$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa File: 5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa (raw, json) Hash identifier: dmtZYVSL6RiF811cEHs/hOivYOt2somS5S97NGBgEkY= Subject key identifier: 52:76:97:78:A3:E8:A1:3D:C5:29:32:A4:DF:EA:A3:B6:33:6B:A6:2D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849CE9A34CE9A88A1E5605B7440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13657 IP address blocks: 65.22.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:34:ce:9a:88:a1:e5:60:5b:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=47b1825c-60ab-4015-bc9f-9910fd9fab57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:16:fc:29:a5:38:32:08:0f:c6:67:a1:ce:23: 9f:14:6e:78:b8:82:18:54:32:0a:84:f8:22:99:ea: 5c:c4:b9:35:9e:ab:c0:85:51:33:ed:82:dd:e8:8f: 5e:61:8c:fc:29:13:95:a1:9d:da:92:3e:5f:9b:6f: 53:6f:e4:69:67:89:c2:c6:28:83:f4:8b:75:f7:a9: 2a:41:34:05:e2:15:1e:3a:9a:9e:f5:30:74:72:66: ea:d1:02:20:0d:e2:13:da:6e:c0:65:76:90:4d:f2: a7:2b:b2:82:04:82:d8:b2:08:9c:e3:62:e6:73:98: e4:98:33:be:30:88:22:87:7d:fd:6d:17:b6:85:33: 0c:1d:89:58:72:18:36:30:4e:cd:d6:60:31:b0:a9: e9:0b:1f:ca:ae:67:f1:2e:d2:31:32:ad:12:7d:2c: fe:a1:7e:52:5d:61:c7:d5:1c:a5:d8:f4:e8:68:2a: c0:4d:8e:1e:c6:97:30:32:34:ac:d5:f1:e8:1f:49: fe:a0:e9:b3:7e:58:f3:f3:12:42:0f:ad:f7:b4:02: e5:73:a3:99:14:a7:7b:c2:68:1f:69:dd:f3:cf:cb: 4b:d8:16:6d:b4:25:3e:bc:d4:e6:cc:59:ea:64:3d: e0:2b:8e:cb:77:c4:c1:4d:a0:e7:f6:e3:e4:33:06: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:76:97:78:A3:E8:A1:3D:C5:29:32:A4:DF:EA:A3:B6:33:6B:A6:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:02:8c:14:19:cd:38:a1:8a:4d:90:b1:fb:b4:36:ed:b8:70: 00:17:00:04:52:cb:13:36:c2:1c:28:4d:61:e0:36:5d:45:be: 95:69:ad:25:2b:97:70:9a:05:c6:f8:bb:bc:ff:88:8c:3d:81: fa:3c:84:01:fb:8c:51:b7:09:1f:87:09:ca:4f:88:12:3c:1c: 6a:6e:1b:40:20:b0:92:da:34:d9:76:a6:b3:c2:2d:df:6c:f8: a0:de:de:0f:98:ca:a4:da:8a:0d:3d:92:67:0e:cc:bd:7f:97: 16:7f:85:c4:3f:8a:d8:8d:78:19:ed:af:75:64:09:dd:c2:9e: 98:0f:19:37:60:eb:19:43:aa:88:8b:e0:a0:66:e6:6a:5d:23: 93:ff:e1:3e:d5:1a:32:8c:b0:ca:9d:cc:54:bd:cf:98:33:7c: 43:cc:16:00:d5:37:04:18:71:36:fe:f9:a8:7a:d5:9c:36:39: 47:39:9e:51:9e:70:42:2f:5e:50:25:84:95:fe:62:93:50:ee: ea:de:66:63:61:74:5d:af:cb:4c:c9:f3:34:83:50:29:0d:c6: dd:7e:74:96:93:f5:e8:dc:ee:58:61:21:81:26:ea:da:58:ce: e2:b9:fe:53:a8:81:69:b5:c0:3e:b0:9c:40:c1:ca:05:aa:26: d3:fa:a6:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmjTOmoih5WBbdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NDdiMTgyNWMtNjBhYi00MDE1LWJjOWYtOTkxMGZkOWZhYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRb8KaU4MggPxmehziOfFG54uIIYVDIKhPgi mepcxLk1nqvAhVEz7YLd6I9eYYz8KROVoZ3akj5fm29Tb+RpZ4nCxiiD9It196kq QTQF4hUeOpqe9TB0cmbq0QIgDeIT2m7AZXaQTfKnK7KCBILYsgic42Lmc5jkmDO+ MIgih339bRe2hTMMHYlYchg2ME7N1mAxsKnpCx/KrmfxLtIxMq0SfSz+oX5SXWHH 1Ryl2PToaCrATY4expcwMjSs1fHoH0n+oOmzfljz8xJCD633tALlc6OZFKd7wmgf ad3zz8tL2BZttCU+vNTmzFnqZD3gK47Ld8TBTaDn9uPkMwZmUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ2l3ij6KE9xSkypN/qo7Yza6YtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWFhMmJiMGItMmNhMi0z Njc4LWFkYTEtMjhiOTQ4ZmFiZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGICjBQZzTihik2Qsfu0Nu24cAAXAARSyxM2whwoTWHgNl1FvpVprSUr l3CaBcb4u7z/iIw9gfo8hAH7jFG3CR+HCcpPiBI8HGpuG0AgsJLaNNl2prPCLd9s +KDe3g+YyqTaig09kmcOzL1/lxZ/hcQ/itiNeBntr3VkCd3CnpgPGTdg6xlDqoiL 4KBm5mpdI5P/4T7VGjKMsMqdzFS9z5gzfEPMFgDVNwQYcTb++ah61Zw2OUc5nlGe cEIvXlAlhJX+YpNQ7ureZmNhdF2vy0zJ8zSDUCkNxt1+dJaT9ejc7lhhIYEm6tpY zuK5/lOogWm1wD6wnEDBygWqJtP6po4= -----END CERTIFICATE-----Generated at Mon Jun 16 21:13:30 2025 by rpki-client