$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/97070e95-056b-391c-865d-f8d9da9eb2df.roa File: 97070e95-056b-391c-865d-f8d9da9eb2df.roa (raw, json) Hash identifier: CcSvzDkH93MI/AyayzWlB3PGrpD44S0INiyqRrfkm+8= Subject key identifier: B5:85:65:D4:C5:CE:AE:9E:2E:64:23:52:75:51:F4:D8:C3:01:DE:70 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A211DB7BE2B66606CB02D440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/97070e95-056b-391c-865d-f8d9da9eb2df.roa Signing time: Thu 24 Apr 2025 14:10:45 +0000 ROA not before: Thu 24 Apr 2025 14:10:45 +0000 ROA not after: Wed 23 Jul 2025 14:10:45 +0000 asID: 207266 IP address blocks: 65.22.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:db:7b:e2:b6:66:06:cb:02:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:10:45 2025 GMT Not After : Jul 23 14:10:45 2025 GMT Subject: CN=2b26abbe-ae92-4cd5-a55c-4e287b57263a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7a:6e:4a:70:11:d9:da:f9:66:bc:40:d2:40: dc:2b:70:7c:5c:86:92:4c:95:bf:7e:6d:2b:40:19: f9:d0:d2:8a:e6:ce:1d:34:8d:bb:18:63:29:85:e6: e7:4f:f3:81:81:d3:4a:d3:d7:f2:39:99:16:1e:90: 98:f6:98:87:ca:28:d6:31:a6:6a:57:b3:f0:67:84: 2e:53:3b:2e:79:69:18:fb:2b:7e:4f:78:f4:f8:d3: 19:bf:e2:44:c8:7b:8f:d6:b4:e5:3d:36:00:24:d2: 4c:d1:81:84:bc:33:00:21:f6:c7:c6:3e:72:2e:18: 6e:7d:fe:d2:2c:f0:04:36:c1:ce:33:20:88:dc:f3: 83:aa:10:af:42:c4:ff:7b:2a:b0:e9:75:d2:07:44: 22:76:ff:b8:78:cf:43:1b:03:60:91:6d:97:ce:3b: 45:be:47:1b:f9:cf:8d:6e:3d:b2:42:b2:84:bc:49: 92:94:bf:0f:84:3d:f2:6c:23:0a:27:6f:99:02:e0: 40:b4:78:f6:88:29:5b:d3:ab:e4:22:98:50:9c:d4: d1:80:af:e7:8b:cd:33:9d:71:c7:cd:7f:f1:eb:b3: 80:a5:67:53:ea:ea:f4:3b:92:d2:93:4d:e5:02:48: 08:f0:5b:6a:88:cd:2f:af:52:3e:6c:c2:22:ea:0f: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:85:65:D4:C5:CE:AE:9E:2E:64:23:52:75:51:F4:D8:C3:01:DE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/97070e95-056b-391c-865d-f8d9da9eb2df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:47:92:e3:86:dd:1e:fa:5b:9f:d2:e8:e2:15:9a:05:c9:9c: a3:1d:bb:63:02:d4:45:1f:b2:dd:c9:0e:1d:66:da:b5:13:44: 89:ff:86:64:ba:5f:2b:d5:75:cd:e5:5f:ef:8f:ad:52:e9:54: a6:8d:34:46:51:ff:b9:fb:31:98:bf:dc:94:26:bd:c8:87:50: b4:85:a2:fe:f3:6f:80:c3:08:a5:4f:6f:96:92:11:f9:73:34: 34:a0:32:91:c4:70:82:26:08:77:dc:eb:57:29:fc:57:13:6d: e4:88:bc:05:78:87:4a:fd:7c:ba:8c:dc:84:e2:d7:36:4b:3f: 09:16:17:59:3d:e7:ca:7d:9b:f3:ec:43:c3:45:80:2d:e5:33: 48:1f:6e:dd:fd:79:cb:68:a3:3e:a7:e8:7b:d8:c3:b0:02:12: 63:d8:91:b7:a2:e6:6d:45:e4:70:1b:70:37:a6:67:89:d7:9d: 7a:94:cf:94:82:0b:7c:3a:1c:57:8e:83:56:15:4c:e5:e6:d0: a7:4c:79:d4:5d:92:c2:f5:db:bb:13:dc:14:23:28:45:55:37: ab:15:03:08:5e:44:4b:ed:83:ec:ac:0a:9f:6b:ff:ea:d3:29: f3:8b:50:ab:92:bc:63:51:20:e9:3e:1e:c0:18:d1:13:10:00: a2:ff:d5:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEdt74rZmBssC1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTA0NVoXDTI1MDcyMzE0MTA0NVowLzEtMCsGA1UEAxMk MmIyNmFiYmUtYWU5Mi00Y2Q1LWE1NWMtNGUyODdiNTcyNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknpuSnAR2dr5ZrxA0kDcK3B8XIaSTJW/fm0r QBn50NKK5s4dNI27GGMphebnT/OBgdNK09fyOZkWHpCY9piHyijWMaZqV7PwZ4Qu UzsueWkY+yt+T3j0+NMZv+JEyHuP1rTlPTYAJNJM0YGEvDMAIfbHxj5yLhhuff7S LPAENsHOMyCI3PODqhCvQsT/eyqw6XXSB0Qidv+4eM9DGwNgkW2XzjtFvkcb+c+N bj2yQrKEvEmSlL8PhD3ybCMKJ2+ZAuBAtHj2iClb06vkIphQnNTRgK/ni80znXHH zX/x67OApWdT6ur0O5LSk03lAkgI8FtqiM0vr1I+bMIi6g+4rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWFZdTFzq6eLmQjUnVR9NjDAd5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTcwNzBlOTUtMDU2Yi0z OTFjLTg2NWQtZjhkOWRhOWViMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdHkuOG3R76W5/S6OIVmgXJnKMdu2MC1EUfst3JDh1m2rUTRIn/hmS6 XyvVdc3lX++PrVLpVKaNNEZR/7n7MZi/3JQmvciHULSFov7zb4DDCKVPb5aSEflz NDSgMpHEcIImCHfc61cp/FcTbeSIvAV4h0r9fLqM3ITi1zZLPwkWF1k958p9m/Ps Q8NFgC3lM0gfbt39ectooz6n6HvYw7ACEmPYkbei5m1F5HAbcDemZ4nXnXqUz5SC C3w6HFeOg1YVTOXm0KdMedRdksL127sT3BQjKEVVN6sVAwheREvtg+ysCp9r/+rT KfOLUKuSvGNRIOk+HsAY0RMQAKL/1fw= -----END CERTIFICATE-----Generated at Tue Apr 29 22:22:50 2025 by rpki-client