$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/67f127cc-42f3-3968-aa83-c00b42c7d793.roa File: 67f127cc-42f3-3968-aa83-c00b42c7d793.roa (raw, json) Hash identifier: 7N4qcZLoJqhXiqsZywkRaIR3e9FS0n8pNT3o7kBRNu4= Subject key identifier: F0:D3:A9:99:3A:31:D2:00:8A:48:F2:0B:69:B0:09:CE:12:18:03:93 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B8633A65A452DDB016A120 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/67f127cc-42f3-3968-aa83-c00b42c7d793.roa Signing time: Thu 24 Apr 2025 11:10:29 +0000 ROA not before: Thu 24 Apr 2025 11:10:29 +0000 ROA not after: Wed 23 Jul 2025 11:10:29 +0000 asID: 12041 IP address blocks: 65.22.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:63:3a:65:a4:52:dd:b0:16:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:29 2025 GMT Not After : Jul 23 11:10:29 2025 GMT Subject: CN=2255bf21-ea0a-428c-878e-449fe5a1d5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:2f:44:84:8c:69:66:ed:6f:ed:af:22:25: 88:3a:71:21:89:f6:bc:99:c8:58:19:06:40:95:59: e5:b8:01:07:f9:36:67:62:00:29:5f:6d:39:fe:95: ff:1a:3b:7a:c5:3d:d8:56:a9:02:10:3c:4a:6f:07: 2b:cf:2f:2b:55:8f:36:d0:f2:ed:9d:0d:13:00:07: 2b:8a:9d:c3:c9:d7:ce:63:6a:16:e7:8a:32:23:7b: c5:b9:5e:05:d1:99:6f:9c:1f:82:f9:89:db:d2:4c: 81:50:b7:70:1b:9e:71:76:04:40:9b:b6:11:ff:51: f4:49:7c:05:c6:98:7b:00:16:bb:d5:66:64:51:97: 58:ee:90:85:1f:05:73:6e:18:4a:93:03:e2:fa:8f: 1d:ad:04:f2:b7:40:b4:bd:c0:10:59:c9:d8:8e:26: 74:b4:f4:eb:41:3d:6d:21:47:e5:88:8f:af:1a:c1: cb:9f:14:68:ab:e1:7e:6c:48:b4:b2:a0:be:2f:c8: 14:42:91:5d:7a:2c:3b:43:0e:76:dd:84:41:f2:41: a3:65:47:52:cc:f4:6d:6a:3f:7b:b9:0e:63:69:28: 08:85:3f:18:60:07:c0:db:98:82:28:7f:e9:2a:01: cd:2e:ad:52:02:a0:f8:0b:3e:14:af:22:98:b6:fb: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D3:A9:99:3A:31:D2:00:8A:48:F2:0B:69:B0:09:CE:12:18:03:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/67f127cc-42f3-3968-aa83-c00b42c7d793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bb:12:6e:03:70:02:d4:be:45:3c:3a:75:69:1b:e7:36:9e: 8a:5b:f2:cf:aa:0c:96:6f:5d:32:de:54:34:60:d8:81:84:c0: 03:b7:6d:6e:5c:16:14:a1:6d:bd:73:4d:ab:95:4b:c6:6c:ad: f2:29:18:69:b2:b3:68:b3:c6:5d:fa:bd:a3:bb:2a:ee:3a:05: 02:7f:5b:80:73:59:de:68:c4:d8:8b:fd:d2:83:e2:c4:d4:e2: 25:05:4e:ac:f7:bf:72:ba:fd:06:d1:d2:d0:36:f9:49:d2:b7: df:fc:ff:cf:36:53:ce:45:88:24:b2:d0:db:c6:c8:87:54:13: 28:af:32:8a:c9:8a:e1:be:41:db:b4:3e:ad:ac:e8:b9:46:5f: 96:d4:bf:30:ed:a8:0c:b2:b8:d4:de:34:ef:fe:16:97:09:c6: 3d:fa:e8:7a:13:de:15:51:00:7b:15:52:fc:1e:43:49:1d:c6: 2d:d1:38:3f:bb:dd:dc:85:89:24:86:08:42:a8:69:f4:77:61: c7:80:19:0b:99:ed:37:a4:da:52:68:cd:c4:91:90:14:28:60: 05:63:bd:43:f0:db:19:ad:76:24:10:67:bd:43:94:dc:c8:1f: 6c:21:56:ff:9b:46:68:00:2e:cf:f1:4f:e8:02:e8:a0:52:3c: 82:cb:36:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuGM6ZaRS3bAWoSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAyOVoXDTI1MDcyMzExMTAyOVowLzEtMCsGA1UEAxMk MjI1NWJmMjEtZWEwYS00MjhjLTg3OGUtNDQ5ZmU1YTFkNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAAvRISMaWbtb+2vIiWIOnEhifa8mchYGQZA lVnluAEH+TZnYgApX205/pX/Gjt6xT3YVqkCEDxKbwcrzy8rVY820PLtnQ0TAAcr ip3DydfOY2oW54oyI3vFuV4F0ZlvnB+C+Ynb0kyBULdwG55xdgRAm7YR/1H0SXwF xph7ABa71WZkUZdY7pCFHwVzbhhKkwPi+o8drQTyt0C0vcAQWcnYjiZ0tPTrQT1t IUfliI+vGsHLnxRoq+F+bEi0sqC+L8gUQpFdeiw7Qw523YRB8kGjZUdSzPRtaj97 uQ5jaSgIhT8YYAfA25iCKH/pKgHNLq1SAqD4Cz4UryKYtvuLbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDTqZk6MdIAikjyC2mwCc4SGAOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjdmMTI3Y2MtNDJmMy0z OTY4LWFhODMtYzAwYjQyYzdkNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC7Em4DcALUvkU8OnVpG+c2nopb8s+qDJZvXTLeVDRg2IGEwAO3bW5c FhShbb1zTauVS8ZsrfIpGGmys2izxl36vaO7Ku46BQJ/W4BzWd5oxNiL/dKD4sTU 4iUFTqz3v3K6/QbR0tA2+UnSt9/8/882U85FiCSy0NvGyIdUEyivMorJiuG+Qdu0 Pq2s6LlGX5bUvzDtqAyyuNTeNO/+FpcJxj366HoT3hVRAHsVUvweQ0kdxi3ROD+7 3dyFiSSGCEKoafR3YceAGQuZ7Tek2lJozcSRkBQoYAVjvUPw2xmtdiQQZ71DlNzI H2whVv+bRmgALs/xT+gC6KBSPILLNkE= -----END CERTIFICATE-----Generated at Tue Apr 29 22:18:00 2025 by rpki-client