$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/65bb8fd1-21a8-3e3f-be77-e45f5d498e47.roa File: 65bb8fd1-21a8-3e3f-be77-e45f5d498e47.roa (raw, json) Hash identifier: Cv+fl1kRFAJejC0iwdueYSqGfNbjNMvOjZomYux9fKU= Subject key identifier: 12:91:55:4D:95:82:20:C1:82:67:BB:D2:E1:D6:C5:D9:B5:F1:33:9D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A212625BEC176290DEAE8F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/65bb8fd1-21a8-3e3f-be77-e45f5d498e47.roa Signing time: Thu 24 Apr 2025 14:11:49 +0000 ROA not before: Thu 24 Apr 2025 14:11:49 +0000 ROA not after: Wed 23 Jul 2025 14:11:49 +0000 asID: 207266 IP address blocks: 65.22.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:62:5b:ec:17:62:90:de:ae:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:11:49 2025 GMT Not After : Jul 23 14:11:49 2025 GMT Subject: CN=8d2e1b9e-73f5-43ec-8aa0-cb5a978b22e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:11:31:46:56:ab:12:89:12:b9:43:30:19: a2:d3:76:88:eb:1d:db:f4:8a:6c:eb:2e:bd:2f:02: 44:5d:15:7f:3c:ec:a5:0a:42:2c:48:6e:da:c9:99: 27:54:8a:12:db:74:38:49:6b:99:01:8f:90:eb:34: fc:c0:8a:0a:38:3b:20:f6:3c:22:55:4a:99:21:db: a9:5d:8d:7e:79:ab:6a:17:bd:cd:2c:a7:79:49:3e: 85:8d:66:fd:c9:3c:0b:29:a4:4d:0e:6d:58:e1:b9: 3d:eb:5b:a2:b8:cb:77:39:10:a7:f8:71:27:3b:35: 02:7e:0e:7e:3b:61:2c:4f:56:69:f5:d0:98:ac:22: f7:58:db:04:b2:a0:02:1d:ab:51:dd:70:5b:63:cf: 05:cc:1f:39:cd:4e:00:20:0d:a5:f6:ac:28:6c:6b: 3d:be:65:e4:f5:f4:ef:dc:10:d2:87:42:84:5a:99: 85:79:09:fd:c6:2a:f7:36:81:25:12:34:df:ac:68: c0:05:8b:37:f8:b6:e6:4f:a6:be:ae:ed:5c:11:ef: 95:e4:dd:86:4c:2c:32:62:f8:c4:04:0e:33:47:99: 77:9e:7d:c2:3f:1f:c7:f0:30:0a:c6:ff:d1:7e:65: f1:f2:d4:bc:e3:d1:42:88:2d:65:5e:a2:9e:b8:96: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:91:55:4D:95:82:20:C1:82:67:BB:D2:E1:D6:C5:D9:B5:F1:33:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/65bb8fd1-21a8-3e3f-be77-e45f5d498e47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8d:56:50:32:94:e2:c6:d1:b3:22:39:f4:ca:38:22:71:61: b4:e4:9c:27:c2:d1:a6:e0:e3:4b:bb:a0:6e:e1:02:cf:00:8d: f4:cc:f1:c6:4b:ce:de:4b:75:0e:df:7e:3a:a9:43:73:98:d9: 11:d6:15:d1:be:f7:87:54:7d:ea:ca:03:43:42:f4:7d:61:22: 4d:cd:12:c0:af:71:07:df:93:74:ca:71:1b:22:4d:32:3e:02: 0f:30:ce:72:58:e7:37:ff:f6:c3:24:8a:d6:48:88:67:41:e1: 41:94:fe:77:a5:bc:c4:ed:50:a7:85:32:6e:fc:57:91:3d:2c: 8b:c6:cb:4c:c6:98:45:95:59:b7:2f:50:0f:4a:7f:77:a5:f9: 6b:60:6e:ab:a5:1a:14:ee:74:52:ee:46:ac:d2:e8:5d:0d:59: e9:1c:16:eb:a5:2c:a3:7c:46:6e:aa:6e:cf:52:07:3d:89:70: 22:b3:3b:4d:df:60:3e:f3:75:46:50:3d:62:0c:fa:2a:a2:b5: 0c:68:96:4a:17:3e:b8:50:2b:d1:65:7b:6c:46:64:ce:4b:91: 77:40:e5:59:db:48:2f:da:4e:05:2d:4f:40:d9:da:bb:44:1a: 8a:22:1b:57:5a:e2:d5:01:88:ce:b2:6b:bd:88:f2:bd:ed:eb: 9b:a9:27:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEmJb7BdikN6uj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTE0OVoXDTI1MDcyMzE0MTE0OVowLzEtMCsGA1UEAxMk OGQyZTFiOWUtNzNmNS00M2VjLThhYTAtY2I1YTk3OGIyMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLoRMUZWqxKJErlDMBmi03aI6x3b9Ips6y69 LwJEXRV/POylCkIsSG7ayZknVIoS23Q4SWuZAY+Q6zT8wIoKODsg9jwiVUqZIdup XY1+eatqF73NLKd5ST6FjWb9yTwLKaRNDm1Y4bk961uiuMt3ORCn+HEnOzUCfg5+ O2EsT1Zp9dCYrCL3WNsEsqACHatR3XBbY88FzB85zU4AIA2l9qwobGs9vmXk9fTv 3BDSh0KEWpmFeQn9xir3NoElEjTfrGjABYs3+LbmT6a+ru1cEe+V5N2GTCwyYvjE BA4zR5l3nn3CPx/H8DAKxv/RfmXx8tS849FCiC1lXqKeuJbhQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKRVU2VgiDBgme70uHWxdm18TOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjViYjhmZDEtMjFhOC0z ZTNmLWJlNzctZTQ1ZjVkNDk4ZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCNVlAylOLG0bMiOfTKOCJxYbTknCfC0abg40u7oG7hAs8AjfTM8cZL zt5LdQ7ffjqpQ3OY2RHWFdG+94dUferKA0NC9H1hIk3NEsCvcQffk3TKcRsiTTI+ Ag8wznJY5zf/9sMkitZIiGdB4UGU/nelvMTtUKeFMm78V5E9LIvGy0zGmEWVWbcv UA9Kf3el+WtgbqulGhTudFLuRqzS6F0NWekcFuulLKN8Rm6qbs9SBz2JcCKzO03f YD7zdUZQPWIM+iqitQxolkoXPrhQK9Fle2xGZM5LkXdA5VnbSC/aTgUtT0DZ2rtE GooiG1da4tUBiM6ya72I8r3t65upJyw= -----END CERTIFICATE-----Generated at Tue Apr 29 22:22:40 2025 by rpki-client