$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60ab77bc-05c0-38a4-b37f-a1b1d47e8885.roa File: 60ab77bc-05c0-38a4-b37f-a1b1d47e8885.roa (raw, json) Hash identifier: lcxBRKn746PnuO5GKoYDCWem1x8IhIySKJOtkX9nRow= Subject key identifier: B3:BF:9F:6B:7E:1D:09:DF:B5:2E:47:21:EE:16:0D:1D:B3:BE:3B:61 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A21147BC6E44287901C2C880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60ab77bc-05c0-38a4-b37f-a1b1d47e8885.roa Signing time: Thu 24 Apr 2025 14:09:36 +0000 ROA not before: Thu 24 Apr 2025 14:09:36 +0000 ROA not after: Wed 23 Jul 2025 14:09:36 +0000 asID: 207266 IP address blocks: 65.22.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:47:bc:6e:44:28:79:01:c2:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:09:36 2025 GMT Not After : Jul 23 14:09:36 2025 GMT Subject: CN=45e74a42-d37a-480f-b6fb-de43c4f03849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:86:f7:eb:b6:33:09:39:ae:05:8c:40:3f: 0b:e8:81:4b:54:0c:48:ed:1f:7a:96:05:6f:1a:8c: 38:07:23:63:a9:8c:fd:f4:6b:d0:a1:21:2d:60:7e: 61:d3:48:c2:6b:70:0e:01:f1:47:b0:27:a7:03:bb: 79:4c:8e:a5:fb:45:8c:53:94:9c:1c:83:73:17:f9: bd:6c:e5:c2:51:5e:30:99:8e:a3:ca:ac:ed:c1:90: 1b:b3:d8:0f:14:3a:90:01:f6:77:d3:02:fa:38:cd: f9:0b:0b:95:c6:81:c0:00:27:46:dc:13:97:aa:9f: 49:57:15:9b:00:00:9d:b3:49:93:bd:73:e2:66:ac: 88:a8:13:ce:51:a7:20:2b:9c:89:e7:19:a6:98:2f: b6:fd:45:2e:60:11:20:3d:e9:70:07:16:44:61:a5: 98:93:f7:e0:83:8f:31:db:63:8d:45:0f:f2:21:d5: 6e:de:84:10:d4:59:6a:85:21:fc:4d:9f:46:6b:4e: 78:94:85:7c:34:32:60:42:bb:66:94:11:95:32:86: 2c:fd:31:11:5f:c7:9d:8a:5f:59:94:60:54:4f:c9: 64:ca:60:50:c3:83:6c:d8:77:08:da:91:19:aa:63: 1f:41:3e:43:82:c7:c3:1b:b9:d4:0f:8e:fe:ac:69: 1e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BF:9F:6B:7E:1D:09:DF:B5:2E:47:21:EE:16:0D:1D:B3:BE:3B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60ab77bc-05c0-38a4-b37f-a1b1d47e8885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c5:53:95:a4:41:92:54:20:af:9d:24:e0:f7:fe:3d:2b:95: 33:b2:64:ac:13:62:01:33:9d:53:3c:ab:87:43:ce:b0:4a:da: 62:ef:27:f7:e4:26:3d:43:b0:76:53:12:5e:ef:e6:3c:d5:3e: d0:5f:e5:bd:4c:fd:82:68:6c:d4:f4:c7:ef:f6:aa:07:37:88: 0f:ca:72:a4:c2:56:90:91:c6:dc:45:96:6d:92:31:04:c5:f1: 40:ec:01:06:07:38:b4:6f:24:31:94:e6:72:c9:47:bc:3f:78: 44:68:b2:88:c5:42:d6:52:99:57:73:ba:2a:0b:d4:8f:e4:fb: 4f:7c:6c:10:9e:34:b5:4c:03:a6:19:eb:8c:17:e9:2a:a4:f5: 28:ed:cd:24:0b:ec:10:56:f7:3b:7d:1e:8c:63:b3:bd:99:25: f8:ca:a1:db:11:54:c9:27:66:48:2f:63:d6:6a:1a:ec:f8:ca: 0a:47:fb:77:fe:97:7a:c4:79:ee:7e:ff:ed:51:44:93:d2:1e: 1e:e4:fe:01:9b:c7:6e:74:00:d1:82:2a:86:4b:ae:2b:ce:06: 65:5a:c5:d7:7e:70:81:9f:b3:2c:4e:d8:23:3e:8c:d4:2b:f1: e7:cf:92:2f:8a:ba:12:eb:52:ba:11:d0:f5:f5:91:a0:50:40: a5:57:c6:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEUe8bkQoeQHCyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MDkzNloXDTI1MDcyMzE0MDkzNlowLzEtMCsGA1UEAxMk NDVlNzRhNDItZDM3YS00ODBmLWI2ZmItZGU0M2M0ZjAzODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldGG9+u2Mwk5rgWMQD8L6IFLVAxI7R96lgVv Gow4ByNjqYz99GvQoSEtYH5h00jCa3AOAfFHsCenA7t5TI6l+0WMU5ScHINzF/m9 bOXCUV4wmY6jyqztwZAbs9gPFDqQAfZ30wL6OM35CwuVxoHAACdG3BOXqp9JVxWb AACds0mTvXPiZqyIqBPOUacgK5yJ5xmmmC+2/UUuYBEgPelwBxZEYaWYk/fgg48x 22ONRQ/yIdVu3oQQ1FlqhSH8TZ9Ga054lIV8NDJgQrtmlBGVMoYs/TERX8edil9Z lGBUT8lkymBQw4Ns2HcI2pEZqmMfQT5DgsfDG7nUD47+rGkerwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO/n2t+HQnftS5HIe4WDR2zvjthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjBhYjc3YmMtMDVjMC0z OGE0LWIzN2YtYTFiMWQ0N2U4ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPFU5WkQZJUIK+dJOD3/j0rlTOyZKwTYgEznVM8q4dDzrBK2mLvJ/fk Jj1DsHZTEl7v5jzVPtBf5b1M/YJobNT0x+/2qgc3iA/KcqTCVpCRxtxFlm2SMQTF 8UDsAQYHOLRvJDGU5nLJR7w/eERosojFQtZSmVdzuioL1I/k+098bBCeNLVMA6YZ 64wX6Sqk9SjtzSQL7BBW9zt9Hoxjs72ZJfjKodsRVMknZkgvY9ZqGuz4ygpH+3f+ l3rEee5+/+1RRJPSHh7k/gGbx250ANGCKoZLrivOBmVaxdd+cIGfsyxO2CM+jNQr 8efPki+KuhLrUroR0PX1kaBQQKVXxvg= -----END CERTIFICATE-----Generated at Tue Apr 29 21:07:02 2025 by rpki-client