$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61a16cab-60ab-3d4c-8d1c-3d75a70be1b0.roa File: 61a16cab-60ab-3d4c-8d1c-3d75a70be1b0.roa (raw, json) Hash identifier: UY1tkLbVR5Qmo5oFNG/u7ya4jpUwCztyUGSf/t+osL4= Subject key identifier: DD:EE:2A:1C:11:66:7E:FB:53:EC:4A:C5:87:DB:FA:77:62:7D:20:BA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B766A5B41E9E3AC0955000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61a16cab-60ab-3d4c-8d1c-3d75a70be1b0.roa Signing time: Thu 24 Apr 2025 11:08:30 +0000 ROA not before: Thu 24 Apr 2025 11:08:30 +0000 ROA not after: Wed 23 Jul 2025 11:08:30 +0000 asID: 12041 IP address blocks: 65.22.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:66:a5:b4:1e:9e:3a:c0:95:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:30 2025 GMT Not After : Jul 23 11:08:30 2025 GMT Subject: CN=95904b93-f0f3-47ff-8271-de7d7d21797f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:a7:01:98:dc:e9:c5:5e:c2:9c:71:fe:fc: 7d:36:38:13:21:4e:f5:ab:27:4e:7c:a0:54:8b:f6: 97:91:ae:6a:a2:66:d1:40:53:d1:11:65:09:1b:a4: 7d:1d:15:52:fc:c6:47:bf:53:2e:36:7a:0e:6c:9d: c8:77:3e:fa:c2:09:ad:38:6b:fc:ff:0c:b3:e1:65: b3:c4:6e:66:d1:7d:0f:7d:b7:d8:8f:32:e6:4e:cf: 25:23:d7:d3:1d:40:09:3c:26:a7:2e:78:9c:8d:a4: dc:5b:23:63:ec:e7:4c:7d:31:3f:ba:61:8f:c8:42: 7c:d0:96:0c:f4:b5:34:2a:8d:6e:5a:aa:08:9a:45: db:75:4b:fb:d3:79:51:f7:e6:54:c0:f3:ca:b4:7e: 20:95:01:92:28:a6:11:5e:09:e6:03:c4:b1:ee:76: 3e:88:4b:b6:4d:1b:3f:02:38:99:50:8b:e8:b6:26: 7f:0b:42:0a:9c:f3:57:76:4c:9a:61:01:90:b6:62: 3e:be:12:74:6d:d8:bb:e4:c9:fd:e5:a5:98:17:ac: 64:ef:9a:17:26:6d:71:02:89:b1:a5:56:d7:d0:af: 54:b0:3c:70:d1:81:58:7a:32:db:68:73:c5:37:53: 4e:db:a0:cf:16:ca:2c:fb:1b:b4:c3:db:c9:bc:57: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EE:2A:1C:11:66:7E:FB:53:EC:4A:C5:87:DB:FA:77:62:7D:20:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61a16cab-60ab-3d4c-8d1c-3d75a70be1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:9f:ac:cd:ae:6e:bb:db:18:10:1c:bd:fc:a7:6f:c0:30:36: 76:f8:28:05:72:e2:df:37:10:50:d5:97:34:fd:8f:63:e8:44: 0f:47:46:bf:ef:43:e8:c3:2a:75:b7:ce:82:c3:9f:6e:55:93: 91:d6:cf:a0:21:dc:33:85:59:2a:7c:6c:5d:40:96:28:d5:43: 5e:90:79:df:33:35:3f:e2:47:97:d7:b7:70:4a:c3:1f:d2:55: 26:98:08:64:09:f3:64:58:0d:58:eb:56:fa:a0:ea:79:0c:75: 8e:a4:e5:f2:d4:31:c5:e3:68:0e:db:1e:65:bb:de:e8:cc:cd: c9:e5:62:a3:13:c2:04:95:0c:55:66:00:51:7a:1a:23:1a:01: 88:be:fe:d0:e7:2b:35:4a:ca:26:51:72:be:85:a6:76:ef:13: 03:b5:5b:f6:25:b0:56:d3:2c:7d:cb:98:e7:b9:c9:ae:db:ac: 7d:ec:1f:65:18:d6:57:7b:5e:3f:08:80:56:97:2e:a7:00:a5: e6:dd:fe:bb:37:e9:e7:01:c7:99:74:3d:41:dc:eb:9d:68:ef: db:3b:68:a9:ce:d1:f5:a3:cb:6f:a8:50:c5:2b:dd:11:1c:10: cb:1e:6e:b6:21:18:8e:0d:35:6e:a7:38:63:6d:8f:9e:dd:4e: 34:c7:a7:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht2altB6eOsCVUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgzMFoXDTI1MDcyMzExMDgzMFowLzEtMCsGA1UEAxMk OTU5MDRiOTMtZjBmMy00N2ZmLTgyNzEtZGU3ZDdkMjE3OTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubGnAZjc6cVewpxx/vx9NjgTIU71qydOfKBU i/aXka5qombRQFPREWUJG6R9HRVS/MZHv1MuNnoObJ3Idz76wgmtOGv8/wyz4WWz xG5m0X0PfbfYjzLmTs8lI9fTHUAJPCanLnicjaTcWyNj7OdMfTE/umGPyEJ80JYM 9LU0Ko1uWqoImkXbdUv703lR9+ZUwPPKtH4glQGSKKYRXgnmA8Sx7nY+iEu2TRs/ AjiZUIvotiZ/C0IKnPNXdkyaYQGQtmI+vhJ0bdi75Mn95aWYF6xk75oXJm1xAomx pVbX0K9UsDxw0YFYejLbaHPFN1NO26DPFsos+xu0w9vJvFdg8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3uKhwRZn77U+xKxYfb+ndifSC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjFhMTZjYWItNjBhYi0z ZDRjLThkMWMtM2Q3NWE3MGJlMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6frM2ubrvbGBAcvfynb8AwNnb4KAVy4t83EFDVlzT9j2PoRA9HRr/v Q+jDKnW3zoLDn25Vk5HWz6Ah3DOFWSp8bF1AlijVQ16Qed8zNT/iR5fXt3BKwx/S VSaYCGQJ82RYDVjrVvqg6nkMdY6k5fLUMcXjaA7bHmW73ujMzcnlYqMTwgSVDFVm AFF6GiMaAYi+/tDnKzVKyiZRcr6FpnbvEwO1W/YlsFbTLH3LmOe5ya7brH3sH2UY 1ld7Xj8IgFaXLqcApebd/rs36ecBx5l0PUHc651o79s7aKnO0fWjy2+oUMUr3REc EMsebrYhGI4NNW6nOGNtj57dTjTHp18= -----END CERTIFICATE-----Generated at Wed Apr 30 00:14:43 2025 by rpki-client