$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa File: a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa (raw, json) Hash identifier: 4BeAZCXl7JtIhL9KnBnGp9rqZJ+3y1yvxxUI2hAz5G4= Subject key identifier: 6A:84:00:74:A3:BF:CD:AA:D7:25:2F:56:52:A5:5B:2B:7E:38:CE:D0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B428A2A75CD06081B7AB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa Signing time: Thu 24 Apr 2025 11:01:58 +0000 ROA not before: Thu 24 Apr 2025 11:01:58 +0000 ROA not after: Wed 23 Jul 2025 11:01:58 +0000 asID: 12041 IP address blocks: 65.22.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:28:a2:a7:5c:d0:60:81:b7:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:01:58 2025 GMT Not After : Jul 23 11:01:58 2025 GMT Subject: CN=2faecbf8-5193-47dc-956b-267add962ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:ed:98:9f:0d:fd:ac:8b:8e:50:c8:1e:79: 9e:44:f0:9b:d3:91:2f:b5:93:b3:74:e5:ba:4c:26: 7e:c4:59:bb:cc:d6:cb:9a:1a:bd:83:77:3c:1b:8f: b2:33:2a:fe:98:16:45:18:3b:80:8a:0f:03:60:20: 80:ec:68:52:9a:3e:ca:8c:c0:fb:02:8c:ac:55:11: 68:f1:2b:5b:90:56:ed:30:76:f2:f1:fd:e1:f1:51: 9a:23:b8:fb:2a:c1:ce:66:6f:30:93:c0:69:e3:57: b9:a0:a7:ce:a5:66:1e:88:86:4c:68:cd:e6:c1:ad: f7:f5:c3:7a:72:15:d3:23:a6:9a:6c:99:7f:18:ca: f4:33:91:3b:5d:a1:59:86:2e:13:96:d7:45:ea:b2: c5:26:bc:8f:ff:fa:54:fa:0b:36:47:a2:72:3c:c5: b4:1d:3f:b6:42:a3:eb:48:5d:8f:b1:7c:75:3d:f8: 73:82:75:21:4e:4a:a7:38:23:0d:f2:30:a7:07:6c: 3b:9e:3a:1c:58:2f:af:02:d3:38:1d:73:d5:b8:b9: e0:7d:9a:15:43:33:ed:2b:be:f2:2f:c7:b8:cd:45: 59:68:64:da:40:f9:2c:b1:36:59:50:4e:24:16:37: b3:8c:1f:0e:f1:4d:51:f1:35:b3:e7:30:97:25:2c: 96:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:84:00:74:A3:BF:CD:AA:D7:25:2F:56:52:A5:5B:2B:7E:38:CE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c7:c6:a6:66:6c:e8:a3:f4:f2:4c:9c:74:41:ee:1e:ae:31: 5d:1b:74:72:9a:d8:84:1d:51:30:b4:37:d3:8f:2c:8e:45:ba: 92:12:e6:d1:1e:83:14:48:64:97:fd:9b:13:80:5b:f3:fa:ea: 39:18:d9:ae:c1:9b:4e:b6:34:2e:57:34:2f:1c:19:01:7b:bf: 47:5f:13:f3:cb:7c:a4:31:06:3b:7a:a7:40:74:c3:92:15:45: 09:a8:15:05:e2:b2:94:b3:23:fd:88:44:13:37:9d:a6:a1:6f: 2a:de:b5:c8:ec:39:21:c3:04:29:82:33:b9:5d:c8:61:cb:18: 51:77:d8:fb:44:b8:0c:80:a2:8f:92:3a:b3:d8:68:3f:bc:27: 96:8c:b5:71:c1:d2:07:63:1b:5e:95:c2:60:da:36:45:a8:d4: f1:c7:e5:2a:80:e2:66:37:12:60:30:da:ec:df:d6:ea:85:8d: d1:9e:d2:b9:97:8b:ea:f8:52:6f:89:09:e4:c9:20:6c:10:40: 05:0c:3a:ee:d2:46:01:3f:94:a7:34:1b:54:2f:a1:bf:23:1f: f7:75:71:5f:75:f8:7d:34:17:dd:fd:22:fc:4c:31:65:7d:2e: 28:57:b9:82:28:25:2f:81:e3:d4:80:a3:ab:73:6c:7d:d4:58: dd:3b:f4:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtCiip1zQYIG3q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDE1OFoXDTI1MDcyMzExMDE1OFowLzEtMCsGA1UEAxMk MmZhZWNiZjgtNTE5My00N2RjLTk1NmItMjY3YWRkOTYyZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNntmJ8N/ayLjlDIHnmeRPCb05EvtZOzdOW6 TCZ+xFm7zNbLmhq9g3c8G4+yMyr+mBZFGDuAig8DYCCA7GhSmj7KjMD7AoysVRFo 8StbkFbtMHby8f3h8VGaI7j7KsHOZm8wk8Bp41e5oKfOpWYeiIZMaM3mwa339cN6 chXTI6aabJl/GMr0M5E7XaFZhi4TltdF6rLFJryP//pU+gs2R6JyPMW0HT+2QqPr SF2PsXx1PfhzgnUhTkqnOCMN8jCnB2w7njocWC+vAtM4HXPVuLngfZoVQzPtK77y L8e4zUVZaGTaQPkssTZZUE4kFjezjB8O8U1R8TWz5zCXJSyWLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqEAHSjv82q1yUvVlKlWyt+OM7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTFhZTFhNzctN2Y5OS0z YzJmLWE3ZjMtY2VlMTdjOTcwNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3HxqZmbOij9PJMnHRB7h6uMV0bdHKa2IQdUTC0N9OPLI5FupIS5tEe gxRIZJf9mxOAW/P66jkY2a7Bm062NC5XNC8cGQF7v0dfE/PLfKQxBjt6p0B0w5IV RQmoFQXispSzI/2IRBM3naahbyretcjsOSHDBCmCM7ldyGHLGFF32PtEuAyAoo+S OrPYaD+8J5aMtXHB0gdjG16VwmDaNkWo1PHH5SqA4mY3EmAw2uzf1uqFjdGe0rmX i+r4Um+JCeTJIGwQQAUMOu7SRgE/lKc0G1Qvob8jH/d1cV91+H00F939IvxMMWV9 LihXuYIoJS+B49SAo6tzbH3UWN079HQ= -----END CERTIFICATE-----Generated at Sun Jun 15 12:03:07 2025 by rpki-client