$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/649eddbe-4ac8-3e15-97e6-e8a69a8c444b.roa File: 649eddbe-4ac8-3e15-97e6-e8a69a8c444b.roa (raw, json) Hash identifier: FzzzkThOkkgGVDro9LBVF2XRDbIlpbT66NwEL3QxucA= Subject key identifier: 35:BC:88:E3:D7:BF:67:97:38:77:BB:C6:77:0D:49:FC:74:D7:4D:88 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A211EB99D9E1D370DE38B680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/649eddbe-4ac8-3e15-97e6-e8a69a8c444b.roa Signing time: Thu 24 Apr 2025 14:10:53 +0000 ROA not before: Thu 24 Apr 2025 14:10:53 +0000 ROA not after: Wed 23 Jul 2025 14:10:53 +0000 asID: 207266 IP address blocks: 65.22.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:eb:99:d9:e1:d3:70:de:38:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:10:53 2025 GMT Not After : Jul 23 14:10:53 2025 GMT Subject: CN=947b0b77-aede-4da2-bfce-75ea69b1459e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2a:c1:9f:6b:f6:e5:eb:50:7e:22:d9:26:7f: 7b:d7:18:97:8b:ab:f7:c6:d6:c3:cf:bd:70:ed:bb: 00:49:ca:2b:84:ce:75:97:d7:52:d3:27:cf:6a:76: 65:93:62:07:28:b0:39:f1:76:15:f7:37:c5:89:5c: f7:e9:2e:c4:22:92:b7:53:00:8f:ed:7c:b3:d6:34: e7:45:ad:0f:a5:7f:ee:4b:fc:f2:f5:d4:a5:e9:0b: 5a:6b:b5:5d:fb:cd:30:19:9c:5c:6c:ed:b2:cf:87: f1:b2:a8:be:1f:8c:15:20:2c:cf:6d:53:20:6f:95: 09:de:ac:26:48:24:76:73:f1:85:62:b6:b2:8e:c5: f6:4b:90:1e:07:8d:a5:47:ff:3d:ba:c9:fd:2a:32: 62:c4:16:02:0b:25:6f:14:f8:bf:ad:77:67:94:22: 09:a0:cc:50:fc:47:24:99:ff:cc:52:43:6e:ed:f9: e1:45:eb:4a:60:f3:f5:f0:7d:d4:b6:57:c5:b9:80: 37:8a:44:2e:30:55:d9:20:59:ef:e7:5b:c1:0e:85: 38:2e:92:ad:d5:db:9f:44:5b:df:de:58:28:82:c7: dd:8e:e8:10:6e:85:76:82:91:4b:f9:d2:65:3a:1a: 0f:f5:09:0e:76:d3:18:cc:90:d1:8a:9c:db:10:7a: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BC:88:E3:D7:BF:67:97:38:77:BB:C6:77:0D:49:FC:74:D7:4D:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/649eddbe-4ac8-3e15-97e6-e8a69a8c444b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a8:51:f1:12:8c:3c:e2:86:c0:aa:56:d1:75:c4:74:78:4e: a0:d8:51:fd:57:fd:56:51:57:e8:2f:9a:59:5e:af:bd:30:c2: 38:77:5e:67:26:29:14:36:0e:37:2e:3a:e0:75:b0:cb:30:a0: 53:fb:1a:9f:6c:eb:af:5d:79:2a:6b:16:95:8f:b4:b3:e1:00: 21:72:16:00:3c:a6:55:34:e8:d8:e7:4a:67:1d:8b:01:69:21: a0:e0:5c:ed:73:8b:58:36:40:21:52:19:4d:db:31:a2:23:1e: e7:1c:d1:4b:8b:d5:d1:7e:94:e0:ad:0e:a0:c1:68:dc:05:b5: 0c:f4:50:aa:d0:6b:3e:f5:cf:5c:71:10:67:3b:1f:66:17:4d: f8:e9:ce:4a:a2:8d:4c:41:7e:42:0d:2e:af:6b:d3:d5:8f:25: 40:89:c9:42:19:45:42:8a:b0:84:55:db:f9:7b:dc:3f:1b:9b: 28:7b:28:c5:dd:72:05:52:c0:93:51:d7:e3:33:d5:59:e3:de: d1:86:ef:ff:a2:08:da:1a:ac:a7:a2:86:a7:bf:d4:00:79:9c: 79:13:7e:e9:96:4a:72:3f:54:1b:14:d3:17:2b:32:94:06:98: b4:7d:94:fb:8e:0f:1c:38:c2:f3:44:c5:bf:4f:5b:ee:b0:ed: 2e:e6:25:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEeuZ2eHTcN44toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTA1M1oXDTI1MDcyMzE0MTA1M1owLzEtMCsGA1UEAxMk OTQ3YjBiNzctYWVkZS00ZGEyLWJmY2UtNzVlYTY5YjE0NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCrBn2v25etQfiLZJn971xiXi6v3xtbDz71w 7bsAScorhM51l9dS0yfPanZlk2IHKLA58XYV9zfFiVz36S7EIpK3UwCP7Xyz1jTn Ra0PpX/uS/zy9dSl6Qtaa7Vd+80wGZxcbO2yz4fxsqi+H4wVICzPbVMgb5UJ3qwm SCR2c/GFYrayjsX2S5AeB42lR/89usn9KjJixBYCCyVvFPi/rXdnlCIJoMxQ/Eck mf/MUkNu7fnhRetKYPP18H3UtlfFuYA3ikQuMFXZIFnv51vBDoU4LpKt1dufRFvf 3lgogsfdjugQboV2gpFL+dJlOhoP9QkOdtMYzJDRipzbEHpxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW8iOPXv2eXOHe7xncNSfx0102IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjQ5ZWRkYmUtNGFjOC0z ZTE1LTk3ZTYtZThhNjlhOGM0NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRabMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSoUfESjDzihsCqVtF1xHR4TqDYUf1X/VZRV+gvmller70wwjh3Xmcm KRQ2DjcuOuB1sMswoFP7Gp9s669deSprFpWPtLPhACFyFgA8plU06NjnSmcdiwFp IaDgXO1zi1g2QCFSGU3bMaIjHucc0UuL1dF+lOCtDqDBaNwFtQz0UKrQaz71z1xx EGc7H2YXTfjpzkqijUxBfkINLq9r09WPJUCJyUIZRUKKsIRV2/l73D8bmyh7KMXd cgVSwJNR1+Mz1Vnj3tGG7/+iCNoarKeihqe/1AB5nHkTfumWSnI/VBsU0xcrMpQG mLR9lPuODxw4wvNExb9PW+6w7S7mJao= -----END CERTIFICATE-----Generated at Tue Apr 29 23:29:51 2025 by rpki-client