$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/852f197f-8ee8-3b2f-be94-916f32fe7e25.roa File: 852f197f-8ee8-3b2f-be94-916f32fe7e25.roa (raw, json) Hash identifier: Mpmvl8W7RceeKWeFqAzc1Cwu9zfSfO82jhi6NAH8lj4= Subject key identifier: C0:82:FC:1A:2E:5F:16:12:4E:23:DB:13:7C:B4:52:B3:4B:60:7B:C3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B80E66E6098EA3002B2DD0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/852f197f-8ee8-3b2f-be94-916f32fe7e25.roa Signing time: Thu 24 Apr 2025 11:09:49 +0000 ROA not before: Thu 24 Apr 2025 11:09:49 +0000 ROA not after: Wed 23 Jul 2025 11:09:49 +0000 asID: 12041 IP address blocks: 65.22.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:0e:66:e6:09:8e:a3:00:2b:2d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:49 2025 GMT Not After : Jul 23 11:09:49 2025 GMT Subject: CN=081de57e-5cfe-4820-94ab-0f4c85556589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:f0:df:ad:fd:8e:3a:25:31:1d:e9:75:52: c9:63:cf:ae:41:a2:af:54:f1:cd:67:5c:cd:0f:45: 0f:43:19:ce:e6:98:fa:7a:02:85:00:f3:e5:d1:c8: 27:ab:6f:5c:41:05:e7:8e:bd:7c:b2:0e:a1:61:0c: 55:26:47:c6:8e:e7:e3:4a:ed:a6:e1:c0:8d:87:2d: 2f:a7:01:c7:1a:4f:08:ec:95:3a:29:eb:4c:94:3b: 73:2b:b6:72:45:d9:13:54:58:2b:c5:90:bb:58:ad: e8:d9:14:fd:2d:04:b0:d8:e0:be:f0:f3:3d:a6:2c: 94:31:0f:b9:4f:b5:85:6e:5e:83:f2:9c:2b:86:0d: aa:12:2f:87:1f:8f:4c:6b:d2:38:b0:97:47:41:01: 22:f1:b8:ed:4f:8f:42:07:d2:68:5a:b2:a5:6c:35: da:2d:cf:ab:a5:54:87:f3:cb:22:39:ac:f8:87:08: 37:eb:60:74:dc:90:37:30:dd:ba:f8:95:5e:29:19: 86:23:bd:1d:84:3f:6d:c6:a1:3d:48:1a:e9:a5:d6: 7a:da:34:6b:8b:aa:6c:e2:c0:d1:dc:01:39:71:1e: 04:d5:72:46:7d:91:65:05:a4:fc:6c:ae:48:8d:e7: 94:7f:d0:bd:bb:db:01:b2:63:2d:f9:0f:8c:0e:a3: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:82:FC:1A:2E:5F:16:12:4E:23:DB:13:7C:B4:52:B3:4B:60:7B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/852f197f-8ee8-3b2f-be94-916f32fe7e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:92:f5:6f:a0:51:40:f5:cc:74:4a:4e:1a:f6:f5:da:b5:73: d5:a7:44:5e:d0:48:16:f5:e6:f6:62:e3:3b:22:48:92:25:24: b9:08:ca:5a:4b:f2:34:c4:06:2a:7f:5a:55:86:d8:c1:c6:ea: 5d:01:68:71:9c:01:41:c7:d3:af:2b:a3:da:27:5b:e3:8d:96: e0:a8:14:35:bc:a6:f0:43:e6:cd:8a:7a:ca:a0:d8:8c:7e:1f: 3c:c5:85:2f:06:b2:88:df:16:ac:95:3c:0a:66:dd:0e:49:ef: b0:12:f3:63:de:5d:d3:ac:16:7c:2c:66:f7:34:59:57:1b:41: fb:4a:e9:62:d4:d1:f3:44:85:04:2e:13:ce:4d:dc:6b:54:ad: cf:4c:38:0e:9e:f9:2c:8b:2b:a7:08:32:c3:89:06:99:48:25: 49:e9:fe:1e:16:17:eb:ce:b5:dd:a2:2d:53:e2:88:a0:12:78: 21:d8:86:1c:da:b9:e6:00:8c:21:91:ec:5d:54:a4:f0:d5:e3: 3b:99:60:df:ca:30:74:b4:ed:68:0d:ef:34:04:04:9f:5e:39: ae:d7:21:32:b9:b6:da:13:07:79:3b:84:59:d1:3f:4b:9c:97: f8:22:c7:eb:aa:d5:3a:40:68:88:6e:3a:eb:40:5d:e8:e5:e1: 7c:ee:aa:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuA5m5gmOowArLdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk0OVoXDTI1MDcyMzExMDk0OVowLzEtMCsGA1UEAxMk MDgxZGU1N2UtNWNmZS00ODIwLTk0YWItMGY0Yzg1NTU2NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok/w3639jjolMR3pdVLJY8+uQaKvVPHNZ1zN D0UPQxnO5pj6egKFAPPl0cgnq29cQQXnjr18sg6hYQxVJkfGjufjSu2m4cCNhy0v pwHHGk8I7JU6KetMlDtzK7ZyRdkTVFgrxZC7WK3o2RT9LQSw2OC+8PM9piyUMQ+5 T7WFbl6D8pwrhg2qEi+HH49Ma9I4sJdHQQEi8bjtT49CB9JoWrKlbDXaLc+rpVSH 88siOaz4hwg362B03JA3MN26+JVeKRmGI70dhD9txqE9SBrppdZ62jRri6ps4sDR 3AE5cR4E1XJGfZFlBaT8bK5IjeeUf9C9u9sBsmMt+Q+MDqMTMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCC/BouXxYSTiPbE3y0UrNLYHvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODUyZjE5N2YtOGVlOC0z YjJmLWJlOTQtOTE2ZjMyZmU3ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSS9W+gUUD1zHRKThr29dq1c9WnRF7QSBb15vZi4zsiSJIlJLkIylpL 8jTEBip/WlWG2MHG6l0BaHGcAUHH068ro9onW+ONluCoFDW8pvBD5s2Kesqg2Ix+ HzzFhS8GsojfFqyVPApm3Q5J77AS82PeXdOsFnwsZvc0WVcbQftK6WLU0fNEhQQu E85N3GtUrc9MOA6e+SyLK6cIMsOJBplIJUnp/h4WF+vOtd2iLVPiiKASeCHYhhza ueYAjCGR7F1UpPDV4zuZYN/KMHS07WgN7zQEBJ9eOa7XITK5ttoTB3k7hFnRP0uc l/gix+uq1TpAaIhuOutAXejl4Xzuqk0= -----END CERTIFICATE-----Generated at Tue Apr 29 12:07:06 2025 by rpki-client