$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9b1612ac-f530-3a97-bc6a-5a638ded7f28.roa File: 9b1612ac-f530-3a97-bc6a-5a638ded7f28.roa (raw, json) Hash identifier: UcMQ9K1fZbSRlZUqSu6EHLzbtCckJ6RCrdfQHd988fU= Subject key identifier: 5C:E5:0C:67:94:B6:D6:D6:0C:64:97:07:D2:B5:53:2E:76:CE:48:15 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7818C02A13A33F5594B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9b1612ac-f530-3a97-bc6a-5a638ded7f28.roa Signing time: Thu 24 Apr 2025 11:08:43 +0000 ROA not before: Thu 24 Apr 2025 11:08:43 +0000 ROA not after: Wed 23 Jul 2025 11:08:43 +0000 asID: 12041 IP address blocks: 65.22.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:81:8c:02:a1:3a:33:f5:59:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:43 2025 GMT Not After : Jul 23 11:08:43 2025 GMT Subject: CN=3121725b-c6b6-40d9-b1da-817f1331b839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:e0:d1:a0:7a:0f:c6:64:5a:d5:a5:da:c7: 37:15:a4:d9:df:19:30:df:52:72:a2:f9:50:3b:9c: 21:10:aa:03:89:d5:63:6e:82:03:dd:6a:55:fe:8a: 65:f1:07:a8:b6:57:d5:fb:33:a8:25:10:7f:31:f9: 75:04:03:ea:cd:37:41:ac:de:41:3a:19:9d:aa:7d: 9d:cd:1d:98:84:11:79:bf:cf:5f:b6:86:96:d9:c0: dd:fe:69:fb:65:27:f0:4c:cb:ff:f7:b2:35:a9:09: 14:fc:6c:a3:36:ac:c3:76:60:a2:f8:bc:8b:8f:22: 7b:f3:df:ac:52:79:61:54:c1:d2:db:32:26:21:d5: 84:b4:4c:cd:47:4f:65:f3:4c:63:08:e0:dc:02:00: 23:65:6f:7e:6f:c8:c1:f6:98:90:a2:61:b6:e2:ac: f4:cc:39:75:9b:11:42:0e:45:d8:15:27:b3:5d:b6: 6d:da:02:17:82:43:6f:6b:7c:6f:91:23:8d:fc:d5: e2:62:d9:9d:47:14:0f:d2:ef:2b:af:14:c7:91:86: 89:df:99:42:50:71:0d:4a:21:46:09:28:ea:e8:c4: 4d:4d:7b:4e:c1:c6:3d:05:15:82:c4:5d:db:b7:8d: 00:38:62:30:24:ba:76:fd:be:51:9c:cc:4c:b2:8f: e4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:0C:67:94:B6:D6:D6:0C:64:97:07:D2:B5:53:2E:76:CE:48:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9b1612ac-f530-3a97-bc6a-5a638ded7f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:08:cb:3d:7e:03:85:31:91:3f:b5:94:81:9c:c1:b3:f0:87: 23:5f:60:46:db:3f:d5:cf:7d:64:32:51:94:51:ef:7d:a1:20: f6:d2:be:d3:bb:5e:d4:9b:68:80:3d:f5:4c:05:31:2c:19:09: b8:53:9d:6d:40:68:5c:cb:a7:84:3d:8d:88:57:fb:47:e7:6c: e3:5c:0b:d1:0c:61:b9:09:aa:88:fc:4b:c1:ac:06:7b:77:94: 0e:00:2b:5e:c8:b2:cc:4e:7f:13:37:f7:fd:e8:16:19:e4:0f: 6a:b2:6a:e3:ec:03:7c:5b:b1:54:c0:78:2b:d2:99:6c:f0:a6: 96:44:3f:c1:a5:60:f9:ed:a3:a4:68:56:53:28:11:82:4e:9f: e4:a8:8c:3b:94:04:c0:ba:91:95:aa:ef:9e:4b:14:f5:fe:42: f3:34:b1:60:12:5f:a3:7a:9d:cf:48:82:2a:c9:ee:d4:ac:1b: 80:e5:50:84:29:a9:c0:5d:bc:42:9f:20:45:db:10:21:9e:14: c5:16:0d:cd:34:b1:19:0c:82:07:0e:cb:95:ed:da:33:91:83: b3:23:8c:6d:21:6a:be:79:03:66:d8:70:86:6d:57:c6:43:68: 49:82:0e:f0:31:b8:d3:25:e5:b4:05:30:b9:56:47:8a:b5:76: d9:cd:e1:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht4GMAqE6M/VZS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg0M1oXDTI1MDcyMzExMDg0M1owLzEtMCsGA1UEAxMk MzEyMTcyNWItYzZiNi00MGQ5LWIxZGEtODE3ZjEzMzFiODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbLg0aB6D8ZkWtWl2sc3FaTZ3xkw31JyovlQ O5whEKoDidVjboID3WpV/opl8QeotlfV+zOoJRB/Mfl1BAPqzTdBrN5BOhmdqn2d zR2YhBF5v89ftoaW2cDd/mn7ZSfwTMv/97I1qQkU/GyjNqzDdmCi+LyLjyJ789+s UnlhVMHS2zImIdWEtEzNR09l80xjCODcAgAjZW9+b8jB9piQomG24qz0zDl1mxFC DkXYFSezXbZt2gIXgkNva3xvkSON/NXiYtmdRxQP0u8rrxTHkYaJ35lCUHENSiFG CSjq6MRNTXtOwcY9BRWCxF3bt40AOGIwJLp2/b5RnMxMso/kGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzlDGeUttbWDGSXB9K1Uy52zkgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWIxNjEyYWMtZjUzMC0z YTk3LWJjNmEtNWE2MzhkZWQ3ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8Iyz1+A4UxkT+1lIGcwbPwhyNfYEbbP9XPfWQyUZRR732hIPbSvtO7 XtSbaIA99UwFMSwZCbhTnW1AaFzLp4Q9jYhX+0fnbONcC9EMYbkJqoj8S8GsBnt3 lA4AK17IssxOfxM39/3oFhnkD2qyauPsA3xbsVTAeCvSmWzwppZEP8GlYPnto6Ro VlMoEYJOn+SojDuUBMC6kZWq755LFPX+QvM0sWASX6N6nc9IgirJ7tSsG4DlUIQp qcBdvEKfIEXbECGeFMUWDc00sRkMggcOy5Xt2jORg7MjjG0har55A2bYcIZtV8ZD aEmCDvAxuNMl5bQFMLlWR4q1dtnN4SM= -----END CERTIFICATE-----Generated at Tue Apr 29 10:07:53 2025 by rpki-client