$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a98ef54e-a2aa-3839-88a0-2bb96fe25a79.roa File: a98ef54e-a2aa-3839-88a0-2bb96fe25a79.roa (raw, json) Hash identifier: sN7vqm1Vyr4RTlK1Dr52LVsNzRxRF+4B9vdWhdIQlqM= Subject key identifier: C2:01:6F:0F:7C:80:6D:41:3C:68:1F:6D:D3:85:A3:42:C2:47:2C:B4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7FEAA08E772E0EE439780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a98ef54e-a2aa-3839-88a0-2bb96fe25a79.roa Signing time: Thu 24 Apr 2025 11:09:42 +0000 ROA not before: Thu 24 Apr 2025 11:09:42 +0000 ROA not after: Wed 23 Jul 2025 11:09:42 +0000 asID: 12041 IP address blocks: 65.22.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:fe:aa:08:e7:72:e0:ee:43:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:42 2025 GMT Not After : Jul 23 11:09:42 2025 GMT Subject: CN=d59a41ab-e7a9-4002-aebe-1ae610a71847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:1e:82:73:2d:e7:55:1b:1c:76:53:77:4e: ad:c2:44:5e:6a:eb:1c:49:d4:29:ac:e8:fc:3c:06: 21:9d:b2:ed:0e:fb:25:a2:59:e9:c5:f3:06:3f:b3: 00:cf:17:6b:83:93:35:b5:fc:fc:33:57:e0:79:90: 9e:0f:44:e5:3c:f7:4f:f4:81:42:23:e2:7e:4b:6f: 74:01:fb:8d:93:5b:24:e3:73:a8:78:b6:80:3f:09: 62:dc:ff:72:a7:49:0c:88:ef:b7:d7:5a:a6:e2:86: 3c:8e:df:c6:46:b9:16:85:99:f9:f2:5d:1e:b3:98: 75:95:9b:eb:77:16:54:e4:a5:08:85:47:5d:61:70: b2:03:14:aa:89:4f:dc:14:41:39:49:9e:2d:ed:f8: 92:82:1c:95:dd:72:ec:c0:49:e0:2e:a6:5b:90:6d: 9c:ee:44:c6:3d:9f:2c:14:36:e3:60:d9:ce:54:af: e5:bc:29:82:d2:52:ab:5e:df:b9:af:f5:88:fa:b4: 38:11:f7:07:74:fb:e3:6a:36:f8:c1:7b:2f:59:8f: 4e:9f:77:bd:3e:c9:1c:fd:51:57:d3:6f:ea:c5:f2: 75:20:75:df:b2:ab:ae:82:89:15:6d:40:fa:e9:43: 0a:3f:86:9c:ae:44:5c:5b:f5:cd:a8:39:bb:89:41: 48:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:01:6F:0F:7C:80:6D:41:3C:68:1F:6D:D3:85:A3:42:C2:47:2C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a98ef54e-a2aa-3839-88a0-2bb96fe25a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0f:bf:4e:fb:f4:f4:d3:fd:f0:e3:7a:12:42:29:ef:1a:bf: 41:b6:57:ab:9e:1e:e4:3b:82:e8:b4:50:c4:cd:50:f4:06:34: 67:82:61:89:06:14:5a:64:72:d6:84:57:dd:e9:9f:dc:50:b3: 03:83:57:66:9e:fa:0f:53:80:23:78:73:4e:f0:87:d5:15:f3: c5:0a:e9:79:65:4a:6a:b0:6c:5b:94:19:58:ef:a8:1e:92:e9: 1b:9e:e1:f0:b6:cf:8b:1c:4a:68:e1:ec:4d:44:41:30:34:9f: 45:0b:c3:4e:6e:13:56:13:f3:c4:63:39:15:00:99:97:6e:dc: 44:5e:65:84:2b:69:0b:cc:01:a9:1d:1b:f0:c2:28:28:47:18: 09:72:69:d2:ea:77:57:cc:fa:40:39:fb:8a:8c:bc:e6:47:18: 06:b3:38:83:4a:45:8f:39:95:4d:02:02:d3:02:30:64:b1:6e: 21:ab:5f:f2:f4:2d:10:1d:62:08:17:46:26:92:a0:aa:83:d6: 4e:41:e7:a9:68:44:74:a9:63:d8:e3:3d:42:a9:c5:34:d2:6f: c8:13:31:eb:ce:9d:1d:7d:c0:94:6c:c5:99:9b:cb:49:21:2d: ae:89:fd:a8:e8:d1:6e:24:be:df:ee:37:46:f3:25:a8:1b:22: 73:56:7a:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht/6qCOdy4O5Dl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk0MloXDTI1MDcyMzExMDk0MlowLzEtMCsGA1UEAxMk ZDU5YTQxYWItZTdhOS00MDAyLWFlYmUtMWFlNjEwYTcxODQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyQegnMt51UbHHZTd06twkReauscSdQprOj8 PAYhnbLtDvslolnpxfMGP7MAzxdrg5M1tfz8M1fgeZCeD0TlPPdP9IFCI+J+S290 AfuNk1sk43OoeLaAPwli3P9yp0kMiO+311qm4oY8jt/GRrkWhZn58l0es5h1lZvr dxZU5KUIhUddYXCyAxSqiU/cFEE5SZ4t7fiSghyV3XLswEngLqZbkG2c7kTGPZ8s FDbjYNnOVK/lvCmC0lKrXt+5r/WI+rQ4EfcHdPvjajb4wXsvWY9On3e9Pskc/VFX 02/qxfJ1IHXfsquugokVbUD66UMKP4acrkRcW/XNqDm7iUFImwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIBbw98gG1BPGgfbdOFo0LCRyy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTk4ZWY1NGUtYTJhYS0z ODM5LTg4YTAtMmJiOTZmZTI1YTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYPv0779PTT/fDjehJCKe8av0G2V6ueHuQ7gui0UMTNUPQGNGeCYYkG FFpkctaEV93pn9xQswODV2ae+g9TgCN4c07wh9UV88UK6XllSmqwbFuUGVjvqB6S 6Rue4fC2z4scSmjh7E1EQTA0n0ULw05uE1YT88RjORUAmZdu3EReZYQraQvMAakd G/DCKChHGAlyadLqd1fM+kA5+4qMvOZHGAazOINKRY85lU0CAtMCMGSxbiGrX/L0 LRAdYggXRiaSoKqD1k5B56loRHSpY9jjPUKpxTTSb8gTMevOnR19wJRsxZmby0kh La6J/ajo0W4kvt/uN0bzJagbInNWeng= -----END CERTIFICATE-----Generated at Tue Apr 29 23:31:16 2025 by rpki-client