$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa File: 5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa (raw, json) Hash identifier: /9PcsEo4UsQctXjTEu7MCFZboAZUtb/ZgfHp/iZ8ARQ= Subject key identifier: 32:0A:2C:8C:1A:2C:E1:D5:1E:90:9C:7E:07:F6:DC:9A:99:4A:34:35 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B791DB3B6A7B909D5E6900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa Signing time: Thu 24 Apr 2025 11:08:50 +0000 ROA not before: Thu 24 Apr 2025 11:08:50 +0000 ROA not after: Wed 23 Jul 2025 11:08:50 +0000 asID: 12041 IP address blocks: 65.22.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:91:db:3b:6a:7b:90:9d:5e:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:50 2025 GMT Not After : Jul 23 11:08:50 2025 GMT Subject: CN=ead625a3-fd56-42b2-a940-f42d9857a25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:09:0f:44:4c:f5:71:ca:b7:f8:f5:4b:1d: 2d:e7:93:37:3a:d1:66:ea:ba:16:0e:46:ce:1e:a3: 52:76:56:ef:2c:08:f9:48:9e:96:5e:50:c5:90:48: 1e:e2:bd:58:25:90:8a:64:70:4d:62:e4:d6:c4:bb: 97:9b:e6:32:c1:64:ec:25:f3:b9:8e:b0:95:06:14: 05:ca:eb:f8:66:49:b5:fd:c5:9d:fe:f9:93:9e:5e: df:34:ea:4e:01:a8:6a:69:6d:fb:d1:ef:29:2f:61: b3:09:91:d4:91:36:86:4a:6d:cd:47:d9:77:58:96: ed:95:86:e7:7c:c2:33:b1:23:9c:cc:a2:2e:3f:cf: 10:71:af:aa:fb:68:ac:3d:0a:d9:ed:92:89:84:04: e5:fb:ef:1e:8b:57:6d:b1:2f:af:bc:fc:e9:43:f0: 27:32:77:cb:cf:35:65:87:89:89:ea:b6:76:55:9f: 10:f9:73:07:bb:65:7d:ec:e3:7b:b1:c1:59:7e:2c: c9:f0:68:c4:26:af:08:0a:1c:fb:a4:e7:5f:f7:f5: 5c:bb:01:dd:9c:68:b9:0a:1a:b9:f4:f3:36:d1:4c: 2f:b6:c4:23:cf:eb:05:87:70:2b:97:ad:5f:e3:b1: 76:06:89:f4:91:29:47:15:4c:5c:ac:11:0e:ab:4d: 3d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0A:2C:8C:1A:2C:E1:D5:1E:90:9C:7E:07:F6:DC:9A:99:4A:34:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:eb:e3:5e:19:52:fe:2f:37:d0:76:cb:74:fb:7f:db:f5:5b: 25:cd:05:07:ba:b5:04:81:eb:e9:f9:98:8a:03:79:ae:53:f3: 6e:52:59:5c:7b:7d:80:97:0e:0b:6f:03:2f:57:79:30:47:cf: 51:f2:96:c1:fa:27:de:26:30:05:b7:7e:cc:30:eb:48:1a:8d: 32:48:13:9c:d6:22:c9:d4:bb:2e:1d:ab:33:86:1b:e3:cb:a4: 8d:2c:d5:9e:68:e0:29:37:1c:74:61:af:14:21:ba:92:57:eb: 08:b9:50:91:15:e5:cc:93:74:5d:cb:91:28:79:c8:ee:34:a5: 23:a8:b8:a8:f2:f6:a7:5c:ed:82:90:0d:73:05:4d:53:ba:99: 72:8a:4b:7d:25:3b:33:d5:e5:b5:4f:8c:59:46:13:c0:a1:b5: 7d:b4:42:95:38:61:a8:5c:90:1a:26:88:38:4f:bb:b4:ea:64: 9a:7b:a9:74:87:93:38:f5:25:6d:bc:16:16:7f:3e:a8:69:44: 35:82:0d:5c:ea:3c:fc:f2:9c:26:98:31:e2:18:5d:98:04:6b: 44:d8:ca:01:a2:5d:4e:1e:5d:00:82:b2:fc:ff:3b:00:5a:15: 62:ce:4e:4b:8b:09:43:2a:61:70:38:bd:f8:c0:80:52:97:74: f2:7e:49:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht5HbO2p7kJ1eaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1MFoXDTI1MDcyMzExMDg1MFowLzEtMCsGA1UEAxMk ZWFkNjI1YTMtZmQ1Ni00MmIyLWE5NDAtZjQyZDk4NTdhMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWwJD0RM9XHKt/j1Sx0t55M3OtFm6roWDkbO HqNSdlbvLAj5SJ6WXlDFkEge4r1YJZCKZHBNYuTWxLuXm+YywWTsJfO5jrCVBhQF yuv4Zkm1/cWd/vmTnl7fNOpOAahqaW370e8pL2GzCZHUkTaGSm3NR9l3WJbtlYbn fMIzsSOczKIuP88Qca+q+2isPQrZ7ZKJhATl++8ei1dtsS+vvPzpQ/AnMnfLzzVl h4mJ6rZ2VZ8Q+XMHu2V97ON7scFZfizJ8GjEJq8IChz7pOdf9/VcuwHdnGi5Chq5 9PM20UwvtsQjz+sFh3Arl61f47F2Bon0kSlHFUxcrBEOq009nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIKLIwaLOHVHpCcfgf23JqZSjQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWE5NDBlZWEtY2I3NC0z ZDY3LWIwY2MtYTcyNmUyODUzYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHr414ZUv4vN9B2y3T7f9v1WyXNBQe6tQSB6+n5mIoDea5T825SWVx7 fYCXDgtvAy9XeTBHz1HylsH6J94mMAW3fsww60gajTJIE5zWIsnUuy4dqzOGG+PL pI0s1Z5o4Ck3HHRhrxQhupJX6wi5UJEV5cyTdF3LkSh5yO40pSOouKjy9qdc7YKQ DXMFTVO6mXKKS30lOzPV5bVPjFlGE8ChtX20QpU4YahckBomiDhPu7TqZJp7qXSH kzj1JW28FhZ/PqhpRDWCDVzqPPzynCaYMeIYXZgEa0TYygGiXU4eXQCCsvz/OwBa FWLOTkuLCUMqYXA4vfjAgFKXdPJ+SRM= -----END CERTIFICATE-----Generated at Tue Apr 29 14:32:00 2025 by rpki-client