$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/54a69069-5b41-3a84-8040-6cb02eca775b.roa File: 54a69069-5b41-3a84-8040-6cb02eca775b.roa (raw, json) Hash identifier: fgdPOqLdtDdxEy55Vl89FGil4Mdzm1TRIhOOUydeVMQ= Subject key identifier: 4E:2D:A3:2C:96:D1:5C:DD:09:7A:85:64:14:2F:E5:13:C5:B4:73:FE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7CF56A025211D62734C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/54a69069-5b41-3a84-8040-6cb02eca775b.roa Signing time: Thu 24 Apr 2025 11:09:19 +0000 ROA not before: Thu 24 Apr 2025 11:09:19 +0000 ROA not after: Wed 23 Jul 2025 11:09:19 +0000 asID: 12041 IP address blocks: 65.22.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:cf:56:a0:25:21:1d:62:73:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:19 2025 GMT Not After : Jul 23 11:09:19 2025 GMT Subject: CN=735591ff-2626-4785-ae60-8ad4f2bb0564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9a:25:1f:70:12:8d:74:14:51:aa:d4:30:a5: 30:d8:fa:53:62:62:dd:73:07:e5:e4:ae:38:cd:a9: 90:43:85:2b:78:5f:5f:a1:5d:14:dd:9d:a7:fa:a0: 35:21:7a:29:0a:1e:14:07:be:b3:c2:32:ed:9c:8a: 29:9a:56:c0:05:76:95:a4:54:ab:b6:ea:c7:ac:31: 51:83:9b:02:89:7f:88:b5:1a:7c:54:ed:96:d7:ab: bc:15:74:6d:89:25:26:c7:ac:d9:0e:cd:d0:55:32: f9:db:db:dd:3e:fb:32:ef:9c:c0:ef:38:1e:af:2c: 32:3b:96:9a:64:ba:ec:5c:7d:4e:bc:52:3e:de:1b: 0d:de:80:19:24:ce:8e:3e:15:c6:3a:0a:29:c9:80: e1:96:04:bc:f0:2e:5a:ea:ea:d6:7e:b8:12:39:90: d7:89:81:20:b3:2b:1f:ee:3d:f0:b7:a0:64:8d:66: c7:d7:98:2b:f8:63:bf:8a:20:32:68:ed:1c:6a:14: c0:b0:e5:2d:33:b6:a9:1f:74:fe:08:20:9b:cc:6e: 4c:21:29:4f:32:39:13:85:05:03:af:9b:f6:ae:4e: cd:23:7e:81:8e:11:5b:1d:50:f1:79:8b:da:e2:3f: 8d:4e:87:23:97:6e:63:c5:c1:1c:b2:e1:af:b4:6c: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2D:A3:2C:96:D1:5C:DD:09:7A:85:64:14:2F:E5:13:C5:B4:73:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/54a69069-5b41-3a84-8040-6cb02eca775b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:dc:56:eb:c5:f1:51:d6:b3:14:b5:1b:0b:2c:5c:17:06:2e: 2e:6c:07:34:a2:87:65:3a:85:fb:ed:e8:ac:07:9b:6a:a1:ff: 98:91:f4:eb:09:65:e6:58:8e:96:32:dc:78:c5:28:8e:c1:fc: 0d:74:5f:f7:78:c8:b5:5e:69:d6:67:21:56:05:72:09:6d:60: 73:95:c2:79:4d:24:ce:38:a7:81:00:64:69:41:6d:61:50:ba: a7:90:e2:47:2e:c8:56:63:9f:d3:bb:67:23:76:0d:0d:29:54: bc:08:e4:19:9e:7f:7d:97:7f:35:58:98:2c:f4:39:1e:4e:20: 0a:1c:75:c3:fc:6f:58:b0:dc:cc:1b:79:28:9a:5a:99:43:bf: 8a:36:b3:7e:dd:be:15:ec:ce:4e:65:f6:29:6a:1a:53:71:22: d2:49:49:8c:8c:14:f6:15:d8:59:a2:51:fe:5d:0d:6f:e0:e6: 18:03:1f:05:7f:a9:7d:a2:2a:c9:5a:26:dc:a1:a8:9a:2d:3f: b1:e2:bd:f6:4e:cd:d8:0f:2b:fb:7b:63:50:fa:32:80:96:95: 5c:7a:f2:72:f8:5c:8a:8e:3d:c8:3d:6d:e0:0b:b7:61:3b:f3: 93:a4:61:7b:30:66:95:cf:7c:aa:10:5f:52:6a:0a:e0:b8:b2: 38:88:b9:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht89WoCUhHWJzTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkxOVoXDTI1MDcyMzExMDkxOVowLzEtMCsGA1UEAxMk NzM1NTkxZmYtMjYyNi00Nzg1LWFlNjAtOGFkNGYyYmIwNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZolH3ASjXQUUarUMKUw2PpTYmLdcwfl5K44 zamQQ4UreF9foV0U3Z2n+qA1IXopCh4UB76zwjLtnIopmlbABXaVpFSrturHrDFR g5sCiX+ItRp8VO2W16u8FXRtiSUmx6zZDs3QVTL529vdPvsy75zA7zgerywyO5aa ZLrsXH1OvFI+3hsN3oAZJM6OPhXGOgopyYDhlgS88C5a6urWfrgSOZDXiYEgsysf 7j3wt6BkjWbH15gr+GO/iiAyaO0cahTAsOUtM7apH3T+CCCbzG5MISlPMjkThQUD r5v2rk7NI36BjhFbHVDxeYva4j+NTocjl25jxcEcsuGvtGz/fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4toyyW0VzdCXqFZBQv5RPFtHP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTRhNjkwNjktNWI0MS0z YTg0LTgwNDAtNmNiMDJlY2E3NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/cVuvF8VHWsxS1GwssXBcGLi5sBzSih2U6hfvt6KwHm2qh/5iR9OsJ ZeZYjpYy3HjFKI7B/A10X/d4yLVeadZnIVYFcgltYHOVwnlNJM44p4EAZGlBbWFQ uqeQ4kcuyFZjn9O7ZyN2DQ0pVLwI5Bmef32XfzVYmCz0OR5OIAocdcP8b1iw3Mwb eSiaWplDv4o2s37dvhXszk5l9ilqGlNxItJJSYyMFPYV2FmiUf5dDW/g5hgDHwV/ qX2iKslaJtyhqJotP7HivfZOzdgPK/t7Y1D6MoCWlVx68nL4XIqOPcg9beALt2E7 85OkYXswZpXPfKoQX1JqCuC4sjiIuak= -----END CERTIFICATE-----Generated at Tue Apr 29 13:23:10 2025 by rpki-client