$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa File: 85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa (raw, json) Hash identifier: IYI0GrHkXZAn7wABmjE2Xd3XmpPmenDQRqZTOflY1/Q= Subject key identifier: A8:E7:B6:9F:D9:90:E3:CC:CB:D7:11:33:B5:22:E2:89:D4:4E:CE:01 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7A5DBF0AEEA99C76E14C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa Signing time: Thu 24 Apr 2025 11:09:00 +0000 ROA not before: Thu 24 Apr 2025 11:09:00 +0000 ROA not after: Wed 23 Jul 2025 11:09:00 +0000 asID: 12041 IP address blocks: 65.22.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:a5:db:f0:ae:ea:99:c7:6e:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:00 2025 GMT Not After : Jul 23 11:09:00 2025 GMT Subject: CN=8f2d4449-f68f-425a-b8d4-72c05d39d63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:89:4c:be:5b:ed:60:20:38:78:01:38:63: a4:9e:e6:8c:c7:c3:04:59:9a:83:c8:da:6f:eb:4a: 68:3e:70:c7:51:31:65:90:f7:14:54:f3:30:8f:1c: 2f:7f:33:12:18:75:12:5a:8c:91:2d:12:2f:ee:79: 41:9c:47:de:23:84:c7:9e:f1:51:a0:a5:86:05:17: 3c:03:7d:35:ef:bb:79:d2:1e:da:2d:81:86:7d:a1: 71:30:2c:2f:be:20:7f:46:dd:10:4b:6f:96:c3:1a: ba:d3:64:d3:f9:70:9b:ff:ee:75:f3:aa:1b:f4:1e: af:95:c2:57:ec:e6:84:5c:94:54:68:47:80:65:0c: 35:3b:03:9e:38:35:dd:77:25:da:b7:64:7d:f8:e6: 45:a4:32:73:dd:62:4d:77:67:6f:de:8e:2f:ba:a6: 9f:c7:93:ca:26:02:9b:0f:c2:7e:c2:13:e1:08:09: c7:a9:c7:2c:f6:68:a6:68:3f:b2:1d:0f:73:c6:ae: 2c:ed:7d:2f:31:82:dd:1c:19:bf:b3:bd:7f:ac:48: 9e:43:12:f7:48:1f:5d:4c:8e:77:a5:72:fd:fe:e3: 59:f2:68:71:f7:59:5e:0b:2c:98:ed:f5:25:04:aa: d7:f5:ae:df:2c:08:1a:0c:8d:32:97:32:da:fb:fb: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E7:B6:9F:D9:90:E3:CC:CB:D7:11:33:B5:22:E2:89:D4:4E:CE:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:90:58:57:c2:45:90:b1:e4:6b:b8:74:06:5b:62:3a:e3:6c: 78:21:bb:03:75:6e:d7:8e:db:fd:27:ed:01:73:79:df:ee:24: 9a:2d:65:6b:15:af:e4:a6:40:30:61:4a:6f:40:e4:74:0c:ca: 2e:69:0d:9d:85:f6:e1:dd:e8:e8:24:16:2a:2c:db:b2:59:87: f4:d0:d2:7f:dc:70:0d:1a:4b:18:84:86:eb:dd:b0:76:86:f9: 5f:0e:58:45:ce:e2:4d:ab:c1:a4:0a:f1:f0:e9:c1:af:de:37: db:61:1c:a2:71:19:7e:93:55:ff:1d:04:9e:38:7b:52:36:18: e8:38:6d:d4:c6:db:03:9a:9e:87:51:e4:7a:9b:3b:d8:3f:d0: 2b:e4:52:97:1c:ea:7b:da:63:c5:bb:1b:49:a0:de:a3:76:46: 9b:8f:9f:16:85:55:52:39:76:71:4e:ae:0a:e8:56:ec:12:48: 17:f5:8b:b9:90:42:5c:76:30:ed:7c:d3:98:12:c7:5d:36:bb: 2c:25:f2:e9:a7:9d:73:47:b9:35:c9:d7:da:0d:0b:e2:78:d6: 37:9e:bc:b7:b7:f7:80:a6:92:49:ba:97:ec:24:9e:44:19:ec: 46:7d:5f:d5:16:83:73:15:ab:04:77:0a:00:37:2d:cd:82:b9: 75:1b:dd:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht6Xb8K7qmcduFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkwMFoXDTI1MDcyMzExMDkwMFowLzEtMCsGA1UEAxMk OGYyZDQ0NDktZjY4Zi00MjVhLWI4ZDQtNzJjMDVkMzlkNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqmJTL5b7WAgOHgBOGOknuaMx8MEWZqDyNpv 60poPnDHUTFlkPcUVPMwjxwvfzMSGHUSWoyRLRIv7nlBnEfeI4THnvFRoKWGBRc8 A30177t50h7aLYGGfaFxMCwvviB/Rt0QS2+Wwxq602TT+XCb/+5186ob9B6vlcJX 7OaEXJRUaEeAZQw1OwOeODXddyXat2R9+OZFpDJz3WJNd2dv3o4vuqafx5PKJgKb D8J+whPhCAnHqccs9mimaD+yHQ9zxq4s7X0vMYLdHBm/s71/rEieQxL3SB9dTI53 pXL9/uNZ8mhx91leCyyY7fUlBKrX9a7fLAgaDI0ylzLa+/ufGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjntp/ZkOPMy9cRM7Ui4onUTs4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODViOTNkNjQtZWZiZC0z M2YxLTgyYzItOGZlYjU4NWQwYWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCQWFfCRZCx5Gu4dAZbYjrjbHghuwN1bteO2/0n7QFzed/uJJotZWsV r+SmQDBhSm9A5HQMyi5pDZ2F9uHd6OgkFios27JZh/TQ0n/ccA0aSxiEhuvdsHaG +V8OWEXO4k2rwaQK8fDpwa/eN9thHKJxGX6TVf8dBJ44e1I2GOg4bdTG2wOanodR 5HqbO9g/0CvkUpcc6nvaY8W7G0mg3qN2RpuPnxaFVVI5dnFOrgroVuwSSBf1i7mQ Qlx2MO1805gSx102uywl8umnnXNHuTXJ19oNC+J41jeevLe394Cmkkm6l+wknkQZ 7EZ9X9UWg3MVqwR3CgA3Lc2CuXUb3bw= -----END CERTIFICATE-----Generated at Wed Apr 30 12:57:47 2025 by rpki-client