$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b62b4a03-d202-339e-99a9-4f8d5c7d2128.roa File: b62b4a03-d202-339e-99a9-4f8d5c7d2128.roa (raw, json) Hash identifier: WgopWC50r96a+/TVHI50qsB+ro5eAZpKvr0Km1LChi8= Subject key identifier: F5:20:1D:AE:5A:54:7D:49:A5:44:F8:81:01:E9:A6:BF:DB:F0:7C:E4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B82A32023064E026E10D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b62b4a03-d202-339e-99a9-4f8d5c7d2128.roa Signing time: Thu 24 Apr 2025 11:10:02 +0000 ROA not before: Thu 24 Apr 2025 11:10:02 +0000 ROA not after: Wed 23 Jul 2025 11:10:02 +0000 asID: 12041 IP address blocks: 65.22.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:2a:32:02:30:64:e0:26:e1:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:02 2025 GMT Not After : Jul 23 11:10:02 2025 GMT Subject: CN=018fc792-87ee-4a07-9377-56ee7c7d3c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:48:b1:53:05:06:71:48:e4:86:df:08:d2:03: 53:d5:81:96:8d:ed:23:79:65:85:9a:bc:f5:ce:de: 84:9f:4a:7d:60:fc:68:d5:45:fa:c3:93:4c:cf:e6: bc:a5:07:9d:9e:09:ea:c8:76:52:4a:4a:57:6f:c3: 42:0d:f3:b5:41:f3:20:bc:ed:40:26:2b:bf:8b:14: c6:72:75:b4:1d:73:9a:14:96:50:a5:1b:f1:d5:85: de:c9:a9:8a:ed:c4:d2:e8:e3:d2:76:01:4a:d3:4e: 18:66:13:e7:7c:77:6a:2c:4f:53:43:fe:60:ac:89: 47:4c:18:3a:f9:fe:cf:84:93:7c:5e:a9:c8:62:5f: 9a:e2:38:a6:d8:ed:4a:d3:6f:bf:45:b2:85:58:95: 36:7d:a2:22:3f:dc:df:99:1c:03:9a:86:ed:2a:00: 29:88:b7:91:b2:d6:3e:96:10:1d:c2:cb:d2:2a:16: 9f:2a:9d:bf:c3:fb:33:40:a8:5b:18:5c:ec:b6:6d: f3:7a:56:cc:f4:12:78:cc:cb:d3:c6:e3:32:fe:93: 89:d7:1d:a7:60:4b:db:16:5a:a0:80:e8:c0:97:72: c9:22:1e:38:2d:2a:d6:fe:ac:41:ea:d2:8a:89:9b: e9:d2:5a:68:a9:86:af:f0:8c:be:c7:ff:c6:18:49: a3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:20:1D:AE:5A:54:7D:49:A5:44:F8:81:01:E9:A6:BF:DB:F0:7C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b62b4a03-d202-339e-99a9-4f8d5c7d2128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:b9:96:81:f5:33:ba:16:a7:08:8d:cf:5e:c0:64:59:1b:03: d1:93:ed:44:d1:42:1b:a3:10:f7:95:de:ea:e5:e1:31:72:6f: cf:81:9f:62:88:08:50:04:a7:2d:f0:ed:63:41:e9:8c:f9:11: c9:f0:8a:aa:3f:de:b1:30:01:80:07:00:3b:3f:8f:80:f9:0b: 59:b8:6c:87:9e:d0:2d:06:95:3e:37:f4:73:b8:33:73:be:80: e2:1b:54:91:8b:0b:b2:9f:22:f6:f7:e1:66:ab:77:d4:df:d8: 9f:ac:d8:a3:c8:c8:28:8e:62:69:8a:bd:01:2a:7b:89:fc:d7: fc:43:96:65:a0:ed:49:2a:fb:3e:ce:d7:0c:14:4d:bf:8e:c0: 13:00:ab:c5:df:86:f6:54:24:d1:6f:2f:e9:aa:33:bf:36:52: 2a:ed:7b:9e:93:2b:09:43:31:1d:e0:31:90:ec:79:ed:40:bf: 5a:8f:79:08:e2:30:a0:3c:56:ba:b7:94:9c:62:3a:93:cf:5e: ca:1e:a8:46:5e:eb:53:d3:56:ff:58:6d:e3:b2:3e:3d:48:82: 72:be:63:34:aa:c1:cb:c3:b4:64:9e:a1:8c:78:21:b6:ec:56: 35:31:cb:e9:3e:97:2e:60:e0:e1:4a:9d:c2:9d:d8:32:9e:80: e6:17:a9:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuCoyAjBk4CbhDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAwMloXDTI1MDcyMzExMTAwMlowLzEtMCsGA1UEAxMk MDE4ZmM3OTItODdlZS00YTA3LTkzNzctNTZlZTdjN2QzYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UixUwUGcUjkht8I0gNT1YGWje0jeWWFmrz1 zt6En0p9YPxo1UX6w5NMz+a8pQedngnqyHZSSkpXb8NCDfO1QfMgvO1AJiu/ixTG cnW0HXOaFJZQpRvx1YXeyamK7cTS6OPSdgFK004YZhPnfHdqLE9TQ/5grIlHTBg6 +f7PhJN8XqnIYl+a4jim2O1K02+/RbKFWJU2faIiP9zfmRwDmobtKgApiLeRstY+ lhAdwsvSKhafKp2/w/szQKhbGFzstm3zelbM9BJ4zMvTxuMy/pOJ1x2nYEvbFlqg gOjAl3LJIh44LSrW/qxB6tKKiZvp0lpoqYav8Iy+x//GGEmjDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUgHa5aVH1JpUT4gQHppr/b8HzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjYyYjRhMDMtZDIwMi0z MzllLTk5YTktNGY4ZDVjN2QyMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMS5loH1M7oWpwiNz17AZFkbA9GT7UTRQhujEPeV3url4TFyb8+Bn2KI CFAEpy3w7WNB6Yz5Ecnwiqo/3rEwAYAHADs/j4D5C1m4bIee0C0GlT439HO4M3O+ gOIbVJGLC7KfIvb34Ward9Tf2J+s2KPIyCiOYmmKvQEqe4n81/xDlmWg7Ukq+z7O 1wwUTb+OwBMAq8XfhvZUJNFvL+mqM782Uirte56TKwlDMR3gMZDsee1Av1qPeQji MKA8Vrq3lJxiOpPPXsoeqEZe61PTVv9YbeOyPj1IgnK+YzSqwcvDtGSeoYx4Ibbs VjUxy+k+ly5g4OFKncKd2DKegOYXqW0= -----END CERTIFICATE-----Generated at Wed Apr 30 01:33:00 2025 by rpki-client