$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa File: 9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa (raw, json) Hash identifier: CvJrsJuRn6u8KlfhbO2/ofI04eCjQ5g9T/jErl71tBI= Subject key identifier: 9B:35:B1:F8:1D:57:82:E3:59:19:11:80:8E:41:39:7C:74:00:DD:01 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B83CE29854E77046434C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa Signing time: Thu 24 Apr 2025 11:10:11 +0000 ROA not before: Thu 24 Apr 2025 11:10:11 +0000 ROA not after: Wed 23 Jul 2025 11:10:11 +0000 asID: 12041 IP address blocks: 65.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:3c:e2:98:54:e7:70:46:43:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:11 2025 GMT Not After : Jul 23 11:10:11 2025 GMT Subject: CN=6ed04818-00dd-4ce0-a53c-5195085d5b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:8c:8f:97:03:fa:9d:66:44:0a:4f:9b:7c: 37:3b:06:c7:3f:88:bc:9f:46:52:96:d4:c7:d5:8e: 42:11:07:a7:f0:75:3b:7e:0b:99:ff:fb:9d:27:41: af:c0:e1:01:19:39:ad:83:98:b5:89:06:5e:14:3d: 0b:94:dd:1d:be:f2:ab:80:8d:17:a8:8a:ff:76:30: 84:87:d9:88:5f:23:29:45:a0:ba:d0:a2:9c:d6:89: d8:9c:62:d4:24:1f:c5:1a:eb:16:db:87:a1:6f:c6: f9:00:38:8b:81:4e:21:91:a1:3b:01:a4:16:e4:f1: 70:b6:12:0a:1b:ed:41:ea:d2:53:88:b6:b2:dd:ff: 83:7d:ae:2f:a0:ab:a5:63:e8:45:f9:bd:1f:f0:0b: 58:6b:5a:10:16:7e:27:17:45:65:f1:e1:fc:3c:67: c7:dd:f4:82:cb:7d:2f:7d:25:ad:0d:ee:f0:76:6b: 14:7c:b4:e6:fd:c2:5b:32:aa:1e:ed:58:a4:31:31: d3:0e:56:33:45:d5:8e:83:24:bc:76:9a:a4:00:b0: 39:8f:99:ca:34:a5:9f:1d:f6:bc:c5:12:c4:cb:7d: d9:fd:05:f8:1b:35:90:1f:6f:99:fb:44:80:23:51: d2:40:d1:4e:db:0d:ce:d6:de:8d:ed:03:a9:e2:1b: 62:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:35:B1:F8:1D:57:82:E3:59:19:11:80:8E:41:39:7C:74:00:DD:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e4:a7:aa:cd:81:e1:f6:91:22:3b:4e:23:49:ab:6b:28:26: 4c:94:7a:2c:eb:69:62:86:e1:31:2c:af:cd:f0:46:6e:10:25: c3:e7:c4:aa:6e:7a:77:d0:e7:b1:b8:ae:37:ac:03:fa:4f:d5: 7a:15:19:df:e5:a5:4c:c3:a3:d1:41:9d:92:69:c6:20:6b:d8: 58:a1:f2:ed:63:0e:b8:27:10:46:9f:bd:3e:38:6a:23:5d:a1: af:a0:8f:08:55:42:7b:61:95:da:46:27:3a:a4:35:17:41:a0: ab:72:92:4f:99:3c:f5:4f:24:6b:fb:8b:bb:cf:eb:34:4c:77: 71:a8:55:f8:ae:02:5d:4f:c1:3f:2b:11:ff:11:8c:2d:cf:13: e3:8f:b1:94:4e:01:c7:e1:10:41:d7:fb:aa:8a:a8:27:30:8f: 15:71:90:e3:48:14:9a:c4:71:54:9a:7e:3b:b7:bf:9a:a3:4f: e7:bf:3f:b3:3c:54:9f:a4:65:93:85:af:40:db:76:d4:bb:6d: df:f9:0b:12:70:73:d8:99:06:37:fb:d9:1c:8d:57:f0:33:93: bc:fb:80:5a:14:06:f3:78:e8:34:76:9e:53:0e:c7:cd:21:02: 62:72:d5:4f:e0:60:67:5e:ae:93:c7:25:fa:a7:2e:25:a7:72: 13:b1:a7:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuDzimFTncEZDTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAxMVoXDTI1MDcyMzExMTAxMVowLzEtMCsGA1UEAxMk NmVkMDQ4MTgtMDBkZC00Y2UwLWE1M2MtNTE5NTA4NWQ1YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPyMj5cD+p1mRApPm3w3OwbHP4i8n0ZSltTH 1Y5CEQen8HU7fguZ//udJ0GvwOEBGTmtg5i1iQZeFD0LlN0dvvKrgI0XqIr/djCE h9mIXyMpRaC60KKc1onYnGLUJB/FGusW24ehb8b5ADiLgU4hkaE7AaQW5PFwthIK G+1B6tJTiLay3f+Dfa4voKulY+hF+b0f8AtYa1oQFn4nF0Vl8eH8PGfH3fSCy30v fSWtDe7wdmsUfLTm/cJbMqoe7VikMTHTDlYzRdWOgyS8dpqkALA5j5nKNKWfHfa8 xRLEy33Z/QX4GzWQH2+Z+0SAI1HSQNFO2w3O1t6N7QOp4hticwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJs1sfgdV4LjWRkRgI5BOXx0AN0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWYzYmM4ZTItNTZhMy0z MTg3LWIzZmMtOTE1OTI1MmNkYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrkp6rNgeH2kSI7TiNJq2soJkyUeizraWKG4TEsr83wRm4QJcPnxKpu enfQ57G4rjesA/pP1XoVGd/lpUzDo9FBnZJpxiBr2Fih8u1jDrgnEEafvT44aiNd oa+gjwhVQnthldpGJzqkNRdBoKtykk+ZPPVPJGv7i7vP6zRMd3GoVfiuAl1PwT8r Ef8RjC3PE+OPsZROAcfhEEHX+6qKqCcwjxVxkONIFJrEcVSafju3v5qjT+e/P7M8 VJ+kZZOFr0DbdtS7bd/5CxJwc9iZBjf72RyNV/Azk7z7gFoUBvN46DR2nlMOx80h AmJy1U/gYGderpPHJfqnLiWnchOxpz4= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:32 2025 by rpki-client