$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d9ecc83-c464-3502-b299-89914ca8cb6d.roa File: 7d9ecc83-c464-3502-b299-89914ca8cb6d.roa (raw, json) Hash identifier: UhMZx+snCsYwkB7rrDUEuyD4qWxFkTgp5lkzczEKMBk= Subject key identifier: BB:1F:AD:4D:2C:A5:63:E0:B7:4E:C9:62:7F:46:EE:76:5A:E1:A0:6A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7C1A332FC97A29FF58E50 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d9ecc83-c464-3502-b299-89914ca8cb6d.roa Signing time: Thu 24 Apr 2025 11:09:13 +0000 ROA not before: Thu 24 Apr 2025 11:09:13 +0000 ROA not after: Wed 23 Jul 2025 11:09:13 +0000 asID: 12041 IP address blocks: 65.22.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:c1:a3:32:fc:97:a2:9f:f5:8e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:13 2025 GMT Not After : Jul 23 11:09:13 2025 GMT Subject: CN=9201ac69-211e-4859-a1cd-a8c8f53da394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:d9:02:52:7b:2c:b8:ae:37:f7:8d:31:48: 2e:4f:3d:ed:24:66:54:c6:d2:8f:96:a7:27:c6:c6: ee:01:2f:29:e5:3a:7e:12:91:bb:0d:ec:ce:1b:c1: d7:e1:92:de:b0:e5:52:49:21:e6:f7:9b:9f:7f:56: fd:95:79:52:a0:fc:d4:11:45:3e:ad:de:b4:42:f2: ad:b7:38:dd:55:f8:79:9b:65:ab:28:83:7d:6d:a5: 52:39:48:f4:60:e7:eb:f2:97:c0:ea:58:8f:2b:6d: 5c:ae:31:0d:8b:0d:96:0b:87:21:58:02:4b:c7:f2: ad:d2:47:4d:13:46:5c:86:e2:af:1e:38:6a:77:b0: f1:ed:96:5c:af:a4:fc:f1:f0:18:7b:2d:49:8b:da: e5:6f:49:12:b2:0a:00:7c:db:bf:22:70:72:28:63: 3c:1f:50:35:e3:46:9a:a6:52:f9:09:e0:45:2d:e1: 87:ba:7f:6b:87:80:61:d6:99:2f:f8:83:91:a2:8b: 81:b4:7e:c3:7f:91:d3:22:dc:f5:20:07:88:76:4c: a9:e1:5f:44:cd:28:db:d0:90:d7:07:40:3a:28:ce: 10:01:38:9a:cd:9a:ea:02:25:9a:c0:d1:14:c9:a7: 0d:9d:e9:91:1c:9b:1a:4a:96:32:ac:98:ca:3f:41: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1F:AD:4D:2C:A5:63:E0:B7:4E:C9:62:7F:46:EE:76:5A:E1:A0:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d9ecc83-c464-3502-b299-89914ca8cb6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:2b:d1:29:c2:be:da:18:0e:cc:0d:e3:e0:f5:bb:26:8c:8c: 3c:8f:61:36:2b:bb:a2:0a:d5:34:32:8b:ad:ea:42:6c:66:6a: a2:8a:40:16:82:65:d6:db:2b:d5:fc:ba:44:1d:1a:68:e5:c3: 0e:0a:16:89:85:b6:18:83:7a:73:2b:6b:de:cb:d6:a9:63:70: f2:e0:48:64:05:f1:80:71:f9:ed:f7:e5:f9:f7:41:f2:6e:d3: c2:52:dd:de:67:21:95:e8:6f:88:ca:3a:42:82:15:b8:ad:74: c8:b2:09:30:d2:80:2f:60:d1:9f:71:27:9b:b3:14:37:ae:a8: 26:a3:72:68:1d:22:91:84:2d:07:2b:6d:52:a1:b2:c0:67:5e: 83:07:1c:59:cb:76:b0:fb:5c:73:ec:d0:ab:ef:51:c4:3c:c7: 47:ef:04:db:70:a8:84:c4:32:07:6a:98:88:b9:18:86:f3:8e: 9f:9c:52:71:c5:6b:7f:7e:30:72:8b:d5:ec:cd:b0:73:f9:da: 93:92:5a:4c:cc:3a:16:a7:23:ea:3e:20:42:55:0a:ce:5e:df: a8:05:ae:e9:33:08:52:00:d1:dd:af:4a:71:68:06:60:d0:5c: 9a:83:d1:f4:77:2e:33:4b:1e:9f:4d:ce:a6:29:e1:96:bd:10: 07:f1:2e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht8GjMvyXop/1jlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkxM1oXDTI1MDcyMzExMDkxM1owLzEtMCsGA1UEAxMk OTIwMWFjNjktMjExZS00ODU5LWExY2QtYThjOGY1M2RhMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1bZAlJ7LLiuN/eNMUguTz3tJGZUxtKPlqcn xsbuAS8p5Tp+EpG7DezOG8HX4ZLesOVSSSHm95uff1b9lXlSoPzUEUU+rd60QvKt tzjdVfh5m2WrKIN9baVSOUj0YOfr8pfA6liPK21crjENiw2WC4chWAJLx/Kt0kdN E0ZchuKvHjhqd7Dx7ZZcr6T88fAYey1Ji9rlb0kSsgoAfNu/InByKGM8H1A140aa plL5CeBFLeGHun9rh4Bh1pkv+IORoouBtH7Df5HTItz1IAeIdkyp4V9EzSjb0JDX B0A6KM4QATiazZrqAiWawNEUyacNnemRHJsaSpYyrJjKP0HY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsfrU0spWPgt07JYn9G7nZa4aBqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2Q5ZWNjODMtYzQ2NC0z NTAyLWIyOTktODk5MTRjYThjYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYr0SnCvtoYDswN4+D1uyaMjDyPYTYru6IK1TQyi63qQmxmaqKKQBaC ZdbbK9X8ukQdGmjlww4KFomFthiDenMra97L1qljcPLgSGQF8YBx+e335fn3QfJu 08JS3d5nIZXob4jKOkKCFbitdMiyCTDSgC9g0Z9xJ5uzFDeuqCajcmgdIpGELQcr bVKhssBnXoMHHFnLdrD7XHPs0KvvUcQ8x0fvBNtwqITEMgdqmIi5GIbzjp+cUnHF a39+MHKL1ezNsHP52pOSWkzMOhanI+o+IEJVCs5e36gFrukzCFIA0d2vSnFoBmDQ XJqD0fR3LjNLHp9NzqYp4Za9EAfxLkA= -----END CERTIFICATE-----Generated at Tue Apr 29 20:34:01 2025 by rpki-client