$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ac22bd3a-b762-3265-b008-2e720c6134ab.roa File: ac22bd3a-b762-3265-b008-2e720c6134ab.roa (raw, json) Hash identifier: wqALc6BbivRixHNp0I6D77QajJhNKOJTSoabOJ3i+iU= Subject key identifier: 5F:A3:9B:EB:80:7E:EA:67:74:7D:16:D9:1F:78:60:F9:92:36:92:F4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B749DF17017BAA58CBCB00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ac22bd3a-b762-3265-b008-2e720c6134ab.roa Signing time: Thu 24 Apr 2025 11:08:16 +0000 ROA not before: Thu 24 Apr 2025 11:08:16 +0000 ROA not after: Wed 23 Jul 2025 11:08:16 +0000 asID: 12041 IP address blocks: 65.22.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:49:df:17:01:7b:aa:58:cb:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:16 2025 GMT Not After : Jul 23 11:08:16 2025 GMT Subject: CN=da6c22b7-ba15-4f64-8530-88ec37409077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8e:07:a7:15:f6:e7:6c:41:e3:21:71:04:ac: 38:25:49:5c:76:ce:01:a8:59:9f:b2:5f:94:ff:3a: c9:95:7b:bd:93:b9:6c:3b:db:a4:35:ff:3b:bc:c5: 29:1c:e9:5e:5d:ab:59:4c:9b:2c:d3:b9:31:68:52: 7a:b0:18:f5:a7:4f:db:96:11:42:c4:b8:fc:8e:6b: 21:5b:53:4c:8e:cd:62:75:11:89:ae:90:ec:18:f2: 94:2a:4a:d4:94:ed:9f:3c:95:30:73:6b:e9:73:9b: 9c:7f:30:47:8c:df:f8:c5:3c:12:7b:0e:ec:3c:1f: ca:93:60:d6:a4:f9:78:69:ac:66:09:ed:02:da:71: e2:0f:f1:2c:2d:a5:6e:44:63:d8:07:2a:f5:96:be: e7:47:ce:d6:b0:38:62:af:e6:08:b3:cf:1c:42:99: 21:9e:5c:d3:3b:20:56:ee:de:e1:fd:fc:0a:b3:7e: 34:bb:ac:42:e7:97:30:d1:e8:49:d1:cb:5b:44:78: cb:9c:66:cf:06:44:b3:6a:4b:77:50:32:27:94:13: 14:17:d8:ba:6a:c7:92:02:4d:00:16:0f:77:fc:8f: d1:34:76:df:20:dd:93:ce:99:10:82:0d:18:22:d9: ff:ed:88:72:e6:b0:16:ff:2f:82:40:70:1e:c8:5d: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A3:9B:EB:80:7E:EA:67:74:7D:16:D9:1F:78:60:F9:92:36:92:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ac22bd3a-b762-3265-b008-2e720c6134ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ad:88:3c:88:e6:c1:1f:55:5e:a0:f9:b7:38:ce:17:1e:e2: 3d:0d:22:c9:75:50:21:08:72:0a:ad:41:02:97:b1:ba:f8:b3: bd:3e:de:ec:cf:b1:74:c5:4b:a4:c8:87:8b:04:f7:15:64:44: 15:78:f6:86:c8:84:55:e5:13:c5:26:90:6e:e1:08:35:f5:6e: c9:94:a6:52:0e:94:22:d4:71:a4:63:07:42:31:d3:c9:00:86: 51:c9:de:05:09:db:f6:79:bc:7d:1e:33:89:9a:9e:68:9b:72: 37:d9:ba:af:db:db:60:62:11:90:fd:89:51:d0:09:50:31:e3: 10:8c:35:88:09:12:42:e4:ad:e8:61:0e:da:fa:32:22:59:60: c6:a0:0a:c8:41:0e:58:40:55:69:ea:76:31:f1:7e:ea:17:62: bb:fc:69:0f:a8:b0:0b:6e:79:3a:b3:bf:7b:b1:50:e7:8c:03: c2:e3:c9:72:f5:ce:1a:14:b0:00:e0:73:52:a7:6b:0a:ff:04: 88:4c:56:fa:96:05:04:89:83:13:08:81:06:a9:92:f1:f2:b6: c0:da:d0:90:e7:73:49:46:e5:40:54:8d:49:bb:7c:fd:a6:34: 8b:01:cf:65:ff:10:3b:39:39:7e:38:18:2d:ec:8d:ca:0c:83: e7:8c:a1:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht0nfFwF7qljLywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgxNloXDTI1MDcyMzExMDgxNlowLzEtMCsGA1UEAxMk ZGE2YzIyYjctYmExNS00ZjY0LTg1MzAtODhlYzM3NDA5MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI4HpxX252xB4yFxBKw4JUlcds4BqFmfsl+U /zrJlXu9k7lsO9ukNf87vMUpHOleXatZTJss07kxaFJ6sBj1p0/blhFCxLj8jmsh W1NMjs1idRGJrpDsGPKUKkrUlO2fPJUwc2vpc5ucfzBHjN/4xTwSew7sPB/Kk2DW pPl4aaxmCe0C2nHiD/EsLaVuRGPYByr1lr7nR87WsDhir+YIs88cQpkhnlzTOyBW 7t7h/fwKs340u6xC55cw0ehJ0ctbRHjLnGbPBkSzakt3UDInlBMUF9i6aseSAk0A Fg93/I/RNHbfIN2TzpkQgg0YItn/7Yhy5rAW/y+CQHAeyF1APwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+jm+uAfupndH0W2R94YPmSNpL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWMyMmJkM2EtYjc2Mi0z MjY1LWIwMDgtMmU3MjBjNjEzNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACitiDyI5sEfVV6g+bc4zhce4j0NIsl1UCEIcgqtQQKXsbr4s70+3uzP sXTFS6TIh4sE9xVkRBV49obIhFXlE8UmkG7hCDX1bsmUplIOlCLUcaRjB0Ix08kA hlHJ3gUJ2/Z5vH0eM4manmibcjfZuq/b22BiEZD9iVHQCVAx4xCMNYgJEkLkrehh Dtr6MiJZYMagCshBDlhAVWnqdjHxfuoXYrv8aQ+osAtueTqzv3uxUOeMA8LjyXL1 zhoUsADgc1Knawr/BIhMVvqWBQSJgxMIgQapkvHytsDa0JDnc0lG5UBUjUm7fP2m NIsBz2X/EDs5OX44GC3sjcoMg+eMoc4= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:41 2025 by rpki-client