$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa File: 8243bda0-f4c5-3196-872d-cda3f2256d3a.roa (raw, json) Hash identifier: 62wWD/vKVx3AdaHse1bWNFrmxaM5zMpT4bZAIp9mb/Q= Subject key identifier: 2C:33:76:F8:AE:53:C1:08:BD:55:62:B7:E4:5F:F7:FA:5C:AD:98:94 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B419CEDD470080A09F2C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa Signing time: Thu 24 Apr 2025 11:01:51 +0000 ROA not before: Thu 24 Apr 2025 11:01:51 +0000 ROA not after: Wed 23 Jul 2025 11:01:51 +0000 asID: 12041 IP address blocks: 65.22.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:19:ce:dd:47:00:80:a0:9f:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:01:51 2025 GMT Not After : Jul 23 11:01:51 2025 GMT Subject: CN=9c65e77f-eda0-4c1d-815f-eca0e641b00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1c:9b:2d:f2:dc:17:36:b9:38:ad:6b:ab:a0: b3:86:3e:6b:3d:05:86:81:de:80:82:eb:5a:0b:62: 10:3d:f7:f0:20:98:84:66:24:cd:a2:73:1b:cb:ae: e9:52:da:a0:f8:e0:a8:e2:d8:05:ab:99:94:9e:ba: a6:21:d6:6e:37:4b:fe:71:7d:6f:87:33:ad:8d:4e: 11:5c:3f:e1:14:4b:ef:90:0f:05:e7:5e:cf:0b:af: b0:5d:ab:69:60:00:27:a9:48:ec:a0:a1:a4:ef:ce: 4c:ec:15:74:00:53:6c:5f:b9:8b:c5:7d:fd:22:6e: 70:e2:70:6d:2e:bb:ae:81:a2:9d:d1:e4:61:f7:84: 63:9c:5b:6c:bf:7e:41:bb:ef:60:b4:65:66:89:fe: db:b3:b6:53:5d:c0:4f:f3:f0:11:29:57:f8:5d:3f: af:6c:56:db:b5:a5:d1:5d:7d:14:2d:4f:4f:a9:4d: b5:8e:f9:81:e0:5c:8b:0f:82:00:98:02:bc:29:0e: 6e:c0:58:a6:f9:1c:b9:b8:b1:d9:fb:62:32:a8:fa: 92:62:f3:45:7b:d7:e2:5b:b3:e6:a4:05:d8:d8:cf: c1:22:11:5a:de:ea:90:af:3b:9e:dd:3e:29:9d:d7: 51:6b:de:ef:d7:07:35:f9:2f:fa:14:2e:f5:b3:03: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:33:76:F8:AE:53:C1:08:BD:55:62:B7:E4:5F:F7:FA:5C:AD:98:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:65:ef:67:c9:18:ff:e1:a6:8a:9c:d6:23:12:4c:b2:9a:e8: dc:5f:fb:e6:25:f2:45:bd:32:32:d3:22:44:46:35:5d:c2:61: b2:87:8b:24:8f:64:19:d2:4b:be:fa:68:7c:c2:3c:34:0c:44: 42:b2:d4:0b:53:45:9e:8c:54:84:8c:d6:59:50:ca:fb:1c:e5: 21:f3:11:d4:06:bc:e3:ca:9c:63:0d:42:91:b8:7c:36:ee:1c: 5d:22:24:96:fd:2a:da:56:91:6e:ee:ed:bd:99:d8:30:ac:c2: e9:1a:cf:1c:f9:14:98:1b:9e:b2:57:f1:4a:14:f6:fc:a7:13: f6:0f:8d:36:6a:81:dd:05:a2:7f:25:bd:e9:1e:32:2b:d1:66: 09:34:30:e0:f2:6e:51:77:43:9e:cc:21:0a:9a:10:13:c2:cb: 69:36:de:4b:e5:c9:3d:91:b9:09:dc:b3:d8:40:e1:e5:c0:18: 91:0c:0b:3b:4f:b0:f5:69:1e:d5:23:b8:6f:af:af:96:d1:54: 25:cf:67:9e:f7:a6:a5:61:6b:c2:de:61:fc:32:9a:0b:75:b0: 70:7b:1d:8d:b4:6b:f4:b9:b4:d2:b0:19:7f:69:7f:47:1e:13: 88:11:53:3b:97:7f:8f:c4:76:88:04:42:ff:5b:b9:a5:6a:84: 1b:af:42:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtBnO3UcAgKCfLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDE1MVoXDTI1MDcyMzExMDE1MVowLzEtMCsGA1UEAxMk OWM2NWU3N2YtZWRhMC00YzFkLTgxNWYtZWNhMGU2NDFiMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRybLfLcFza5OK1rq6Czhj5rPQWGgd6Aguta C2IQPffwIJiEZiTNonMby67pUtqg+OCo4tgFq5mUnrqmIdZuN0v+cX1vhzOtjU4R XD/hFEvvkA8F517PC6+wXatpYAAnqUjsoKGk785M7BV0AFNsX7mLxX39Im5w4nBt LruugaKd0eRh94RjnFtsv35Bu+9gtGVmif7bs7ZTXcBP8/ARKVf4XT+vbFbbtaXR XX0ULU9PqU21jvmB4FyLD4IAmAK8KQ5uwFim+Ry5uLHZ+2IyqPqSYvNFe9fiW7Pm pAXY2M/BIhFa3uqQrzue3T4pnddRa97v1wc1+S/6FC71swMfmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwzdviuU8EIvVVit+Rf9/pcrZiUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODI0M2JkYTAtZjRjNS0z MTk2LTg3MmQtY2RhM2YyMjU2ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpl72fJGP/hpoqc1iMSTLKa6Nxf++Yl8kW9MjLTIkRGNV3CYbKHiySP ZBnSS776aHzCPDQMREKy1AtTRZ6MVISM1llQyvsc5SHzEdQGvOPKnGMNQpG4fDbu HF0iJJb9KtpWkW7u7b2Z2DCswukazxz5FJgbnrJX8UoU9vynE/YPjTZqgd0Fon8l vekeMivRZgk0MODyblF3Q57MIQqaEBPCy2k23kvlyT2RuQncs9hA4eXAGJEMCztP sPVpHtUjuG+vr5bRVCXPZ573pqVha8LeYfwymgt1sHB7HY20a/S5tNKwGX9pf0ce E4gRUzuXf4/EdogEQv9buaVqhBuvQv8= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:21 2025 by rpki-client