$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8661dcb4-699e-3c43-b6d1-7216c784499c.roa File: 8661dcb4-699e-3c43-b6d1-7216c784499c.roa (raw, json) Hash identifier: 6izhPScK4FFq2+D2g2bv4XgPd97GF39M4V+8HTrpoCI= Subject key identifier: 00:16:DD:FF:A5:A2:E8:C9:9F:F8:01:40:B9:BB:0F:7A:1A:81:B0:56 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7621456F3D51227C4F020 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8661dcb4-699e-3c43-b6d1-7216c784499c.roa Signing time: Thu 24 Apr 2025 11:08:28 +0000 ROA not before: Thu 24 Apr 2025 11:08:28 +0000 ROA not after: Wed 23 Jul 2025 11:08:28 +0000 asID: 12041 IP address blocks: 65.22.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:62:14:56:f3:d5:12:27:c4:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:28 2025 GMT Not After : Jul 23 11:08:28 2025 GMT Subject: CN=61f92fc4-2325-4898-8920-c8aa029756ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:dc:cd:22:a9:cf:08:85:03:a9:2b:90:65: 87:9f:99:2a:c4:aa:42:18:a7:ae:15:ca:72:0b:4a: 6d:91:31:c6:31:ef:30:98:39:b4:04:23:0e:b5:42: 41:96:0a:d6:f5:d5:f0:3b:8d:66:23:af:f3:58:8e: 5a:38:c6:b2:53:cd:88:b8:6f:54:dc:90:75:d7:fc: ff:e4:16:dd:d0:a4:cf:4e:c9:50:8f:0b:16:aa:d2: d6:f3:46:2b:c4:b7:77:b8:9e:b4:3f:da:4a:fa:30: ae:20:36:99:a3:36:f9:e0:06:04:ad:32:65:96:63: 1b:02:db:5b:01:71:3d:5d:1d:3a:d1:f7:b6:15:83: 30:23:97:6d:9b:b4:d3:65:b1:d1:6d:ee:9c:b4:9d: 97:3a:03:b3:40:56:da:da:76:7a:e7:63:11:e4:de: c6:1d:1e:14:e2:dc:a8:a9:f5:8b:78:c3:f7:3c:90: 4c:25:95:e0:eb:04:13:5b:9b:46:93:4e:2b:cd:7f: fd:77:44:f4:81:8e:30:c0:7e:10:5f:db:3d:31:cf: 9d:94:d2:67:6e:19:3b:a8:db:45:4e:90:e0:ce:1f: 3a:4b:f9:7a:37:d0:43:b6:10:ff:78:9d:14:d3:58: 80:6f:f9:35:95:3e:ba:f3:59:87:08:08:0b:75:a5: 23:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:16:DD:FF:A5:A2:E8:C9:9F:F8:01:40:B9:BB:0F:7A:1A:81:B0:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8661dcb4-699e-3c43-b6d1-7216c784499c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:56:88:69:bf:02:26:61:db:2e:dc:8c:88:5f:e8:9a:e9:f1: 1d:cd:b5:1f:1c:37:8a:2d:25:4c:89:c8:04:71:cc:06:68:b4: cc:2b:c7:0e:f9:69:cc:87:33:f1:ec:0c:6e:b1:b6:97:d5:8b: a2:5b:db:2e:af:9c:e5:f3:31:e2:3c:b7:6d:14:4d:8e:16:e5: 5d:cc:a7:09:6e:b9:31:78:14:17:bd:33:9a:bf:ff:45:38:ab: fd:38:cc:42:84:77:0a:84:b0:06:a0:ae:da:85:e8:7a:05:12: 3a:46:e7:6e:1a:3a:37:35:cc:02:35:27:3f:d0:fc:ff:b6:66: 12:ce:73:b7:46:67:b1:90:84:37:69:ad:62:af:d0:99:0e:4c: 69:8b:6c:32:a6:43:7c:af:75:9d:3a:ea:a6:4e:63:f6:32:34: 4a:87:c9:46:d2:55:6a:bd:b1:7a:b2:44:44:db:39:b7:b1:73: 31:f6:79:52:be:61:05:2c:73:36:bd:fa:35:c9:47:09:14:fa: af:d6:51:1d:39:1f:c7:c3:71:5c:b6:6c:e9:c5:4d:12:18:e3: 8e:4e:c0:04:ab:51:36:3f:ba:5f:c0:59:33:aa:79:13:59:9a: b9:fd:d6:55:3d:98:ff:6f:63:a0:9d:ef:01:c8:b3:cc:f1:e6: 0d:d3:f5:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht2IUVvPVEifE8CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgyOFoXDTI1MDcyMzExMDgyOFowLzEtMCsGA1UEAxMk NjFmOTJmYzQtMjMyNS00ODk4LTg5MjAtYzhhYTAyOTc1NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN3czSKpzwiFA6krkGWHn5kqxKpCGKeuFcpy C0ptkTHGMe8wmDm0BCMOtUJBlgrW9dXwO41mI6/zWI5aOMayU82IuG9U3JB11/z/ 5Bbd0KTPTslQjwsWqtLW80YrxLd3uJ60P9pK+jCuIDaZozb54AYErTJllmMbAttb AXE9XR060fe2FYMwI5dtm7TTZbHRbe6ctJ2XOgOzQFba2nZ652MR5N7GHR4U4tyo qfWLeMP3PJBMJZXg6wQTW5tGk04rzX/9d0T0gY4wwH4QX9s9Mc+dlNJnbhk7qNtF TpDgzh86S/l6N9BDthD/eJ0U01iAb/k1lT6681mHCAgLdaUjrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAW3f+loujJn/gBQLm7D3oagbBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODY2MWRjYjQtNjk5ZS0z YzQzLWI2ZDEtNzIxNmM3ODQ0OTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFWiGm/AiZh2y7cjIhf6Jrp8R3NtR8cN4otJUyJyARxzAZotMwrxw75 acyHM/HsDG6xtpfVi6Jb2y6vnOXzMeI8t20UTY4W5V3MpwluuTF4FBe9M5q//0U4 q/04zEKEdwqEsAagrtqF6HoFEjpG524aOjc1zAI1Jz/Q/P+2ZhLOc7dGZ7GQhDdp rWKv0JkOTGmLbDKmQ3yvdZ066qZOY/YyNEqHyUbSVWq9sXqyRETbObexczH2eVK+ YQUscza9+jXJRwkU+q/WUR05H8fDcVy2bOnFTRIY445OwASrUTY/ul/AWTOqeRNZ mrn91lU9mP9vY6Cd7wHIs8zx5g3T9TY= -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:15 2025 by rpki-client