$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c20b394-a054-3946-adfb-28bee79b3dc3.roa File: 8c20b394-a054-3946-adfb-28bee79b3dc3.roa (raw, json) Hash identifier: e3V1441NJjmEH0m2k1lmvTHn93MMKG856XSK2wQBM6M= Subject key identifier: F0:91:56:E3:B7:B9:F1:95:33:57:88:E1:9A:99:BD:09:28:48:C0:6C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B773789E06D0AAA9649868 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c20b394-a054-3946-adfb-28bee79b3dc3.roa Signing time: Thu 24 Apr 2025 11:08:36 +0000 ROA not before: Thu 24 Apr 2025 11:08:36 +0000 ROA not after: Wed 23 Jul 2025 11:08:36 +0000 asID: 12041 IP address blocks: 65.22.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:73:78:9e:06:d0:aa:a9:64:98:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:36 2025 GMT Not After : Jul 23 11:08:36 2025 GMT Subject: CN=d716ab9c-5cb2-46f0-951b-69d9c8347212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:8c:f2:8a:83:0b:a0:92:1e:26:8a:26:45: 95:1f:ee:63:56:bf:29:46:96:56:3d:68:22:96:cf: e9:04:21:96:dd:33:2e:7f:c0:d7:ce:ab:00:3c:a9: c2:97:ce:f5:20:35:14:61:3b:e7:35:a9:c8:60:6d: a3:fe:e2:ca:0b:72:b2:41:e4:b2:ab:3e:1c:ec:8c: 2d:fb:45:c2:61:85:af:0f:05:7c:e0:e1:0d:5c:db: 66:ca:53:b8:f6:31:e7:b8:7d:52:f3:cd:86:ec:f7: e5:b0:03:bb:85:e3:99:00:f7:74:80:f1:b0:c6:9f: a4:43:20:a6:b8:b3:0d:de:3d:bb:aa:47:5f:6c:a4: ff:b0:ff:fe:02:bf:11:38:d7:09:1c:92:01:85:4a: bd:e9:53:19:89:14:87:3b:cb:eb:56:f8:24:0c:34: 5d:bd:81:32:09:e3:92:25:38:35:a8:96:cc:6a:e7: 94:36:ff:8c:0f:d3:e5:0a:32:83:b1:dd:31:e1:c9: d8:2d:0e:e7:56:df:24:a7:0c:4d:34:bd:db:90:b8: 6b:1c:a9:9e:5d:0d:b0:11:9d:32:54:6a:d4:f7:4b: 2a:76:64:84:1e:1e:cb:42:fe:3b:30:bf:d7:c3:1d: cb:42:f0:21:f4:0a:0d:ae:5e:dd:e0:47:c7:d6:25: 8b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:91:56:E3:B7:B9:F1:95:33:57:88:E1:9A:99:BD:09:28:48:C0:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c20b394-a054-3946-adfb-28bee79b3dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:df:ca:dc:22:43:ae:80:94:00:97:ae:35:d4:cd:68:91:63: 45:97:2f:69:02:f3:cb:e6:84:05:42:8c:59:65:95:cf:be:b2: 46:a7:ca:65:77:4c:24:78:5a:95:6b:bd:c3:f0:64:29:25:f2: 13:e4:30:e1:06:49:fe:29:f4:a4:3c:b3:c9:36:5d:bc:51:fd: 7f:2f:bd:6a:b4:ee:14:49:62:22:b6:90:14:8e:d0:eb:23:b7: b5:28:49:29:3a:59:82:79:8f:c6:3c:73:45:ec:7c:9c:31:7d: 0a:1e:16:c4:03:a4:48:57:d4:1b:68:6b:7a:6c:f4:1c:39:25: 4c:16:1c:a6:b5:b5:df:36:42:9e:40:f1:8d:37:f8:1f:52:b7: b9:d0:35:ce:b8:40:45:ac:8c:18:99:56:43:71:5e:cd:aa:6d: 7d:f5:e4:a5:88:eb:b7:45:fa:f2:a3:8b:ce:67:7b:33:90:71: c1:1b:1d:b6:02:e3:f2:44:ba:63:33:cf:a9:ba:98:e4:30:80: 2d:87:82:01:5c:5d:8b:31:ca:6d:29:07:cd:8f:c2:f0:1d:55: 94:6a:3f:5c:f5:d5:2a:01:d8:ba:d8:9b:b3:8d:0b:40:5f:b5: 48:f3:d1:fa:c6:3a:9f:12:8f:0c:7e:84:8a:62:b9:a4:5c:8e: ff:5e:75:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht3N4ngbQqqlkmGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgzNloXDTI1MDcyMzExMDgzNlowLzEtMCsGA1UEAxMk ZDcxNmFiOWMtNWNiMi00NmYwLTk1MWItNjlkOWM4MzQ3MjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2iM8oqDC6CSHiaKJkWVH+5jVr8pRpZWPWgi ls/pBCGW3TMuf8DXzqsAPKnCl871IDUUYTvnNanIYG2j/uLKC3KyQeSyqz4c7Iwt +0XCYYWvDwV84OENXNtmylO49jHnuH1S882G7PflsAO7heOZAPd0gPGwxp+kQyCm uLMN3j27qkdfbKT/sP/+Ar8RONcJHJIBhUq96VMZiRSHO8vrVvgkDDRdvYEyCeOS JTg1qJbMaueUNv+MD9PlCjKDsd0x4cnYLQ7nVt8kpwxNNL3bkLhrHKmeXQ2wEZ0y VGrU90sqdmSEHh7LQv47ML/Xwx3LQvAh9AoNrl7d4EfH1iWLrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCRVuO3ufGVM1eI4ZqZvQkoSMBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGMyMGIzOTQtYTA1NC0z OTQ2LWFkZmItMjhiZWU3OWIzZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbfytwiQ66AlACXrjXUzWiRY0WXL2kC88vmhAVCjFlllc++skanymV3 TCR4WpVrvcPwZCkl8hPkMOEGSf4p9KQ8s8k2XbxR/X8vvWq07hRJYiK2kBSO0Osj t7UoSSk6WYJ5j8Y8c0XsfJwxfQoeFsQDpEhX1Btoa3ps9Bw5JUwWHKa1td82Qp5A 8Y03+B9St7nQNc64QEWsjBiZVkNxXs2qbX315KWI67dF+vKji85nezOQccEbHbYC 4/JEumMzz6m6mOQwgC2HggFcXYsxym0pB82PwvAdVZRqP1z11SoB2LrYm7ONC0Bf tUjz0frGOp8Sjwx+hIpiuaRcjv9edTA= -----END CERTIFICATE-----Generated at Tue Apr 29 15:54:17 2025 by rpki-client