$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a056d9b6-3b51-3fc1-b447-9c89809b1498.roa File: a056d9b6-3b51-3fc1-b447-9c89809b1498.roa (raw, json) Hash identifier: turUdfLdCOWJwV9cJHah/l9L9VaZj4El0o1+sTwiM5Q= Subject key identifier: 80:88:46:1A:4B:1F:61:D2:29:9C:B7:97:21:39:5A:FC:38:A5:72:6F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B855349D7070D6552BD5C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a056d9b6-3b51-3fc1-b447-9c89809b1498.roa Signing time: Thu 24 Apr 2025 11:10:23 +0000 ROA not before: Thu 24 Apr 2025 11:10:23 +0000 ROA not after: Wed 23 Jul 2025 11:10:23 +0000 asID: 12041 IP address blocks: 65.22.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:55:34:9d:70:70:d6:55:2b:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:23 2025 GMT Not After : Jul 23 11:10:23 2025 GMT Subject: CN=80c5cd3b-5c56-48f2-8bde-6b240b04e7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:81:aa:64:6e:21:c5:bd:07:5e:31:f2:18: b0:f2:80:3b:4f:2f:f4:a3:9e:97:8f:6b:e8:22:8e: 6b:58:30:83:af:9d:e8:4d:21:08:41:b1:44:7a:76: ed:db:63:32:7c:a4:01:77:36:83:8c:ee:a7:94:ce: e5:a6:98:4d:50:44:5d:63:27:d0:c8:b2:34:89:eb: 46:74:0b:33:8c:ef:04:9c:2d:ff:fa:a3:13:a6:70: c6:b1:e6:3b:b5:92:b1:75:c7:4f:37:1a:46:a4:3f: 8b:d9:74:91:c3:20:04:97:26:57:2e:a8:75:4f:04: c9:51:9f:9e:c2:ff:86:42:8b:53:11:d5:f9:c3:96: 6b:40:86:23:01:5a:be:e4:91:14:22:3a:22:13:94: 38:81:72:48:51:69:58:18:73:1d:1b:e9:79:c9:f3: 17:9a:dc:47:7e:01:b2:b1:b1:90:b5:67:9c:86:77: 0c:69:a0:c9:e3:19:67:22:29:d7:6c:0c:10:c9:6c: fc:64:65:72:cd:59:15:30:63:03:47:7c:0b:dc:4b: e2:e6:13:35:a4:a7:ef:ce:15:54:ca:8d:aa:09:29: cc:c2:c4:29:08:ec:72:d3:ba:b4:3a:4d:50:86:06: f1:e4:5f:b7:3e:c4:8a:a3:c6:76:77:22:74:8c:b8: f7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:88:46:1A:4B:1F:61:D2:29:9C:B7:97:21:39:5A:FC:38:A5:72:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a056d9b6-3b51-3fc1-b447-9c89809b1498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:db:4b:b6:cb:14:c0:26:66:70:c9:67:b0:f9:4c:11:3e:da: 29:e2:30:05:2a:75:6b:3d:5a:d5:73:14:30:93:41:ae:8a:52: 4c:00:31:d3:c8:9c:77:ff:d8:55:90:7b:82:06:df:6a:7f:f2: fe:60:e9:31:3c:71:a5:6e:6b:60:ee:bf:be:e0:41:c2:c8:ff: 64:1f:10:9f:e7:ea:09:0c:ef:cd:af:d9:ed:18:33:84:ba:3c: ae:03:d3:20:a0:28:bd:5a:92:e0:94:61:99:69:db:a1:ed:5f: c4:6d:b2:15:2a:db:a3:64:c0:cf:90:5a:eb:1a:e2:6a:fa:57: b4:08:0a:39:50:76:19:05:7c:81:8a:3c:5e:fd:bc:19:3b:c9: ce:56:b6:b8:28:a8:47:48:fb:ab:a1:2f:ac:0a:05:0a:86:f5: 44:5e:d5:34:3f:18:e3:5d:69:4f:c9:9d:6b:30:05:b5:02:d0: fc:2a:09:ce:85:da:a9:17:bf:27:b3:e5:4f:e5:ea:ad:99:4e: 1a:f8:89:e7:ea:61:00:56:16:98:77:e6:a6:87:7b:1b:ba:1f: a0:b0:6d:63:8b:c4:ad:ab:1f:59:64:a9:03:01:1a:c7:05:93: 25:8b:92:58:dc:83:2a:4f:98:9b:b0:48:0f:a6:94:22:c1:b6: 76:e7:93:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuFU0nXBw1lUr1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAyM1oXDTI1MDcyMzExMTAyM1owLzEtMCsGA1UEAxMk ODBjNWNkM2ItNWM1Ni00OGYyLThiZGUtNmIyNDBiMDRlN2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeaBqmRuIcW9B14x8hiw8oA7Ty/0o56Xj2vo Io5rWDCDr53oTSEIQbFEenbt22MyfKQBdzaDjO6nlM7lpphNUERdYyfQyLI0ietG dAszjO8EnC3/+qMTpnDGseY7tZKxdcdPNxpGpD+L2XSRwyAElyZXLqh1TwTJUZ+e wv+GQotTEdX5w5ZrQIYjAVq+5JEUIjoiE5Q4gXJIUWlYGHMdG+l5yfMXmtxHfgGy sbGQtWechncMaaDJ4xlnIinXbAwQyWz8ZGVyzVkVMGMDR3wL3Evi5hM1pKfvzhVU yo2qCSnMwsQpCOxy07q0Ok1Qhgbx5F+3PsSKo8Z2dyJ0jLj3DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICIRhpLH2HSKZy3lyE5Wvw4pXJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTA1NmQ5YjYtM2I1MS0z ZmMxLWI0NDctOWM4OTgwOWIxNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDbS7bLFMAmZnDJZ7D5TBE+2iniMAUqdWs9WtVzFDCTQa6KUkwAMdPI nHf/2FWQe4IG32p/8v5g6TE8caVua2Duv77gQcLI/2QfEJ/n6gkM782v2e0YM4S6 PK4D0yCgKL1akuCUYZlp26HtX8RtshUq26NkwM+QWusa4mr6V7QICjlQdhkFfIGK PF79vBk7yc5WtrgoqEdI+6uhL6wKBQqG9URe1TQ/GONdaU/JnWswBbUC0PwqCc6F 2qkXvyez5U/l6q2ZThr4iefqYQBWFph35qaHexu6H6CwbWOLxK2rH1lkqQMBGscF kyWLkljcgypPmJuwSA+mlCLBtnbnk7U= -----END CERTIFICATE-----Generated at Wed Apr 30 00:11:17 2025 by rpki-client