29fefc.roa File: 5493c31b-d972-3447-bd2f-01669e29fefc.roa (raw, json) Hash identifier: wcUNDqEKD8mA/yN3p5UcZFYIGOrMf3fqQ+Qmg3RGS+I= Subject key identifier: A7:65:61:45:3E:E7:FA:2E:6B:10:26:02:9C:68:98:D4:60:95:B2:D1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B41CF23FC5E79C025BB340 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5493c31b-d972-3447-bd2f-01669e29fefc.roa Signing time: Thu 24 Apr 2025 11:01:52 +0000 ROA not before: Thu 24 Apr 2025 11:01:52 +0000 ROA not after: Wed 23 Jul 2025 11:01:52 +0000 asID: 12041 IP address blocks: 65.22.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:1c:f2:3f:c5:e7:9c:02:5b:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:01:52 2025 GMT Not After : Jul 23 11:01:52 2025 GMT Subject: CN=30b83785-1291-4168-bbd1-92abdf776342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4d:47:0e:20:4f:ef:8a:c8:0a:a6:0b:da:df: bc:b9:1f:6a:5e:38:90:75:ed:84:77:6f:da:9d:0d: 96:e2:dc:bb:c3:7c:22:e0:ce:bd:da:15:a6:18:8c: fe:c8:0a:90:de:46:5c:36:ae:4e:9c:ba:a1:79:79: 7a:62:f5:1e:a5:1a:12:a2:1b:89:a9:fa:e1:1b:4f: e5:8a:df:aa:db:0e:88:4e:f8:29:a6:77:94:c7:23: 7d:e7:d0:fb:fb:c3:b6:77:08:3a:02:7d:f7:6b:46: ed:5b:49:6a:05:14:10:fe:0e:78:02:40:87:96:78: 72:ea:73:58:ae:2a:f4:42:3b:b8:82:57:f9:81:25: 1f:93:4d:a5:52:d0:f5:66:4f:4a:9e:48:0e:05:4f: fb:33:6d:51:70:f5:ed:8a:e4:36:a0:c7:7f:c4:dc: dd:78:c7:f9:75:c5:24:9b:ac:fb:11:e8:44:d3:e3: a1:da:bc:e9:23:85:2e:89:6c:a2:0d:fe:80:90:6c: ab:0f:18:28:3a:4b:4f:26:e2:59:6c:7d:49:c1:45: 2e:5d:3e:5c:6a:c6:48:7e:54:d6:f2:3b:15:8b:b3: a4:37:65:bc:1f:77:2d:52:50:b2:b4:ab:72:d8:e2: d2:c1:d0:1d:f1:33:13:4d:c0:75:f5:1f:2f:5b:b1: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:65:61:45:3E:E7:FA:2E:6B:10:26:02:9C:68:98:D4:60:95:B2:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5493c31b-d972-3447-bd2f-01669e29fefc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2a:a7:93:a7:ee:2c:36:b8:81:02:91:dc:6a:18:47:e0:5d: 45:62:4d:ca:a3:e7:61:cc:89:02:b8:e8:40:84:32:cd:aa:e1: f2:b6:81:85:1f:fb:64:90:98:67:ac:f3:92:35:ce:0d:1f:45: d4:65:e7:84:33:61:1d:89:3b:05:31:0f:f9:bf:27:8f:87:22: 78:50:b5:8e:39:29:d1:6e:2f:fe:1f:6a:5e:15:e9:64:e3:8e: dc:d9:d7:ac:1d:90:fb:db:66:98:36:3c:cb:8f:33:0f:83:e6: 77:54:fd:d4:b4:1b:90:90:e0:66:18:7f:48:8b:6b:70:66:29: 7e:9a:08:f3:27:09:e6:05:78:d7:1b:db:7e:a6:84:47:f6:5b: cd:3e:5b:52:ec:e2:26:e2:c9:95:aa:e4:9b:c0:5f:93:a6:4b: 1a:0f:bf:08:aa:11:b3:85:e7:e9:84:97:54:1a:b0:10:06:91: a7:dc:ab:ff:93:d0:d1:85:4e:2c:dc:db:62:36:23:a0:f5:b3: 54:9d:12:bb:0c:33:69:38:3c:63:60:12:85:d7:66:af:1f:ba: 7d:f9:3a:d7:ce:a2:b5:03:1f:2f:7f:d0:ca:8e:ec:9a:b2:e1: 4a:c7:00:1b:c2:9e:fa:80:bf:f2:2b:c8:0e:62:79:22:2a:df: 74:f6:42:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtBzyP8XnnAJbs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDE1MloXDTI1MDcyMzExMDE1MlowLzEtMCsGA1UEAxMk MzBiODM3ODUtMTI5MS00MTY4LWJiZDEtOTJhYmRmNzc2MzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm01HDiBP74rICqYL2t+8uR9qXjiQde2Ed2/a nQ2W4ty7w3wi4M692hWmGIz+yAqQ3kZcNq5OnLqheXl6YvUepRoSohuJqfrhG0/l it+q2w6ITvgppneUxyN959D7+8O2dwg6An33a0btW0lqBRQQ/g54AkCHlnhy6nNY rir0Qju4glf5gSUfk02lUtD1Zk9KnkgOBU/7M21RcPXtiuQ2oMd/xNzdeMf5dcUk m6z7EehE0+Oh2rzpI4UuiWyiDf6AkGyrDxgoOktPJuJZbH1JwUUuXT5casZIflTW 8jsVi7OkN2W8H3ctUlCytKty2OLSwdAd8TMTTcB19R8vW7HoGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdlYUU+5/ouaxAmApxomNRglbLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTQ5M2MzMWItZDk3Mi0z NDQ3LWJkMmYtMDE2NjllMjlmZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQqp5On7iw2uIECkdxqGEfgXUViTcqj52HMiQK46ECEMs2q4fK2gYUf +2SQmGes85I1zg0fRdRl54QzYR2JOwUxD/m/J4+HInhQtY45KdFuL/4fal4V6WTj jtzZ16wdkPvbZpg2PMuPMw+D5ndU/dS0G5CQ4GYYf0iLa3BmKX6aCPMnCeYFeNcb 236mhEf2W80+W1Ls4ibiyZWq5JvAX5OmSxoPvwiqEbOF5+mEl1QasBAGkafcq/+T 0NGFTizc22I2I6D1s1SdErsMM2k4PGNgEoXXZq8fun35OtfOorUDHy9/0MqO7Jqy 4UrHABvCnvqAv/IryA5ieSIq33T2QjQ= -----END CERTIFICATE-----Generated at Tue Apr 29 14:32:51 2025 by rpki-client