$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9d460612-f5a9-3eb9-b486-a855994f3189.roa File: 9d460612-f5a9-3eb9-b486-a855994f3189.roa (raw, json) Hash identifier: NSo4QlV1Yby7kjUoOqmUIQVh6aVGS6ad2yBdUdTqPIg= Subject key identifier: 3F:E8:93:3D:C5:5B:8B:A7:14:D5:5E:3B:77:CE:D7:D5:A2:B0:D5:AD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B74B7B9C636BDD357BAB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9d460612-f5a9-3eb9-b486-a855994f3189.roa Signing time: Thu 24 Apr 2025 11:08:17 +0000 ROA not before: Thu 24 Apr 2025 11:08:17 +0000 ROA not after: Wed 23 Jul 2025 11:08:17 +0000 asID: 12041 IP address blocks: 65.22.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:4b:7b:9c:63:6b:dd:35:7b:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:17 2025 GMT Not After : Jul 23 11:08:17 2025 GMT Subject: CN=deb21951-b49a-443d-9f70-fcf94b76247b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:fe:2e:93:a9:eb:27:8c:a2:9c:a9:68:e3: f5:e1:01:7f:fc:9f:e1:79:c4:f2:1c:66:e1:a1:47: ed:a8:47:97:d1:76:23:c5:aa:a1:7d:1c:cf:d5:15: 5f:3a:05:d8:6e:bf:d8:f7:c3:37:9e:ff:7a:b6:25: d5:68:07:40:cd:99:dd:d9:29:ce:d0:d5:5a:34:d8: 36:f0:43:c0:ad:39:a1:fe:0f:e0:48:c1:99:b2:15: 4f:a7:37:44:0f:24:27:21:8f:dc:df:79:77:b1:cb: 21:d7:5c:cb:e6:c5:46:59:9a:68:f7:87:cc:d4:57: 92:97:eb:81:bf:48:9e:f3:a2:95:66:16:2d:40:09: 98:83:f9:6a:c5:b5:a3:44:e8:2d:20:16:a2:e9:de: 6b:56:bd:57:08:d7:1a:6c:cf:74:1a:7c:34:71:dc: 6b:68:4d:61:83:b6:2a:a7:70:58:87:09:38:30:d3: 2c:3c:80:42:78:0b:c8:ec:42:cc:d8:75:f0:9b:91: f3:b7:aa:91:33:cb:cf:03:5a:f6:e0:c5:cb:57:ff: 8f:a6:60:eb:f0:34:e0:29:c9:19:7f:7d:f3:38:bc: 3c:27:a2:86:e3:02:3d:7e:38:7e:b3:a8:60:ac:db: 0e:b4:9c:08:c3:1d:da:ae:02:dd:87:69:31:06:4f: 96:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E8:93:3D:C5:5B:8B:A7:14:D5:5E:3B:77:CE:D7:D5:A2:B0:D5:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9d460612-f5a9-3eb9-b486-a855994f3189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0b:8c:7d:72:f9:65:61:00:c3:4f:f7:f7:5c:bf:cd:3c:0d: 7b:cc:f8:36:7e:ff:5c:b7:19:69:68:bd:e0:0e:6a:2c:82:4e: 71:8a:d0:7b:c7:1e:2c:2b:99:c2:5b:90:f4:68:7e:2c:e7:76: d3:ee:db:02:8b:7e:3e:57:ef:da:ac:6b:d9:28:7d:26:df:dc: c4:80:6f:aa:c2:85:8d:33:c3:41:23:04:6b:84:32:43:cd:b0: fd:91:2c:bb:df:e6:a1:04:05:3b:4b:a8:a9:75:0a:75:00:ac: 42:30:a7:79:fa:2d:91:a8:53:5e:80:98:ae:3a:b2:1f:03:33: bd:aa:37:a2:32:67:50:c9:19:80:a8:d1:89:f9:9f:1c:74:0c: 30:ce:ed:7f:5f:d1:4f:50:db:57:eb:4b:45:1a:92:0d:f3:99: 5d:7b:2c:0f:a1:2a:fd:76:a6:11:94:41:8b:4c:94:05:4d:9e: e1:36:16:3f:9a:17:9f:68:ac:22:82:30:b0:7f:a9:dd:3b:1e: fe:19:90:62:54:fe:3e:dc:2a:12:78:6c:cd:b1:53:c8:6c:f9: 27:70:ab:f0:d3:e2:5d:df:d6:db:f3:1f:0e:19:10:8a:f5:a7: 69:c6:16:e3:9d:52:6b:2c:53:6e:5c:50:4c:d5:02:67:cc:ba: ea:d4:81:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht0t7nGNr3TV7q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgxN1oXDTI1MDcyMzExMDgxN1owLzEtMCsGA1UEAxMk ZGViMjE5NTEtYjQ5YS00NDNkLTlmNzAtZmNmOTRiNzYyNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4P+LpOp6yeMopypaOP14QF//J/hecTyHGbh oUftqEeX0XYjxaqhfRzP1RVfOgXYbr/Y98M3nv96tiXVaAdAzZnd2SnO0NVaNNg2 8EPArTmh/g/gSMGZshVPpzdEDyQnIY/c33l3scsh11zL5sVGWZpo94fM1FeSl+uB v0ie86KVZhYtQAmYg/lqxbWjROgtIBai6d5rVr1XCNcabM90Gnw0cdxraE1hg7Yq p3BYhwk4MNMsPIBCeAvI7ELM2HXwm5Hzt6qRM8vPA1r24MXLV/+PpmDr8DTgKckZ f33zOLw8J6KG4wI9fjh+s6hgrNsOtJwIwx3argLdh2kxBk+W5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/okz3FW4unFNVeO3fO19WisNWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWQ0NjA2MTItZjVhOS0z ZWI5LWI0ODYtYTg1NTk5NGYzMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEALjH1y+WVhAMNP9/dcv808DXvM+DZ+/1y3GWloveAOaiyCTnGK0HvH HiwrmcJbkPRofizndtPu2wKLfj5X79qsa9kofSbf3MSAb6rChY0zw0EjBGuEMkPN sP2RLLvf5qEEBTtLqKl1CnUArEIwp3n6LZGoU16AmK46sh8DM72qN6IyZ1DJGYCo 0Yn5nxx0DDDO7X9f0U9Q21frS0Uakg3zmV17LA+hKv12phGUQYtMlAVNnuE2Fj+a F59orCKCMLB/qd07Hv4ZkGJU/j7cKhJ4bM2xU8hs+Sdwq/DT4l3f1tvzHw4ZEIr1 p2nGFuOdUmssU25cUEzVAmfMuurUgZI= -----END CERTIFICATE-----Generated at Wed Apr 30 00:18:11 2025 by rpki-client