$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa File: 8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa (raw, json) Hash identifier: Zv9zBSLZGvk4cxRKECwJw8z6MhQWBNbH/7ABOLV31Ao= Subject key identifier: 22:04:E5:1C:64:74:63:E4:3C:29:9C:3A:E2:37:78:55:10:2C:36:58 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B85E4B56A70475951C1580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa Signing time: Thu 24 Apr 2025 11:10:27 +0000 ROA not before: Thu 24 Apr 2025 11:10:27 +0000 ROA not after: Wed 23 Jul 2025 11:10:27 +0000 asID: 12041 IP address blocks: 65.22.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:5e:4b:56:a7:04:75:95:1c:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:27 2025 GMT Not After : Jul 23 11:10:27 2025 GMT Subject: CN=5a27443c-bd12-4ba3-b422-0db44e0cc86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:dc:2d:e4:6d:ab:13:b5:08:88:c1:f8:13: 13:6c:92:cb:56:ec:86:e0:66:e3:95:42:e7:31:4d: c2:f1:53:dd:c8:5b:68:1a:cd:c4:8c:6e:11:1c:18: eb:fb:78:0a:aa:59:51:9e:66:cd:89:c2:0a:a3:b4: 07:58:a8:6f:03:8a:b6:9c:53:e4:60:13:ed:a9:58: a6:76:4c:5b:9c:fd:a6:bf:7b:25:f1:b8:e1:87:d4: fe:e2:5a:09:f3:45:6d:3e:f5:99:6d:95:91:cc:9e: 06:92:cd:02:8b:d6:6a:b6:67:11:bc:e5:cc:eb:ac: 7d:ad:fd:18:a7:0c:00:56:78:91:c4:17:2c:b5:b8: 4a:a2:8b:13:b4:95:e8:96:90:ec:f4:0b:a3:d4:4e: c1:f2:e6:91:23:61:e0:02:f0:57:78:25:0f:e0:d9: 33:a5:e6:af:9e:3f:92:27:2f:b6:1c:d4:96:bd:e0: 1b:18:37:51:cb:50:eb:97:03:89:93:7b:c3:52:9a: 4f:4b:1f:fd:45:1a:5a:10:94:1e:03:c2:17:e9:d2: 25:c1:58:35:10:7c:27:16:46:60:33:24:2d:4f:f8: c6:dc:14:3d:d6:f9:04:e0:c5:e6:3f:4d:7d:93:52: 39:7c:2f:ab:3c:2c:93:8b:e2:49:12:78:88:17:da: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:04:E5:1C:64:74:63:E4:3C:29:9C:3A:E2:37:78:55:10:2C:36:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:33:3e:e9:31:bf:53:4c:68:11:a9:b4:c2:af:ea:b2:b7:0f: 81:dd:3c:7f:f6:1a:eb:cc:ff:4c:9f:97:d8:24:67:ae:1f:65: 6e:41:bc:08:26:13:e3:a2:cf:d2:98:ae:0c:9c:5e:15:65:7e: 4b:6d:b4:f1:e4:9f:96:3a:56:72:0c:8f:03:f6:12:d8:ac:80: c9:ed:de:17:ef:ca:9f:e9:e7:f8:6d:55:71:d5:24:bc:a9:39: 94:30:20:75:0f:31:82:79:1b:6d:da:97:0c:47:11:3d:bc:2c: fc:a0:27:f5:18:d3:74:57:b3:14:63:73:ef:83:39:73:29:23: 8b:39:96:9a:9d:e7:e3:8b:c7:3d:b0:4a:f8:f6:41:5b:fa:52: 4e:a8:ec:cf:38:5c:e9:37:cb:a2:34:ea:34:62:50:d6:11:22: e2:b2:b8:ef:54:62:73:81:a8:cc:c4:4d:11:d7:bf:5e:49:bb: 91:27:42:ed:27:8d:79:d8:a6:56:7e:e1:5d:83:f9:a7:84:bb: db:c3:c3:bd:ce:09:b5:b3:55:74:4c:57:66:e9:b5:90:5f:be: 7f:41:8b:e0:5d:f8:af:07:31:52:9e:54:53:a3:95:13:c0:4d: 5e:47:cf:c5:8a:e5:77:db:ce:09:e2:1a:2f:13:1b:d1:4b:8d: 67:b4:5f:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuF5LVqcEdZUcFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAyN1oXDTI1MDcyMzExMTAyN1owLzEtMCsGA1UEAxMk NWEyNzQ0M2MtYmQxMi00YmEzLWI0MjItMGRiNDRlMGNjODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotfcLeRtqxO1CIjB+BMTbJLLVuyG4GbjlULn MU3C8VPdyFtoGs3EjG4RHBjr+3gKqllRnmbNicIKo7QHWKhvA4q2nFPkYBPtqVim dkxbnP2mv3sl8bjhh9T+4loJ80VtPvWZbZWRzJ4Gks0Ci9ZqtmcRvOXM66x9rf0Y pwwAVniRxBcstbhKoosTtJXolpDs9Auj1E7B8uaRI2HgAvBXeCUP4Nkzpeavnj+S Jy+2HNSWveAbGDdRy1DrlwOJk3vDUppPSx/9RRpaEJQeA8IX6dIlwVg1EHwnFkZg MyQtT/jG3BQ91vkE4MXmP019k1I5fC+rPCyTi+JJEniIF9oqKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIE5RxkdGPkPCmcOuI3eFUQLDZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGZlM2ZkYjAtZGRmZC0z OTNlLWEzNTctNTMxMzM2MGM5M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0zPukxv1NMaBGptMKv6rK3D4HdPH/2GuvM/0yfl9gkZ64fZW5BvAgm E+Oiz9KYrgycXhVlfktttPHkn5Y6VnIMjwP2EtisgMnt3hfvyp/p5/htVXHVJLyp OZQwIHUPMYJ5G23alwxHET28LPygJ/UY03RXsxRjc++DOXMpI4s5lpqd5+OLxz2w Svj2QVv6Uk6o7M84XOk3y6I06jRiUNYRIuKyuO9UYnOBqMzETRHXv15Ju5EnQu0n jXnYplZ+4V2D+aeEu9vDw73OCbWzVXRMV2bptZBfvn9Bi+Bd+K8HMVKeVFOjlRPA TV5Hz8WK5XfbzgniGi8TG9FLjWe0X00= -----END CERTIFICATE-----Generated at Tue Apr 29 16:16:24 2025 by rpki-client