$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8da7dcfb-64be-3132-960a-a55c216d4d4a.roa File: 8da7dcfb-64be-3132-960a-a55c216d4d4a.roa (raw, json) Hash identifier: HkKEz3NY+BdVhazsTID+tXg5U6MASx6uDaFmnzJM/Gc= Subject key identifier: B9:0E:00:8B:58:67:61:50:15:B4:4C:71:A0:BA:8A:56:8B:8D:31:3F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B79FA9C5663BF0DCC3E580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8da7dcfb-64be-3132-960a-a55c216d4d4a.roa Signing time: Thu 24 Apr 2025 11:08:57 +0000 ROA not before: Thu 24 Apr 2025 11:08:57 +0000 ROA not after: Wed 23 Jul 2025 11:08:57 +0000 asID: 12041 IP address blocks: 65.22.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:9f:a9:c5:66:3b:f0:dc:c3:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:57 2025 GMT Not After : Jul 23 11:08:57 2025 GMT Subject: CN=29214f8a-a169-4d34-8ca3-8aa0972168fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:40:fc:65:8f:79:e6:e9:e8:26:d3:78:a2:4d: 3e:02:0a:32:5b:34:56:9f:ec:f4:59:48:8c:f7:4a: 22:19:46:04:77:6e:d1:38:17:10:50:4c:df:10:60: 69:33:2e:d2:f8:c4:08:68:22:55:e4:53:4a:ba:3d: 99:de:38:a3:3a:59:28:f2:26:02:20:1a:7f:fa:de: f3:5c:64:69:b3:c2:e8:ff:6d:90:9f:6b:5c:62:67: f4:e7:59:e4:57:79:83:c8:a0:27:fb:a2:ef:b2:bf: 5f:ce:4d:e6:10:9d:f8:f2:62:77:46:98:00:20:36: f1:2c:93:36:9a:9f:67:c2:55:13:5b:f4:8e:03:db: 0e:e9:7a:1b:51:6d:7b:a9:dc:93:7e:46:cd:c3:bd: 5f:f2:cb:55:aa:2e:5b:5f:b9:39:d7:c3:e2:f0:07: 4a:6e:ac:ac:b9:a9:c7:79:11:ba:d4:6b:85:6b:3d: 1e:c8:da:96:b2:be:d3:50:42:9f:63:97:85:21:95: 4a:d0:ba:dd:4f:7e:3c:2d:34:26:e9:1c:6b:f8:71: 54:e7:b6:f1:ec:8e:47:70:20:54:26:8b:5e:e1:05: d7:ed:44:ad:25:0b:75:78:40:bc:49:8a:9e:8c:4e: 04:f2:77:c9:8c:39:85:2e:9c:d1:d1:26:02:77:90: 8f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:00:8B:58:67:61:50:15:B4:4C:71:A0:BA:8A:56:8B:8D:31:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8da7dcfb-64be-3132-960a-a55c216d4d4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:20:a2:32:0f:cc:41:07:6b:06:b2:65:e0:c6:7f:91:d2:de: 0e:8d:5c:8a:6e:c6:92:a6:24:3b:93:b7:ab:01:a1:1c:9f:ff: 81:9d:9f:b6:33:db:85:67:e9:29:56:20:7f:e7:d3:48:62:16: 67:48:4c:62:a5:69:8a:40:5a:89:bd:96:63:cb:51:50:0d:05: 96:63:59:13:ae:13:b8:dd:e6:3d:35:4f:19:b3:ac:f8:37:9c: b2:6f:4d:b2:e1:c5:c6:ca:96:9f:0b:90:cf:7e:3e:d9:09:ad: 49:0a:fa:78:76:e2:8c:42:51:33:6d:d6:16:f1:2a:8f:45:4b: 36:5f:45:97:8c:1a:05:80:5d:a7:91:79:54:c9:ce:96:52:af: 78:a9:25:82:50:b1:4e:0b:27:25:7e:b9:ef:1b:04:34:b2:21: c3:c3:75:c6:85:2e:fc:0e:a6:3e:34:8d:74:e8:8b:26:b7:8c: 79:f7:68:9d:53:3e:d3:1c:22:c3:9e:04:dd:4c:90:29:bf:03: f0:99:55:14:22:b6:83:fa:99:0b:3a:af:23:b0:68:04:37:70: b7:19:a9:60:86:63:77:39:9b:d6:c5:b7:5c:a8:2f:e1:e1:05: f0:ff:30:87:3b:32:8f:fa:3c:d1:34:b1:2c:b8:eb:d6:81:ef: 64:bc:3d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht5+pxWY78NzD5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1N1oXDTI1MDcyMzExMDg1N1owLzEtMCsGA1UEAxMk MjkyMTRmOGEtYTE2OS00ZDM0LThjYTMtOGFhMDk3MjE2OGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkD8ZY955unoJtN4ok0+AgoyWzRWn+z0WUiM 90oiGUYEd27ROBcQUEzfEGBpMy7S+MQIaCJV5FNKuj2Z3jijOlko8iYCIBp/+t7z XGRps8Lo/22Qn2tcYmf051nkV3mDyKAn+6Lvsr9fzk3mEJ348mJ3RpgAIDbxLJM2 mp9nwlUTW/SOA9sO6XobUW17qdyTfkbNw71f8stVqi5bX7k518Pi8AdKbqysuanH eRG61GuFaz0eyNqWsr7TUEKfY5eFIZVK0LrdT348LTQm6Rxr+HFU57bx7I5HcCBU Jote4QXX7UStJQt1eEC8SYqejE4E8nfJjDmFLpzR0SYCd5CPlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkOAItYZ2FQFbRMcaC6ilaLjTE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGRhN2RjZmItNjRiZS0z MTMyLTk2MGEtYTU1YzIxNmQ0ZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsgojIPzEEHawayZeDGf5HS3g6NXIpuxpKmJDuTt6sBoRyf/4Gdn7Yz 24Vn6SlWIH/n00hiFmdITGKlaYpAWom9lmPLUVANBZZjWROuE7jd5j01TxmzrPg3 nLJvTbLhxcbKlp8LkM9+PtkJrUkK+nh24oxCUTNt1hbxKo9FSzZfRZeMGgWAXaeR eVTJzpZSr3ipJYJQsU4LJyV+ue8bBDSyIcPDdcaFLvwOpj40jXToiya3jHn3aJ1T PtMcIsOeBN1MkCm/A/CZVRQitoP6mQs6ryOwaAQ3cLcZqWCGY3c5m9bFt1yoL+Hh BfD/MIc7Mo/6PNE0sSy469aB72S8Pa4= -----END CERTIFICATE-----Generated at Tue Apr 29 16:28:09 2025 by rpki-client