$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/63e7f958-7242-3e8b-9fec-a2eff73c36f0.roa File: 63e7f958-7242-3e8b-9fec-a2eff73c36f0.roa (raw, json) Hash identifier: ZTt/pbF/n+GYp7TIq+MynaT5ayz5uTFS6ewgPkD7FWI= Subject key identifier: E7:4C:14:F7:DE:F2:50:D4:D4:5B:13:70:13:4F:74:F0:5D:BF:46:65 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B741E60B2F980245FF6580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/63e7f958-7242-3e8b-9fec-a2eff73c36f0.roa Signing time: Thu 24 Apr 2025 11:08:13 +0000 ROA not before: Thu 24 Apr 2025 11:08:13 +0000 ROA not after: Wed 23 Jul 2025 11:08:13 +0000 asID: 12041 IP address blocks: 65.22.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:41:e6:0b:2f:98:02:45:ff:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:13 2025 GMT Not After : Jul 23 11:08:13 2025 GMT Subject: CN=1e33d4ea-c5ee-4667-b708-fee4172e587f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:10:92:ce:a3:30:27:2e:b0:82:5b:a3:fb: 17:65:ec:4f:40:1b:f7:ea:f9:06:c5:6c:08:e1:b0: 64:98:fa:f9:7c:0b:bd:22:88:09:15:c5:0f:15:5a: 27:15:49:7a:eb:7a:46:b9:a5:c2:7a:df:7b:ba:7d: 9d:79:19:41:f9:d4:c4:28:17:ab:52:a2:39:86:2d: 37:a7:58:7e:98:06:6e:1b:c9:4e:db:aa:8e:eb:e8: 82:ef:63:84:8a:ce:7d:1e:c1:8b:ad:78:dc:4f:69: d3:3c:b7:8a:0c:c0:89:02:91:c2:47:3b:e2:f0:e2: 28:60:f9:a4:1d:28:65:a8:dd:67:65:b6:71:0b:be: 68:cc:f4:73:a6:03:ae:12:2c:b0:5b:aa:78:2e:c4: 3d:bd:ff:fc:cd:ea:da:18:13:b7:ae:6a:35:88:90: 88:39:19:65:4c:90:26:36:21:a2:36:d1:8d:5d:b6: 4e:b2:5a:2e:66:f3:91:7e:8e:be:93:9a:f2:c8:92: d9:77:d1:48:aa:4b:16:82:a5:33:e2:4e:c0:85:f1: e7:89:3d:d2:ef:d9:af:24:37:d6:5c:12:2c:45:70: aa:13:7d:75:47:d3:4f:10:0a:18:ff:e7:42:60:cd: ed:57:3b:25:7a:29:fe:7b:3f:91:fe:1f:e5:dd:05: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4C:14:F7:DE:F2:50:D4:D4:5B:13:70:13:4F:74:F0:5D:BF:46:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/63e7f958-7242-3e8b-9fec-a2eff73c36f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e4:a8:e9:7b:2a:21:1b:84:52:e2:dd:bd:2a:18:92:4c:c7: 8a:67:fb:bb:34:2f:7e:34:13:66:5e:d3:81:79:e6:0e:97:13: 84:ca:29:d3:cf:61:a8:e5:a6:38:17:52:31:3f:c0:cb:b7:5a: 0f:f0:63:b2:d4:a0:e2:76:fc:d2:94:47:f2:85:55:f3:e0:96: 02:47:c8:82:3d:e8:07:39:06:0b:2a:16:ac:34:60:0f:d7:1d: ab:92:cc:06:02:10:f1:09:e9:3a:87:a1:00:09:29:5b:a5:df: 81:df:ca:c0:04:20:8d:25:25:34:46:6f:bc:e8:02:8d:cd:5f: c5:90:91:f3:52:8f:94:42:7f:64:0f:5c:3c:11:52:e8:f3:22: 9c:cc:2c:e5:7f:2f:80:c7:ee:2a:04:a4:4a:e6:c4:41:7d:e2: ba:02:d9:ad:41:83:b4:06:84:44:d3:32:2c:73:ca:f8:e3:4f: 47:d3:d2:d5:31:7d:2c:d3:31:45:c8:fa:7c:b9:25:b1:27:00: 52:42:4c:fa:b0:7c:fc:53:23:f8:5f:e2:6f:23:84:07:f3:30: 5d:8d:78:51:95:2f:74:8f:c4:c9:75:27:ce:ca:79:7b:7c:fe: 32:31:0a:64:2c:d1:6d:65:da:1b:69:63:fd:af:65:e7:04:0b: 26:e5:d2:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht0HmCy+YAkX/ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgxM1oXDTI1MDcyMzExMDgxM1owLzEtMCsGA1UEAxMk MWUzM2Q0ZWEtYzVlZS00NjY3LWI3MDgtZmVlNDE3MmU1ODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT0Qks6jMCcusIJbo/sXZexPQBv36vkGxWwI 4bBkmPr5fAu9IogJFcUPFVonFUl663pGuaXCet97un2deRlB+dTEKBerUqI5hi03 p1h+mAZuG8lO26qO6+iC72OEis59HsGLrXjcT2nTPLeKDMCJApHCRzvi8OIoYPmk HShlqN1nZbZxC75ozPRzpgOuEiywW6p4LsQ9vf/8zeraGBO3rmo1iJCIORllTJAm NiGiNtGNXbZOslouZvORfo6+k5ryyJLZd9FIqksWgqUz4k7AhfHniT3S79mvJDfW XBIsRXCqE311R9NPEAoY/+dCYM3tVzslein+ez+R/h/l3QXnGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdMFPfe8lDU1FsTcBNPdPBdv0ZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjNlN2Y5NTgtNzI0Mi0z ZThiLTlmZWMtYTJlZmY3M2MzNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjkqOl7KiEbhFLi3b0qGJJMx4pn+7s0L340E2Ze04F55g6XE4TKKdPP YajlpjgXUjE/wMu3Wg/wY7LUoOJ2/NKUR/KFVfPglgJHyII96Ac5BgsqFqw0YA/X HauSzAYCEPEJ6TqHoQAJKVul34HfysAEII0lJTRGb7zoAo3NX8WQkfNSj5RCf2QP XDwRUujzIpzMLOV/L4DH7ioEpErmxEF94roC2a1Bg7QGhETTMixzyvjjT0fT0tUx fSzTMUXI+ny5JbEnAFJCTPqwfPxTI/hf4m8jhAfzMF2NeFGVL3SPxMl1J87KeXt8 /jIxCmQs0W1l2htpY/2vZecECybl0vg= -----END CERTIFICATE-----Generated at Tue Apr 29 16:16:19 2025 by rpki-client