$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/744ba64c-26d2-384d-a0a3-02dceff01fc7.roa File: 744ba64c-26d2-384d-a0a3-02dceff01fc7.roa (raw, json) Hash identifier: U6X4PK81b6UJCwsqylE/h7lN6duoSYks0wIctqRBw+E= Subject key identifier: C0:8A:E7:19:0C:72:9C:F8:73:21:83:0B:57:27:A1:EF:0B:B0:E2:94 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7EAB88BF4870587CA6900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/744ba64c-26d2-384d-a0a3-02dceff01fc7.roa Signing time: Thu 24 Apr 2025 11:09:32 +0000 ROA not before: Thu 24 Apr 2025 11:09:32 +0000 ROA not after: Wed 23 Jul 2025 11:09:32 +0000 asID: 12041 IP address blocks: 65.22.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:ea:b8:8b:f4:87:05:87:ca:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:32 2025 GMT Not After : Jul 23 11:09:32 2025 GMT Subject: CN=259e2dee-8744-43e3-83bc-fbb546109306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:65:29:45:7e:52:74:58:31:cf:e4:44:d0:bd: 07:4e:63:c8:19:8b:57:c1:43:e4:91:ea:e8:6b:cc: 5d:9d:57:8c:98:4a:ae:0e:5c:3d:4a:cd:78:b1:f9: da:8c:e3:58:c6:db:e5:d7:77:f0:45:a2:84:b5:23: af:29:24:48:03:e4:f2:f3:d5:30:9d:d7:fd:20:f4: 65:91:fc:cd:cd:70:fc:1d:92:3b:4f:9c:88:eb:ea: 6e:53:23:8f:20:16:a7:cc:bd:2c:33:20:ad:75:42: 1c:c6:ff:87:97:b3:ab:34:c7:a1:51:d6:d6:38:17: 4a:48:7e:c9:ca:b0:23:2a:4d:0e:4b:01:1a:3d:39: d6:f8:b7:10:58:be:43:cf:01:12:c1:8c:40:02:38: 69:3e:7b:24:58:c3:b2:db:41:62:6a:e8:92:9c:1e: 2a:f1:94:35:eb:d6:c1:b3:bf:d0:3b:c6:ed:a6:28: dc:6e:4f:05:c6:9c:e2:2a:03:58:57:5b:45:97:42: ab:b9:13:03:0b:48:61:7d:36:ea:38:44:db:fb:63: a7:89:f5:6c:d1:18:8f:f8:21:c8:f3:39:19:47:8d: 3f:b8:99:3b:99:5c:bb:b4:3c:ad:ba:4f:04:57:98: 27:08:e3:3e:06:4c:9c:c3:7e:72:b3:d4:5a:8b:aa: 09:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8A:E7:19:0C:72:9C:F8:73:21:83:0B:57:27:A1:EF:0B:B0:E2:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/744ba64c-26d2-384d-a0a3-02dceff01fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:df:3e:b6:1b:89:d5:10:af:3d:1d:d3:55:94:91:b2:de:94: 3f:9f:ee:37:b9:1c:8e:9a:66:8a:97:55:e4:b8:b2:58:68:3a: 7c:85:a1:ca:94:9e:78:f1:40:8f:15:5c:13:47:d8:ab:b9:8d: 28:c6:d5:32:32:c2:43:e6:a0:6e:bb:88:22:59:40:0a:04:7e: 6b:36:0d:0a:eb:12:ab:0f:31:4d:40:e0:c7:6c:46:9e:5a:a9: f5:bd:27:c7:b8:99:ed:d8:7f:38:39:96:60:54:c8:a4:0e:0e: 68:b8:96:9f:f9:58:1e:67:e3:b4:12:c6:90:9e:48:94:d7:ca: d3:58:7c:83:09:42:77:54:5f:73:40:27:26:be:6d:d9:7b:86: 3e:26:11:87:c8:c0:9f:ca:db:af:a1:1b:8e:d1:aa:a8:62:8d: 75:b2:2f:4d:ca:2e:50:a5:3f:99:e1:fe:9c:67:67:6a:82:d0: 8a:8a:7b:15:dc:b4:a0:30:1f:88:5b:3a:3a:3a:87:c8:d2:55: 77:fa:1f:81:04:d9:44:ea:0a:5d:1c:fa:42:75:4d:d3:66:91: 31:88:39:b0:09:ae:58:e4:05:bf:fb:39:11:2e:7d:2d:bb:27: b1:50:bf:07:6e:05:68:46:59:85:99:39:90:f2:3c:82:ef:ef: 4a:45:2c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht+q4i/SHBYfKaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkzMloXDTI1MDcyMzExMDkzMlowLzEtMCsGA1UEAxMk MjU5ZTJkZWUtODc0NC00M2UzLTgzYmMtZmJiNTQ2MTA5MzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGUpRX5SdFgxz+RE0L0HTmPIGYtXwUPkkero a8xdnVeMmEquDlw9Ss14sfnajONYxtvl13fwRaKEtSOvKSRIA+Ty89Uwndf9IPRl kfzNzXD8HZI7T5yI6+puUyOPIBanzL0sMyCtdUIcxv+Hl7OrNMehUdbWOBdKSH7J yrAjKk0OSwEaPTnW+LcQWL5DzwESwYxAAjhpPnskWMOy20FiauiSnB4q8ZQ169bB s7/QO8btpijcbk8FxpziKgNYV1tFl0KruRMDC0hhfTbqOETb+2OnifVs0RiP+CHI 8zkZR40/uJk7mVy7tDytuk8EV5gnCOM+Bkycw35ys9Rai6oJmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCK5xkMcpz4cyGDC1cnoe8LsOKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzQ0YmE2NGMtMjZkMi0z ODRkLWEwYTMtMDJkY2VmZjAxZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrfPrYbidUQrz0d01WUkbLelD+f7je5HI6aZoqXVeS4slhoOnyFocqU nnjxQI8VXBNH2Ku5jSjG1TIywkPmoG67iCJZQAoEfms2DQrrEqsPMU1A4MdsRp5a qfW9J8e4me3Yfzg5lmBUyKQODmi4lp/5WB5n47QSxpCeSJTXytNYfIMJQndUX3NA Jya+bdl7hj4mEYfIwJ/K26+hG47RqqhijXWyL03KLlClP5nh/pxnZ2qC0IqKexXc tKAwH4hbOjo6h8jSVXf6H4EE2UTqCl0c+kJ1TdNmkTGIObAJrljkBb/7OREufS27 J7FQvwduBWhGWYWZOZDyPILv70pFLJE= -----END CERTIFICATE-----Generated at Thu May 1 04:09:48 2025 by rpki-client