$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa File: 58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa (raw, json) Hash identifier: JaFVAWPuy7+q8m1QH/yAYadhJpPb/4LXwcWZcJrGhy0= Subject key identifier: 27:93:C5:36:2E:38:F3:A2:0E:8B:CB:43:72:BB:2A:A7:A2:8B:C5:EE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7E93EA6FA9598765E01E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa Signing time: Thu 24 Apr 2025 11:09:32 +0000 ROA not before: Thu 24 Apr 2025 11:09:32 +0000 ROA not after: Wed 23 Jul 2025 11:09:32 +0000 asID: 12041 IP address blocks: 65.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:e9:3e:a6:fa:95:98:76:5e:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:32 2025 GMT Not After : Jul 23 11:09:32 2025 GMT Subject: CN=8281169b-74e7-4d2a-b92d-ff5f21628840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:21:77:52:a4:3f:9a:c9:97:1e:f8:6f:96: c0:cd:1c:d9:ca:ac:5b:05:9b:80:bf:a6:f7:36:24: 0e:99:f3:87:71:8a:2d:95:ef:cf:79:e4:2b:ec:70: b8:06:4c:9d:fa:34:40:ac:7c:9e:ff:42:a4:75:50: 2f:91:ad:72:db:cf:ef:4d:57:c4:0d:8e:df:4c:fd: 24:12:e9:72:11:2f:22:fb:13:28:db:ec:18:e5:24: 6b:ee:28:e5:bf:91:33:b6:4a:9a:8c:03:b6:8e:89: 46:11:73:e5:0a:7d:95:2d:38:13:30:66:b1:4d:d7: 3d:10:57:43:2c:82:dd:7d:67:5d:05:d4:93:b7:44: 46:ec:57:26:82:02:2a:ca:c6:ba:29:4a:b7:ca:83: 94:c9:c0:aa:a4:70:73:50:11:5c:35:88:cd:b2:25: 07:de:50:04:6f:b5:3e:7e:d6:73:e1:29:e6:97:aa: 51:4f:8d:36:70:62:ab:a9:ac:99:f4:78:92:60:16: 9a:1b:77:bd:b9:be:9d:a7:15:d3:c1:4b:bb:33:4e: 43:e8:53:8a:bd:93:70:a9:83:51:8f:52:2f:20:a2: 5c:05:aa:f1:19:d1:eb:b8:55:7b:7f:d2:cc:ec:6a: be:a6:92:b9:7e:be:78:d9:d5:3d:e9:ca:7c:2c:3e: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:93:C5:36:2E:38:F3:A2:0E:8B:CB:43:72:BB:2A:A7:A2:8B:C5:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:99:f5:b6:79:45:60:b1:6f:18:0a:b6:f4:0b:12:f0:4b:b4: 1f:ed:2b:7c:83:e6:99:54:7a:aa:5a:51:1e:71:b8:c8:ec:d4: 7c:39:62:53:9b:8f:ca:68:73:55:8a:ef:e5:ee:fb:7a:95:d3: 04:5d:f5:72:ff:08:b6:27:f9:3f:16:ad:6b:4f:99:02:d2:d1: a0:e3:52:21:65:42:8c:9d:38:77:df:69:76:83:01:35:93:41: 02:a6:10:4a:79:0c:4a:0c:68:6a:e0:9b:58:a7:9f:a5:19:dc: 9b:5e:eb:b9:0e:b8:dd:57:95:03:67:56:f4:ad:d3:4b:b9:fc: 3a:ca:62:80:68:df:65:e9:92:9d:94:7f:7f:cc:b1:09:c6:b7: 30:da:f4:fe:c4:a6:e5:46:3c:03:3a:ca:a8:fe:76:ac:5c:8e: 96:6f:3d:54:83:a0:bc:86:7a:f2:76:13:22:0b:aa:33:dd:d8: 4e:5c:9c:6e:9d:72:23:14:a7:29:ca:28:0b:ef:a9:79:38:21: eb:3a:52:a3:0d:2c:f1:15:fd:65:21:f1:ec:bf:2d:ad:8c:72: eb:03:b0:fa:b8:c3:9b:d7:f5:6d:88:8b:f3:83:be:f7:a0:5a: 1d:c7:8d:e3:af:6c:fe:14:1e:b2:09:90:c7:97:e2:ed:c1:4b: a2:e3:5c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht+k+pvqVmHZeAeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkzMloXDTI1MDcyMzExMDkzMlowLzEtMCsGA1UEAxMk ODI4MTE2OWItNzRlNy00ZDJhLWI5MmQtZmY1ZjIxNjI4ODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLMhd1KkP5rJlx74b5bAzRzZyqxbBZuAv6b3 NiQOmfOHcYotle/PeeQr7HC4Bkyd+jRArHye/0KkdVAvka1y28/vTVfEDY7fTP0k EulyES8i+xMo2+wY5SRr7ijlv5EztkqajAO2jolGEXPlCn2VLTgTMGaxTdc9EFdD LILdfWddBdSTt0RG7FcmggIqysa6KUq3yoOUycCqpHBzUBFcNYjNsiUH3lAEb7U+ ftZz4Snml6pRT402cGKrqayZ9HiSYBaaG3e9ub6dpxXTwUu7M05D6FOKvZNwqYNR j1IvIKJcBarxGdHruFV7f9LM7Gq+ppK5fr542dU96cp8LD4OfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeTxTYuOPOiDovLQ3K7Kqeii8XuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNThkZTFiMGUtZjNiNC0z N2QzLTk4MzItYzM5NmU3OWIxYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6Z9bZ5RWCxbxgKtvQLEvBLtB/tK3yD5plUeqpaUR5xuMjs1Hw5YlOb j8poc1WK7+Xu+3qV0wRd9XL/CLYn+T8WrWtPmQLS0aDjUiFlQoydOHffaXaDATWT QQKmEEp5DEoMaGrgm1inn6UZ3Jte67kOuN1XlQNnVvSt00u5/DrKYoBo32Xpkp2U f3/MsQnGtzDa9P7EpuVGPAM6yqj+dqxcjpZvPVSDoLyGevJ2EyILqjPd2E5cnG6d ciMUpynKKAvvqXk4Ies6UqMNLPEV/WUh8ey/La2McusDsPq4w5vX9W2Ii/ODvveg Wh3HjeOvbP4UHrIJkMeX4u3BS6LjXPQ= -----END CERTIFICATE-----Generated at Sun Jun 15 12:04:51 2025 by rpki-client