$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa File: a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa (raw, json) Hash identifier: 7zLGVZYWAXvpnzXGYHNy+UxYqDhCl9K7xpgEnty4M3o= Subject key identifier: 08:98:A2:D1:64:F1:FE:B5:B7:88:9B:95:CC:7F:94:47:6D:84:50:14 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B812EF90D52B26529B0F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa Signing time: Thu 24 Apr 2025 11:09:51 +0000 ROA not before: Thu 24 Apr 2025 11:09:51 +0000 ROA not after: Wed 23 Jul 2025 11:09:51 +0000 asID: 12041 IP address blocks: 65.22.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:12:ef:90:d5:2b:26:52:9b:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:51 2025 GMT Not After : Jul 23 11:09:51 2025 GMT Subject: CN=177cc6e8-8689-4363-a3d7-4977e7a8c108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:9a:0c:2e:5e:24:10:8d:d4:bb:f2:e4:7d: fa:ef:db:e5:e3:0e:11:79:35:a6:a9:16:81:43:42: db:62:9a:46:5f:d6:68:2c:6f:3d:2d:8f:9b:43:d6: 37:f1:44:bc:00:b8:a3:98:b2:58:da:e7:f1:d8:e6: 87:18:c5:af:94:4b:47:b8:17:61:06:03:5f:12:bc: 87:60:ea:74:02:e2:10:83:e1:f5:49:52:c0:10:dd: ff:e8:f9:f8:8d:f5:21:51:ac:94:0f:a4:e1:86:f7: 3f:77:be:f4:7b:63:e6:c8:e5:c1:61:13:fc:aa:a5: 57:58:00:4f:c1:c2:d4:3b:93:e5:3f:0c:68:12:40: f1:ef:44:d7:ad:fd:a9:0b:8a:6d:a5:94:f7:7a:56: a7:eb:5d:19:83:85:a5:80:65:fc:5b:f7:c6:52:a4: da:b0:4d:95:ed:00:27:88:0e:89:3e:71:5a:c4:f4: 21:34:9d:96:ae:3e:35:bc:2f:e2:4a:01:24:3b:fc: 45:14:fd:f3:09:66:fe:ce:cd:c6:d9:15:94:df:bc: 42:b5:c8:9d:2c:83:ed:98:ec:e7:f5:ca:ec:8d:fb: ea:5b:1c:c8:6a:78:c7:03:08:5f:89:ed:85:82:2b: 33:82:8d:eb:e8:03:fe:ed:87:b7:5f:ac:ab:3d:55: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:98:A2:D1:64:F1:FE:B5:B7:88:9B:95:CC:7F:94:47:6D:84:50:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f9:27:16:65:b8:3a:14:df:86:af:ae:14:82:21:13:04:5d: 46:a1:39:ea:bd:80:84:57:13:20:71:93:57:cb:ee:3a:00:73: 2f:c7:9c:bf:8b:6c:21:2e:b5:90:eb:30:ff:b4:0c:c5:79:e8: 91:ad:e1:ee:8d:33:56:b2:ec:ce:83:e1:44:5d:26:8b:9d:64: 80:72:2e:18:c0:07:c9:04:af:90:cb:12:ea:92:7a:47:5d:9a: f5:4e:c7:6b:6b:cb:fd:2a:ef:e1:c1:98:bf:c2:9b:c1:cd:3e: c4:08:98:f0:f9:89:2c:b2:00:9d:ab:79:45:30:81:69:5c:ea: d9:ee:b3:4b:0b:92:78:2e:0f:85:20:28:17:27:74:d0:11:8a: 35:5b:b6:74:ae:74:14:05:dd:bf:b5:bb:0b:ab:9b:a0:3f:cb: 7c:6d:87:32:a1:e7:d1:61:ea:52:c2:b6:6a:6e:f2:6e:dc:fa: 47:34:57:97:dc:b3:3d:9a:83:81:f6:5c:4c:27:c3:50:13:2c: 3a:ee:89:11:0d:3e:82:5c:8f:1d:40:05:4e:ae:41:df:bb:85: f4:f5:a3:b9:d4:2d:7f:99:ae:30:9c:12:84:09:61:13:d1:c3: 02:03:e7:6b:a8:71:3f:3b:e5:98:2a:dc:fc:62:d6:3f:e3:be: 72:ce:db:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuBLvkNUrJlKbDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk1MVoXDTI1MDcyMzExMDk1MVowLzEtMCsGA1UEAxMk MTc3Y2M2ZTgtODY4OS00MzYzLWEzZDctNDk3N2U3YThjMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ2aDC5eJBCN1Lvy5H3679vl4w4ReTWmqRaB Q0LbYppGX9ZoLG89LY+bQ9Y38US8ALijmLJY2ufx2OaHGMWvlEtHuBdhBgNfEryH YOp0AuIQg+H1SVLAEN3/6Pn4jfUhUayUD6Thhvc/d770e2PmyOXBYRP8qqVXWABP wcLUO5PlPwxoEkDx70TXrf2pC4ptpZT3elan610Zg4WlgGX8W/fGUqTasE2V7QAn iA6JPnFaxPQhNJ2Wrj41vC/iSgEkO/xFFP3zCWb+zs3G2RWU37xCtcidLIPtmOzn 9crsjfvqWxzIanjHAwhfie2Fgiszgo3r6AP+7Ye3X6yrPVXLawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiYotFk8f61t4iblcx/lEdthFAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTg0ZDA0YjYtYzdmMS0z ZjNhLTk3ZTUtODk5MmM2ZGUzOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv5JxZluDoU34avrhSCIRMEXUahOeq9gIRXEyBxk1fL7joAcy/HnL+L bCEutZDrMP+0DMV56JGt4e6NM1ay7M6D4URdJoudZIByLhjAB8kEr5DLEuqSekdd mvVOx2try/0q7+HBmL/Cm8HNPsQImPD5iSyyAJ2reUUwgWlc6tnus0sLknguD4Ug KBcndNARijVbtnSudBQF3b+1uwurm6A/y3xthzKh59Fh6lLCtmpu8m7c+kc0V5fc sz2ag4H2XEwnw1ATLDruiRENPoJcjx1ABU6uQd+7hfT1o7nULX+ZrjCcEoQJYRPR wwID52uocT875Zgq3Pxi1j/jvnLO20w= -----END CERTIFICATE-----Generated at Tue Apr 29 12:47:40 2025 by rpki-client