$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6cdceb82-3944-3d2a-8ed5-500f965d7f05.roa File: 6cdceb82-3944-3d2a-8ed5-500f965d7f05.roa (raw, json) Hash identifier: mOyACx3r0O55HmbwKQWzw0aL8aydZ/0Zj5cc5eVVyZ8= Subject key identifier: DF:50:D0:1E:CC:3F:9B:CF:47:8D:D6:45:B7:E2:F3:A4:ED:36:3E:60 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2110F98386769424A6BD6A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6cdceb82-3944-3d2a-8ed5-500f965d7f05.roa Signing time: Thu 24 Apr 2025 14:09:09 +0000 ROA not before: Thu 24 Apr 2025 14:09:09 +0000 ROA not after: Wed 23 Jul 2025 14:09:09 +0000 asID: 207266 IP address blocks: 65.22.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:0f:98:38:67:69:42:4a:6b:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:09:09 2025 GMT Not After : Jul 23 14:09:09 2025 GMT Subject: CN=1b60d642-5d25-442b-8a3f-5dd1f6ea1a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:25:15:06:49:d8:47:21:13:b9:0d:32:0e:ce: cc:bf:21:cb:e3:88:40:7c:a3:5b:e3:24:0e:7e:96: ac:66:1f:51:bf:22:ae:ba:e0:e9:04:f5:1e:33:8b: e1:47:1e:9e:39:5a:a4:c5:f7:18:b9:cf:b8:c8:8b: 24:e1:38:e9:ff:c0:1f:19:6c:8f:a2:fc:f2:0f:c4: 68:0a:15:58:75:b8:ac:71:ac:11:90:1e:19:9c:6c: 51:50:de:24:c9:e0:81:22:f4:d4:e1:aa:63:ce:18: ef:58:7b:d5:99:69:40:9e:c9:0a:57:7d:3b:6c:6c: 4b:54:dc:a6:cf:50:73:76:f6:ca:a5:c6:e8:dd:7d: 7a:83:83:3c:e4:b7:d6:24:48:36:73:28:a7:e6:13: de:40:09:7a:96:17:3b:d7:83:b7:7e:18:bc:f1:81: 65:eb:68:4d:07:59:c8:a6:06:1f:fd:9d:49:c8:2d: 75:55:61:5d:00:67:9d:dd:d6:cb:83:f5:98:1e:ad: 6f:15:3d:b0:d1:de:d2:0a:e6:26:87:2d:4c:bc:07: 3e:ca:da:0f:0a:cb:e5:3f:14:ca:3a:c6:8a:3d:06: 96:ca:4d:35:e2:a8:d4:58:c9:86:ed:11:7d:3f:3f: 6e:b2:ae:d1:d7:18:0b:c8:b0:f1:e1:07:00:fe:00: c6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:50:D0:1E:CC:3F:9B:CF:47:8D:D6:45:B7:E2:F3:A4:ED:36:3E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6cdceb82-3944-3d2a-8ed5-500f965d7f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4f:25:5b:64:6e:76:b5:56:2d:df:4f:78:ff:1a:db:d8:61: df:4e:04:b2:70:86:ed:ab:3f:91:94:71:f4:e3:10:ad:eb:06: fa:86:f0:a4:1a:77:ee:58:cf:05:f4:8f:0e:c7:a6:be:bd:94: 0e:ee:27:43:d1:ed:3d:ed:de:41:05:e9:07:72:71:68:14:39: 8e:21:30:fc:78:52:ad:da:59:d6:49:38:af:d2:7d:1a:3b:1a: bf:b8:30:55:7e:28:c5:69:79:17:fc:2f:6d:0d:34:89:20:85: 93:68:b8:f4:97:d6:11:83:50:46:30:ad:e9:f9:26:d8:46:a3: 88:a9:25:2e:69:5d:b9:cc:aa:78:12:4d:b1:4f:4d:63:49:34: b6:18:81:cc:6f:ee:ea:15:f3:8f:12:45:b1:1d:ac:ed:38:dd: e4:57:56:c8:dc:07:d2:71:7a:91:eb:f6:56:e9:b7:44:17:08: ab:8a:9c:f8:76:b7:26:d7:6e:fa:c3:97:e2:cd:50:5b:51:de: e5:00:8a:59:33:f5:0c:fc:87:e6:72:d7:da:bd:b5:83:54:31: 05:b9:f0:ee:b1:91:be:e5:3b:3d:5d:1f:bc:dc:97:20:27:64: 7d:bb:3f:9a:f8:8b:ca:57:47:78:3d:95:43:91:7a:2c:ef:b9: b4:dd:f7:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEQ+YOGdpQkpr1qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MDkwOVoXDTI1MDcyMzE0MDkwOVowLzEtMCsGA1UEAxMk MWI2MGQ2NDItNWQyNS00NDJiLThhM2YtNWRkMWY2ZWExYTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCUVBknYRyETuQ0yDs7MvyHL44hAfKNb4yQO fpasZh9RvyKuuuDpBPUeM4vhRx6eOVqkxfcYuc+4yIsk4Tjp/8AfGWyPovzyD8Ro ChVYdbiscawRkB4ZnGxRUN4kyeCBIvTU4apjzhjvWHvVmWlAnskKV307bGxLVNym z1BzdvbKpcbo3X16g4M85LfWJEg2cyin5hPeQAl6lhc714O3fhi88YFl62hNB1nI pgYf/Z1JyC11VWFdAGed3dbLg/WYHq1vFT2w0d7SCuYmhy1MvAc+ytoPCsvlPxTK OsaKPQaWyk014qjUWMmG7RF9Pz9usq7R1xgLyLDx4QcA/gDGCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9Q0B7MP5vPR43WRbfi86TtNj5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmNkY2ViODItMzk0NC0z ZDJhLThlZDUtNTAwZjk2NWQ3ZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNPJVtkbna1Vi3fT3j/GtvYYd9OBLJwhu2rP5GUcfTjEK3rBvqG8KQa d+5YzwX0jw7Hpr69lA7uJ0PR7T3t3kEF6QdycWgUOY4hMPx4Uq3aWdZJOK/SfRo7 Gr+4MFV+KMVpeRf8L20NNIkghZNouPSX1hGDUEYwren5JthGo4ipJS5pXbnMqngS TbFPTWNJNLYYgcxv7uoV848SRbEdrO043eRXVsjcB9JxepHr9lbpt0QXCKuKnPh2 tybXbvrDl+LNUFtR3uUAilkz9Qz8h+Zy19q9tYNUMQW58O6xkb7lOz1dH7zclyAn ZH27P5r4i8pXR3g9lUOReizvubTd9z8= -----END CERTIFICATE-----Generated at Wed Apr 30 01:32:43 2025 by rpki-client