$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5b56bb0e-03d6-3625-9198-7be659955156.roa File: 5b56bb0e-03d6-3625-9198-7be659955156.roa (raw, json) Hash identifier: cptvfPNuV97YoHqkLvQAzZDjH4eUDpzhikdYsm2X1eQ= Subject key identifier: D7:40:42:DA:5C:7E:67:30:AD:A5:84:43:7D:80:AE:21:2F:AE:F5:3D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B803578E3D65301DB3F100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5b56bb0e-03d6-3625-9198-7be659955156.roa Signing time: Thu 24 Apr 2025 11:09:44 +0000 ROA not before: Thu 24 Apr 2025 11:09:44 +0000 ROA not after: Wed 23 Jul 2025 11:09:44 +0000 asID: 12041 IP address blocks: 65.22.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:03:57:8e:3d:65:30:1d:b3:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:44 2025 GMT Not After : Jul 23 11:09:44 2025 GMT Subject: CN=41f39cf1-1017-436f-ba1a-d0b9a6687ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:69:54:76:a8:f7:de:fb:12:7b:0b:2c:60: 32:7f:1c:a4:eb:bd:3a:c3:54:70:4e:98:e9:4a:b7: 22:ad:a6:4e:cb:be:1e:e8:84:24:5d:06:53:06:0a: ce:08:52:11:4e:e2:29:27:8a:4e:28:79:4b:d0:69: fd:71:73:bd:17:f1:4a:02:3d:0a:b3:1c:34:0e:94: 2a:15:aa:92:b2:27:63:61:dd:c1:7b:9f:f0:e5:20: 9b:ce:f8:d7:98:b7:3e:3d:a8:5e:d4:da:e6:14:04: 78:7a:5b:a4:00:f2:c0:1e:c3:21:76:b4:74:cb:12: cb:a9:0d:6f:a0:c0:c0:9f:6b:77:5b:86:81:90:d3: 2a:f5:83:2c:b9:a2:c0:c2:52:bc:9c:77:be:9c:35: 7e:cc:b8:00:81:86:40:82:55:f2:00:43:a9:4a:81: f2:bd:e1:60:e4:54:e3:89:16:53:0c:6c:4a:4f:3d: 09:94:9d:7e:a7:43:7b:44:45:32:87:1a:69:af:c4: d7:7e:10:95:a3:7f:a4:19:67:9a:cb:8a:c0:fa:4e: 54:36:fd:ac:76:d2:c1:e9:5a:08:45:ee:74:05:ac: d3:0c:51:59:4c:e6:d0:a0:01:f9:a0:89:ab:21:2c: 0b:ca:51:9d:56:83:32:11:96:72:7a:a7:52:48:c4: 65:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:40:42:DA:5C:7E:67:30:AD:A5:84:43:7D:80:AE:21:2F:AE:F5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5b56bb0e-03d6-3625-9198-7be659955156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:82:6c:e2:5c:ee:ce:ce:af:ff:a3:40:80:82:71:b9:71:2f: 33:70:93:68:e5:88:ad:96:8d:13:f9:c2:89:18:46:30:ca:90: fa:36:15:26:7b:54:49:1f:a8:77:34:e6:ef:a4:5b:55:c3:84: 2c:7b:cf:8d:1a:0a:e4:11:15:45:4c:e7:19:c3:cc:ac:ff:34: 47:6c:23:40:01:a3:01:6d:f6:da:ea:f0:32:97:0a:d2:c4:cd: ed:84:53:87:88:79:9d:59:0e:9d:63:3e:df:15:38:ba:f9:20: bc:81:dc:19:af:07:16:55:a3:66:66:c4:f8:ef:e3:a0:90:04: ac:95:38:1f:1e:e6:c6:18:20:53:be:e6:72:2b:65:13:2a:0b: 43:46:a7:ef:38:04:1d:3b:9a:4e:e6:60:1f:41:94:bf:3e:d7: 99:46:f1:ab:7b:18:df:0b:29:62:1f:4f:8b:05:ab:4a:4e:25: 45:af:90:da:73:59:47:4a:95:9d:6f:28:2c:96:db:79:b4:f3: cc:90:aa:64:8d:a8:44:6c:59:c8:d4:56:7c:d4:3a:e1:a8:a3: cb:f3:2d:7c:a2:6d:d1:3b:7c:75:3c:36:b3:44:52:da:2b:72: 74:05:88:7b:a9:b5:9c:26:77:c1:8f:f1:0f:65:64:4a:ca:78: cc:e0:ac:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuANXjj1lMB2z8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk0NFoXDTI1MDcyMzExMDk0NFowLzEtMCsGA1UEAxMk NDFmMzljZjEtMTAxNy00MzZmLWJhMWEtZDBiOWE2Njg3ZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZZpVHao9977EnsLLGAyfxyk6706w1RwTpjp SrciraZOy74e6IQkXQZTBgrOCFIRTuIpJ4pOKHlL0Gn9cXO9F/FKAj0Ksxw0DpQq FaqSsidjYd3Be5/w5SCbzvjXmLc+Pahe1NrmFAR4elukAPLAHsMhdrR0yxLLqQ1v oMDAn2t3W4aBkNMq9YMsuaLAwlK8nHe+nDV+zLgAgYZAglXyAEOpSoHyveFg5FTj iRZTDGxKTz0JlJ1+p0N7REUyhxppr8TXfhCVo3+kGWeay4rA+k5UNv2sdtLB6VoI Re50BazTDFFZTObQoAH5oImrISwLylGdVoMyEZZyeqdSSMRlNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdAQtpcfmcwraWEQ32AriEvrvU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWI1NmJiMGUtMDNkNi0z NjI1LTkxOTgtN2JlNjU5OTU1MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaCbOJc7s7Or/+jQICCcblxLzNwk2jliK2WjRP5wokYRjDKkPo2FSZ7 VEkfqHc05u+kW1XDhCx7z40aCuQRFUVM5xnDzKz/NEdsI0ABowFt9trq8DKXCtLE ze2EU4eIeZ1ZDp1jPt8VOLr5ILyB3BmvBxZVo2ZmxPjv46CQBKyVOB8e5sYYIFO+ 5nIrZRMqC0NGp+84BB07mk7mYB9BlL8+15lG8at7GN8LKWIfT4sFq0pOJUWvkNpz WUdKlZ1vKCyW23m088yQqmSNqERsWcjUVnzUOuGoo8vzLXyibdE7fHU8NrNEUtor cnQFiHuptZwmd8GP8Q9lZErKeMzgrIQ= -----END CERTIFICATE-----Generated at Wed Apr 30 15:25:08 2025 by rpki-client