$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa File: 833cc317-acc3-3c41-aa3a-e9ecad388252.roa (raw, json) Hash identifier: GVPK6JrJNC9BLeUuTamQP8kEozA/hqy7a8nOmVgknbs= Subject key identifier: 67:0C:01:B9:8B:04:34:18:0C:6A:9E:E0:EB:D4:E9:25:40:36:1C:87 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7FD421233B777F8D577C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa Signing time: Thu 24 Apr 2025 11:09:41 +0000 ROA not before: Thu 24 Apr 2025 11:09:41 +0000 ROA not after: Wed 23 Jul 2025 11:09:41 +0000 asID: 12041 IP address blocks: 65.22.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:fd:42:12:33:b7:77:f8:d5:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:41 2025 GMT Not After : Jul 23 11:09:41 2025 GMT Subject: CN=a03ce562-4dae-4dad-9ce7-3bbc9243f106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:de:2c:15:42:aa:c1:57:b0:51:48:fd:0c: cd:72:8b:42:73:0c:30:8d:0f:7b:a1:4c:aa:e9:42: d4:a2:3b:63:a2:47:ff:dc:1b:2d:d6:52:41:b2:e1: 7d:03:19:45:5c:03:7b:9d:66:fa:57:81:61:1f:6c: 0f:e4:99:ad:ac:bc:33:02:9b:81:74:04:92:34:db: 0a:82:cb:bf:b0:87:8a:24:19:d8:43:5d:d2:30:89: f6:71:c2:f6:c8:23:0c:67:78:c8:61:15:4a:11:87: 42:93:cf:6b:5c:89:3b:10:a4:25:50:68:e3:ed:ff: 74:1d:cd:0f:5a:51:bf:10:84:67:90:6c:39:67:1b: b8:1f:00:d8:70:7c:8c:0f:55:ff:35:f4:ff:fc:6b: 43:97:65:6d:ce:0e:b0:d1:ce:89:90:32:c8:04:6b: 74:45:38:2a:70:8d:c3:38:89:7f:ac:17:2c:16:27: 96:4f:51:e7:8f:10:e7:09:ad:3f:62:b3:eb:8b:11: 59:30:fa:84:2e:d9:62:2d:8d:cb:af:a2:79:55:42: 34:33:bd:d1:c4:c5:f2:7e:d1:e9:f6:bc:12:d5:2c: d7:ed:1c:fe:b1:b3:13:dd:57:ab:b3:d1:58:4f:52: f2:b4:be:08:ce:f6:29:60:51:0d:72:9d:a3:71:c1: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:01:B9:8B:04:34:18:0C:6A:9E:E0:EB:D4:E9:25:40:36:1C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:27:53:d1:91:8e:1c:ae:6f:2a:ef:75:d7:90:74:0a:e6:2b: 17:b8:59:3b:41:cf:4b:16:74:f0:75:6e:db:e1:0c:59:d5:4e: d4:5a:64:c6:a4:e9:7f:22:b6:62:de:f5:a0:8f:4b:04:6c:54: 3d:9b:0d:23:0c:6b:67:3f:92:57:5f:2e:24:35:f1:a5:43:86: 09:5e:18:4d:40:10:20:4f:a6:2e:b4:d3:ce:9e:38:8e:e3:b2: a2:a3:12:09:38:c1:f2:ec:3c:81:e6:24:0e:34:72:ff:99:57: c2:ea:84:9c:19:88:b4:29:5c:b9:40:ed:c5:1c:ef:90:af:41: 90:03:c5:95:2f:39:aa:48:22:51:12:1f:a7:c2:64:e0:81:2b: bb:09:36:20:e7:4a:bb:d4:c5:37:80:d4:85:90:6b:85:c9:bd: 0b:2e:8d:9a:10:c5:af:a5:8f:9e:63:c1:26:d0:ae:03:49:b2: a4:a3:72:90:2f:64:0e:fe:18:85:3b:fb:c5:b7:5d:02:07:5d: 63:0d:46:85:66:34:e0:9f:de:f0:84:ae:83:42:96:37:d0:3c: 16:a8:a7:64:cf:bb:e1:44:d3:bb:3a:cc:d9:fa:f5:79:14:71: 70:47:c9:8d:1d:3a:22:09:f6:e8:fa:75:13:95:d9:a5:86:52: 40:a3:e3:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht/1CEjO3d/jVd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk0MVoXDTI1MDcyMzExMDk0MVowLzEtMCsGA1UEAxMk YTAzY2U1NjItNGRhZS00ZGFkLTljZTctM2JiYzkyNDNmMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZTeLBVCqsFXsFFI/QzNcotCcwwwjQ97oUyq 6ULUojtjokf/3Bst1lJBsuF9AxlFXAN7nWb6V4FhH2wP5JmtrLwzApuBdASSNNsK gsu/sIeKJBnYQ13SMIn2ccL2yCMMZ3jIYRVKEYdCk89rXIk7EKQlUGjj7f90Hc0P WlG/EIRnkGw5Zxu4HwDYcHyMD1X/NfT//GtDl2Vtzg6w0c6JkDLIBGt0RTgqcI3D OIl/rBcsFieWT1HnjxDnCa0/YrPrixFZMPqELtliLY3Lr6J5VUI0M73RxMXyftHp 9rwS1SzX7Rz+sbMT3Vers9FYT1LytL4IzvYpYFENcp2jccHbMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcMAbmLBDQYDGqe4OvU6SVANhyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODMzY2MzMTctYWNjMy0z YzQxLWFhM2EtZTllY2FkMzg4MjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgnU9GRjhyubyrvddeQdArmKxe4WTtBz0sWdPB1btvhDFnVTtRaZMak 6X8itmLe9aCPSwRsVD2bDSMMa2c/kldfLiQ18aVDhgleGE1AECBPpi60086eOI7j sqKjEgk4wfLsPIHmJA40cv+ZV8LqhJwZiLQpXLlA7cUc75CvQZADxZUvOapIIlES H6fCZOCBK7sJNiDnSrvUxTeA1IWQa4XJvQsujZoQxa+lj55jwSbQrgNJsqSjcpAv ZA7+GIU7+8W3XQIHXWMNRoVmNOCf3vCEroNCljfQPBaop2TPu+FE07s6zNn69XkU cXBHyY0dOiIJ9uj6dROV2aWGUkCj44A= -----END CERTIFICATE-----Generated at Tue Apr 29 10:18:20 2025 by rpki-client