$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa File: 8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa (raw, json) Hash identifier: AmS1xeV9R9dt3n1P9W/E4bS2Qvr7dYPp4oUpTzN8PAc= Subject key identifier: FC:DA:FE:88:71:92:17:A3:DE:ED:AE:BB:D5:95:BA:A0:FC:27:F6:DC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B82560273B2892EB2360B0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa Signing time: Thu 24 Apr 2025 11:10:00 +0000 ROA not before: Thu 24 Apr 2025 11:10:00 +0000 ROA not after: Wed 23 Jul 2025 11:10:00 +0000 asID: 12041 IP address blocks: 65.22.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:25:60:27:3b:28:92:eb:23:60:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:00 2025 GMT Not After : Jul 23 11:10:00 2025 GMT Subject: CN=171d859e-8f05-4d66-9ec4-d1c4d529e33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:79:3b:51:8a:2a:35:28:07:1c:79:6f:8c: 02:79:31:38:87:1e:74:cd:cb:da:19:0f:0c:22:66: 85:f7:a4:d5:90:15:03:b5:27:02:85:a9:ec:db:bb: 7d:06:92:c1:28:30:ec:8b:c1:d8:10:dc:47:4d:0f: 0a:8a:74:0f:93:45:59:af:c4:0d:56:fd:ac:ee:f9: 96:9f:d4:76:f8:12:c3:61:1a:00:2d:b7:90:49:55: 50:3c:34:e4:58:9a:c3:50:9a:e5:04:78:b1:43:22: 66:45:08:e7:d6:35:2d:2e:c5:1b:28:dc:2b:01:02: 7c:f1:31:f4:22:19:f5:b3:fb:92:a0:a2:0e:25:74: f0:fe:cc:26:69:8a:d6:00:60:64:4d:88:37:d5:6d: 83:04:ef:69:77:31:7f:29:ef:54:a6:d2:52:e1:83: 26:b9:2a:5f:77:e5:a6:5e:95:f0:c9:6c:eb:4c:bd: ff:55:19:85:f5:41:af:41:73:ec:c2:3e:58:66:41: fa:ab:62:5f:08:b9:9f:4c:32:36:92:a0:ca:54:cb: 87:78:9d:65:d1:a2:4d:63:6d:35:54:7e:78:20:91: ac:7c:e0:f0:f6:11:f7:c5:c0:55:6e:58:36:8d:ee: 99:91:9c:df:49:99:36:fc:2f:fa:de:63:3e:33:d7: 2c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DA:FE:88:71:92:17:A3:DE:ED:AE:BB:D5:95:BA:A0:FC:27:F6:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:4e:17:ef:82:dc:b5:06:45:35:98:91:d0:95:24:02:d1:d2: de:ba:1f:91:5e:13:30:06:66:7d:84:55:f1:f4:e3:f4:92:86: 47:b9:72:bb:c8:55:69:e0:85:e0:75:ea:d6:28:48:c1:b2:85: 76:01:a9:3c:71:b0:2f:cc:4d:a6:ae:57:30:aa:a7:44:e3:d9: 40:72:8e:c5:fd:f7:3f:78:a7:fd:db:20:95:e3:f4:59:ae:8a: 8a:a0:ba:05:b0:59:20:65:97:88:51:9f:b3:68:3a:73:98:f5: 47:38:4f:29:ed:b7:36:8e:cd:9a:ad:0d:13:f2:7c:e7:6c:0d: e7:cc:21:72:09:6b:5b:c3:8e:c7:a0:21:32:ab:53:cb:7b:21: ab:c2:4d:cd:d1:4a:25:6e:c8:89:53:96:f5:98:b1:f8:7c:cb: dc:cb:20:1d:8e:86:fc:f1:0f:53:71:53:cb:18:d2:5a:c4:99: dc:7c:1d:13:46:ad:66:32:70:42:59:36:e2:16:48:0a:1a:86: e7:85:99:1c:dd:57:29:a5:e2:e0:7f:a7:af:12:cd:b0:1e:87: ce:aa:e9:40:4e:2b:d1:09:51:dc:c4:de:7e:09:aa:a9:35:50: 20:1d:56:cd:ca:a6:26:9a:ea:8a:f3:10:94:63:c4:4b:b4:da: bf:9e:20:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuCVgJzsokusjYLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAwMFoXDTI1MDcyMzExMTAwMFowLzEtMCsGA1UEAxMk MTcxZDg1OWUtOGYwNS00ZDY2LTllYzQtZDFjNGQ1MjllMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig95O1GKKjUoBxx5b4wCeTE4hx50zcvaGQ8M ImaF96TVkBUDtScChans27t9BpLBKDDsi8HYENxHTQ8KinQPk0VZr8QNVv2s7vmW n9R2+BLDYRoALbeQSVVQPDTkWJrDUJrlBHixQyJmRQjn1jUtLsUbKNwrAQJ88TH0 Ihn1s/uSoKIOJXTw/swmaYrWAGBkTYg31W2DBO9pdzF/Ke9UptJS4YMmuSpfd+Wm XpXwyWzrTL3/VRmF9UGvQXPswj5YZkH6q2JfCLmfTDI2kqDKVMuHeJ1l0aJNY201 VH54IJGsfODw9hH3xcBVblg2je6ZkZzfSZk2/C/63mM+M9cs9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPza/ohxkhej3u2uu9WVuqD8J/bcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGU5MzJlNjgtNmExNS0z ODY0LTljZTQtMDVhZDBlYjg5NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJOF++C3LUGRTWYkdCVJALR0t66H5FeEzAGZn2EVfH04/SShke5crvI VWngheB16tYoSMGyhXYBqTxxsC/MTaauVzCqp0Tj2UByjsX99z94p/3bIJXj9Fmu ioqgugWwWSBll4hRn7NoOnOY9Uc4TynttzaOzZqtDRPyfOdsDefMIXIJa1vDjseg ITKrU8t7IavCTc3RSiVuyIlTlvWYsfh8y9zLIB2OhvzxD1NxU8sY0lrEmdx8HRNG rWYycEJZNuIWSAoahueFmRzdVyml4uB/p68SzbAeh86q6UBOK9EJUdzE3n4Jqqk1 UCAdVs3Kpiaa6orzEJRjxEu02r+eIG4= -----END CERTIFICATE-----Generated at Tue Apr 29 15:05:32 2025 by rpki-client