$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44bcd16-436b-3470-b9b1-fa9519758ea1.roa File: b44bcd16-436b-3470-b9b1-fa9519758ea1.roa (raw, json) Hash identifier: G0Z2UHHmup/rFss6NFcoNL7k4bMPISt1zTs7VqyjheY= Subject key identifier: 14:1B:A3:A2:3A:B5:7E:FE:DA:73:57:0C:70:7D:A2:B1:9E:15:92:B3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B75EFF0D2FD58008DF1800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44bcd16-436b-3470-b9b1-fa9519758ea1.roa Signing time: Thu 24 Apr 2025 11:08:26 +0000 ROA not before: Thu 24 Apr 2025 11:08:26 +0000 ROA not after: Wed 23 Jul 2025 11:08:26 +0000 asID: 12041 IP address blocks: 65.22.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:5e:ff:0d:2f:d5:80:08:df:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:26 2025 GMT Not After : Jul 23 11:08:26 2025 GMT Subject: CN=6ec4cf71-262c-4a54-a13b-d0d29a61279c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:a0:5c:8b:6a:40:45:dd:65:44:f4:a9:c9: 15:84:54:72:57:21:55:6f:bc:6f:8e:ec:3a:84:1d: c0:7f:23:56:00:b9:f6:d7:a0:14:2a:dc:ca:28:7d: 7c:27:81:fc:24:81:ae:91:26:e4:1f:ba:70:0c:32: 5f:dd:b4:0a:26:c9:b7:89:15:09:ab:fc:ae:0c:22: cc:8d:33:ba:a1:fd:fd:70:46:f9:d9:6c:9e:e3:8f: 70:c1:37:fa:08:c3:c6:36:5e:48:a9:9a:11:c8:c6: 95:61:07:62:52:26:40:fb:27:0f:1a:9e:e8:ad:99: 5c:03:46:e8:2f:1c:d2:44:b6:b9:b3:d6:e6:91:5e: 0a:e4:65:7c:fb:f4:a3:7b:ff:54:f2:41:a3:22:0c: 40:eb:1f:d6:48:5a:0e:ee:ca:48:3a:c9:9a:36:3c: 57:07:69:ff:f5:17:a2:04:c9:d3:ed:f0:41:e2:d2: b1:16:03:cc:14:98:a6:10:e5:8f:6a:00:19:6e:d1: ee:58:05:27:b0:ed:12:32:ff:d7:b4:90:a0:dd:c3: 88:99:80:60:4c:f1:b7:fb:2e:3f:99:ec:cf:2f:81: d1:8b:89:47:78:f7:a3:d7:4a:92:d0:4e:54:ba:cb: 1e:5a:c2:72:0a:9d:8d:82:05:f2:c7:e1:ae:35:0c: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1B:A3:A2:3A:B5:7E:FE:DA:73:57:0C:70:7D:A2:B1:9E:15:92:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b44bcd16-436b-3470-b9b1-fa9519758ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:78:84:9d:21:da:0b:32:a7:95:e8:88:4f:65:28:49:f1:15: f2:fd:11:fa:8f:30:c6:c5:a3:49:6f:d1:b3:a8:97:c9:77:87: 59:cd:45:25:06:21:7e:4b:5e:e0:5d:13:a2:df:49:77:78:2c: 83:29:50:a4:d5:db:bd:fa:c3:23:e7:82:43:cc:a2:7a:2e:01: d9:47:22:a2:d7:0a:05:7f:45:3d:b3:44:04:7b:24:d1:f4:68: ac:04:57:51:a2:c8:e1:0b:d9:d3:84:bf:52:d7:2e:6b:41:fb: dc:3b:18:42:08:f7:89:19:1f:1b:bb:c0:61:e4:1f:71:e0:80: 19:04:2d:43:03:36:8b:8a:fb:b4:f4:20:05:84:b5:6f:ac:ac: 65:16:26:31:6a:2a:e3:ef:fa:1d:cf:4f:41:c1:6c:96:95:69: 49:02:43:91:e5:44:d7:2f:ce:e9:df:a7:46:66:bc:51:0b:c6: 0f:82:19:79:e3:a6:d1:d7:70:9f:6f:02:f5:40:ab:bf:c3:2a: 77:df:81:f0:a1:e3:0c:00:a0:e9:7d:68:67:60:40:3f:01:06: af:7a:12:92:fa:27:06:8c:d6:55:02:02:b7:f2:da:03:60:2a: e2:1d:ac:fd:48:25:fa:1a:30:b8:40:01:e6:e3:26:77:37:3f: fb:a9:a4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht17/DS/VgAjfGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgyNloXDTI1MDcyMzExMDgyNlowLzEtMCsGA1UEAxMk NmVjNGNmNzEtMjYyYy00YTU0LWExM2ItZDBkMjlhNjEyNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/mgXItqQEXdZUT0qckVhFRyVyFVb7xvjuw6 hB3AfyNWALn216AUKtzKKH18J4H8JIGukSbkH7pwDDJf3bQKJsm3iRUJq/yuDCLM jTO6of39cEb52Wye449wwTf6CMPGNl5IqZoRyMaVYQdiUiZA+ycPGp7orZlcA0bo LxzSRLa5s9bmkV4K5GV8+/Sje/9U8kGjIgxA6x/WSFoO7spIOsmaNjxXB2n/9Rei BMnT7fBB4tKxFgPMFJimEOWPagAZbtHuWAUnsO0SMv/XtJCg3cOImYBgTPG3+y4/ mezPL4HRi4lHePej10qS0E5UusseWsJyCp2NggXyx+GuNQzIGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQbo6I6tX7+2nNXDHB9orGeFZKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjQ0YmNkMTYtNDM2Yi0z NDcwLWI5YjEtZmE5NTE5NzU4ZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK14hJ0h2gsyp5XoiE9lKEnxFfL9EfqPMMbFo0lv0bOol8l3h1nNRSUG IX5LXuBdE6LfSXd4LIMpUKTV2736wyPngkPMonouAdlHIqLXCgV/RT2zRAR7JNH0 aKwEV1GiyOEL2dOEv1LXLmtB+9w7GEII94kZHxu7wGHkH3HggBkELUMDNouK+7T0 IAWEtW+srGUWJjFqKuPv+h3PT0HBbJaVaUkCQ5HlRNcvzunfp0ZmvFELxg+CGXnj ptHXcJ9vAvVAq7/DKnffgfCh4wwAoOl9aGdgQD8BBq96EpL6JwaM1lUCArfy2gNg KuIdrP1IJfoaMLhAAebjJnc3P/uppDc= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:30 2025 by rpki-client