$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa File: a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa (raw, json) Hash identifier: YRATgqxQ+xKJTueUwOj7h9+zrh9urmDlt/gQVQzOpJc= Subject key identifier: C3:4E:64:84:97:19:42:24:CD:20:61:EA:DC:2A:7C:F3:C1:88:1B:43 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A211CF189D57A76A7861BA80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa Signing time: Thu 24 Apr 2025 14:10:40 +0000 ROA not before: Thu 24 Apr 2025 14:10:40 +0000 ROA not after: Wed 23 Jul 2025 14:10:40 +0000 asID: 207266 IP address blocks: 65.22.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:cf:18:9d:57:a7:6a:78:61:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:10:40 2025 GMT Not After : Jul 23 14:10:40 2025 GMT Subject: CN=2b269730-fa06-4a03-84ff-238259d00ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:ee:89:dc:c6:8f:81:36:3a:7c:a8:78:4c: 5e:52:c7:22:29:57:46:9b:a5:70:64:f0:c1:d3:9e: de:81:d0:76:63:7c:68:ff:e9:cb:a2:52:e7:42:d4: 4a:7d:f2:66:aa:df:a5:1f:7b:38:f9:cb:e3:54:e1: 36:58:90:82:3e:66:5c:78:ad:f4:c9:5f:4d:6d:9b: be:ac:da:13:29:7c:64:65:1f:7c:7a:2d:85:d7:31: 68:42:e9:8e:d1:79:d6:08:6b:82:b0:dc:65:f7:83: a5:f5:d9:05:31:59:9d:0a:f1:68:40:aa:93:0e:0a: 6a:82:b6:7b:b5:14:c7:ef:66:48:58:06:6c:8b:81: f3:60:be:45:f4:c1:82:51:f7:13:90:5f:bc:55:20: a7:ff:cd:9d:2c:30:a6:9a:a1:f9:f4:93:90:a0:a8: f3:12:8a:81:26:b1:1a:06:f9:94:76:de:5a:ec:5a: 76:4b:59:b0:fc:94:ac:74:db:a0:55:66:81:58:70: 67:77:c3:8f:42:19:d6:8e:0c:f9:35:53:7f:ac:5b: ed:71:fd:7a:99:7a:81:4d:cb:1e:cb:58:39:a5:3b: e9:01:04:7b:f6:89:a3:fe:8b:0a:59:42:bb:8a:e9: b1:c4:4b:d3:80:98:8f:70:16:b2:63:b9:08:e9:82: 30:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4E:64:84:97:19:42:24:CD:20:61:EA:DC:2A:7C:F3:C1:88:1B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a4b7cf8d-58ac-3fbe-8fba-535dd3868799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:cb:3d:02:cc:ca:25:a8:76:2a:db:af:97:cb:2f:a6:ac:c5: 80:02:d2:a0:c9:f2:dc:a4:0d:66:1b:5d:8e:d0:33:19:8e:ec: 80:4d:f9:bf:53:58:d3:2c:0e:03:48:3c:53:88:2c:bd:e1:2f: fa:0b:2f:68:3e:05:77:97:86:6d:14:4e:f6:4b:35:50:f4:dd: c3:cc:21:fc:bb:7c:89:29:31:7f:99:70:f5:7b:16:b5:56:b5: 8c:7e:b5:32:29:90:99:2a:b5:3e:38:50:b6:2a:80:29:81:9e: b9:8f:d5:1d:13:d4:48:19:3d:5a:08:bd:cc:be:d0:e1:7d:1b: 71:34:aa:d2:db:6f:de:37:1a:30:4e:a8:b9:4f:f9:ac:54:e1: 35:31:04:3d:f2:8a:10:f5:d7:a9:70:2e:18:e8:ff:60:c8:8b: c0:11:27:40:c3:48:dd:c0:0c:bc:d4:5c:b3:75:c8:08:eb:14: dd:6b:3e:3a:6d:40:7b:53:28:ef:20:3e:cf:38:d6:ec:75:3f: 63:b4:25:44:81:e4:c3:40:58:e0:22:80:d9:72:91:4e:98:fc: 46:9e:13:8c:26:64:24:d0:7e:21:ae:7d:9d:30:29:06:68:28: 2f:d7:a0:2c:43:3f:21:f6:f0:96:35:b4:d5:79:c1:1b:86:d7: 07:a3:b0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEc8YnVenanhhuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTA0MFoXDTI1MDcyMzE0MTA0MFowLzEtMCsGA1UEAxMk MmIyNjk3MzAtZmEwNi00YTAzLTg0ZmYtMjM4MjU5ZDAwYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkjuidzGj4E2OnyoeExeUsciKVdGm6VwZPDB 057egdB2Y3xo/+nLolLnQtRKffJmqt+lH3s4+cvjVOE2WJCCPmZceK30yV9NbZu+ rNoTKXxkZR98ei2F1zFoQumO0XnWCGuCsNxl94Ol9dkFMVmdCvFoQKqTDgpqgrZ7 tRTH72ZIWAZsi4HzYL5F9MGCUfcTkF+8VSCn/82dLDCmmqH59JOQoKjzEoqBJrEa BvmUdt5a7Fp2S1mw/JSsdNugVWaBWHBnd8OPQhnWjgz5NVN/rFvtcf16mXqBTcse y1g5pTvpAQR79omj/osKWUK7iumxxEvTgJiPcBayY7kI6YIwDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNOZISXGUIkzSBh6twqfPPBiBtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTRiN2NmOGQtNThhYy0z ZmJlLThmYmEtNTM1ZGQzODY4Nzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfLPQLMyiWodirbr5fLL6asxYAC0qDJ8tykDWYbXY7QMxmO7IBN+b9T WNMsDgNIPFOILL3hL/oLL2g+BXeXhm0UTvZLNVD03cPMIfy7fIkpMX+ZcPV7FrVW tYx+tTIpkJkqtT44ULYqgCmBnrmP1R0T1EgZPVoIvcy+0OF9G3E0qtLbb943GjBO qLlP+axU4TUxBD3yihD116lwLhjo/2DIi8ARJ0DDSN3ADLzUXLN1yAjrFN1rPjpt QHtTKO8gPs841ux1P2O0JUSB5MNAWOAigNlykU6Y/EaeE4wmZCTQfiGufZ0wKQZo KC/XoCxDPyH28JY1tNV5wRuG1wejsGo= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:18 2025 by rpki-client