$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa File: 9957d7bb-4a48-379a-8699-0af885f6a4a3.roa (raw, json) Hash identifier: OFnq8yl1ZKC6Q2HOzqFfg8usKuu/zRaR8gkQHhNSblc= Subject key identifier: B9:69:54:E4:67:0C:2A:AC:D7:04:DD:BD:20:A8:01:2B:A5:1E:63:73 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B80CCEBD63366BFD62BA00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa Signing time: Thu 24 Apr 2025 11:09:48 +0000 ROA not before: Thu 24 Apr 2025 11:09:48 +0000 ROA not after: Wed 23 Jul 2025 11:09:48 +0000 asID: 12041 IP address blocks: 65.22.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:0c:ce:bd:63:36:6b:fd:62:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:48 2025 GMT Not After : Jul 23 11:09:48 2025 GMT Subject: CN=4c782d19-7eea-44d4-ac70-54769f6ecfff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7d:83:74:d3:e1:29:a2:bb:15:94:8b:3d:3f: ca:3c:24:b5:9a:16:69:1b:63:df:53:a0:4a:3b:33: 25:13:bf:e6:24:51:c0:8b:5c:43:50:91:97:7b:cd: a1:41:4b:4e:30:25:5f:3a:48:02:81:6a:34:a2:96: c9:17:e3:e6:47:07:4a:c0:8c:71:fd:7d:5b:34:97: fe:48:42:98:5e:8e:81:49:ca:9f:96:2f:77:6e:3e: f6:52:b7:b4:e4:41:51:f4:53:75:3b:99:30:af:02: d5:8d:20:b5:29:4b:d7:1d:1d:a4:33:dc:46:1f:c7: e0:19:1c:cb:6e:81:d8:5b:94:f4:0e:5e:ef:fa:6d: 1f:48:60:a6:97:97:d3:fc:db:8f:4f:35:a8:96:02: 14:27:95:9e:68:2b:0d:90:2c:37:9a:50:4f:40:70: fc:3c:88:18:5e:fd:cd:9f:2c:f6:95:40:41:36:ed: a7:88:02:16:f8:dd:de:e1:ed:47:72:18:d2:81:32: 7d:a4:07:6c:55:5b:a3:5c:c4:48:c3:e6:28:28:46: e8:fa:15:0d:4a:df:60:e7:af:18:e4:c0:b1:34:b1: a2:85:5b:2b:2f:eb:6c:4d:34:cf:58:76:19:6b:f8: 81:5e:6f:61:e6:19:cb:89:25:22:05:d5:5f:1a:5a: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:69:54:E4:67:0C:2A:AC:D7:04:DD:BD:20:A8:01:2B:A5:1E:63:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:94:37:7a:db:ea:c3:a5:1e:18:1c:29:1a:77:61:e2:1d:df: ff:27:93:67:a2:1b:8b:22:bb:b9:cf:cc:8b:36:53:f7:34:3e: a3:22:b4:3e:4a:d3:dd:91:28:be:28:d4:9a:b5:6b:82:cd:9a: 47:50:b0:46:ee:05:e8:f8:d2:de:13:46:0a:8a:50:0a:f1:b6: 2a:51:96:77:e0:6d:7a:07:d9:8a:a7:ad:63:a0:c9:c5:02:a3: 16:38:d4:13:e1:95:57:ac:0a:a4:35:b1:46:d5:f3:06:75:5f: 49:fa:25:3f:29:b0:ce:62:d7:bd:c0:37:5b:d7:02:ff:58:46: 13:82:a2:5e:fb:37:3a:41:6e:14:fe:f8:61:06:9b:aa:10:b0: 0e:cd:8f:aa:16:1f:be:b7:4b:e5:2f:7a:69:b6:ae:59:12:82: 39:79:b5:f2:17:b7:c8:93:2c:66:79:b5:d6:70:db:1b:f0:78: 0f:1f:28:a8:11:4c:a2:c6:0c:c7:47:ee:e7:da:a0:fc:f4:54: cd:ef:bd:f0:48:53:ff:e7:34:ee:23:1a:02:43:ef:4f:d5:7a: dd:12:f9:d0:ea:22:c7:23:56:3c:ec:25:e9:66:62:fb:aa:69: 89:dd:0a:64:2b:f8:fc:53:54:39:64:7b:49:0f:8e:03:87:ed: b5:85:0a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuAzOvWM2a/1iugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk0OFoXDTI1MDcyMzExMDk0OFowLzEtMCsGA1UEAxMk NGM3ODJkMTktN2VlYS00NGQ0LWFjNzAtNTQ3NjlmNmVjZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH2DdNPhKaK7FZSLPT/KPCS1mhZpG2PfU6BK OzMlE7/mJFHAi1xDUJGXe82hQUtOMCVfOkgCgWo0opbJF+PmRwdKwIxx/X1bNJf+ SEKYXo6BScqfli93bj72Ure05EFR9FN1O5kwrwLVjSC1KUvXHR2kM9xGH8fgGRzL boHYW5T0Dl7v+m0fSGCml5fT/NuPTzWolgIUJ5WeaCsNkCw3mlBPQHD8PIgYXv3N nyz2lUBBNu2niAIW+N3e4e1HchjSgTJ9pAdsVVujXMRIw+YoKEbo+hUNSt9g568Y 5MCxNLGihVsrL+tsTTTPWHYZa/iBXm9h5hnLiSUiBdVfGlotSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlpVORnDCqs1wTdvSCoASulHmNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTk1N2Q3YmItNGE0OC0z NzlhLTg2OTktMGFmODg1ZjZhNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+UN3rb6sOlHhgcKRp3YeId3/8nk2eiG4siu7nPzIs2U/c0PqMitD5K 092RKL4o1Jq1a4LNmkdQsEbuBej40t4TRgqKUArxtipRlnfgbXoH2YqnrWOgycUC oxY41BPhlVesCqQ1sUbV8wZ1X0n6JT8psM5i173AN1vXAv9YRhOCol77NzpBbhT+ +GEGm6oQsA7Nj6oWH763S+Uvemm2rlkSgjl5tfIXt8iTLGZ5tdZw2xvweA8fKKgR TKLGDMdH7ufaoPz0VM3vvfBIU//nNO4jGgJD70/Vet0S+dDqIscjVjzsJelmYvuq aYndCmQr+PxTVDlke0kPjgOH7bWFCm8= -----END CERTIFICATE-----Generated at Tue Apr 29 15:16:30 2025 by rpki-client