$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc20d850-ec04-31ab-85bf-210b8d7d9a60.roa File: bc20d850-ec04-31ab-85bf-210b8d7d9a60.roa (raw, json) Hash identifier: FTJO5Wda5eH2VZsYt5XSGMntwTPbuNAmz2eAhS5ij9I= Subject key identifier: 68:65:FB:DA:F5:44:B9:D3:02:07:E8:ED:83:49:F9:AB:0F:E3:57:1C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B84475B44D9792FACC4C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc20d850-ec04-31ab-85bf-210b8d7d9a60.roa Signing time: Thu 24 Apr 2025 11:10:15 +0000 ROA not before: Thu 24 Apr 2025 11:10:15 +0000 ROA not after: Wed 23 Jul 2025 11:10:15 +0000 asID: 12041 IP address blocks: 65.22.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:44:75:b4:4d:97:92:fa:cc:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:15 2025 GMT Not After : Jul 23 11:10:15 2025 GMT Subject: CN=3e818850-b590-4ef2-bdbe-a4892eb22c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:e6:6e:31:04:01:15:0c:89:40:30:5e:4d: 56:47:be:aa:11:b4:94:95:ab:dc:e3:40:c7:f8:9c: 06:e5:00:bc:55:5f:9e:1a:41:ad:68:53:3c:ac:ff: c0:69:51:07:33:25:1a:ee:37:ef:0a:09:dc:08:bf: 1d:6d:e1:3b:41:1c:a4:89:06:43:59:e5:5b:77:92: fd:29:84:e4:f4:ad:1f:18:63:b0:5c:3a:a1:ac:9a: 84:c7:2b:06:76:9d:92:02:a2:a0:81:04:56:b8:15: f6:c2:59:52:78:78:69:0f:ee:57:40:e9:f4:b8:cf: 0d:09:7f:73:dc:56:51:e9:19:37:60:f2:f0:96:8b: a1:48:76:2a:b4:6e:f2:22:b5:61:e9:b7:a4:cf:44: 94:8b:6f:d9:64:bb:f5:77:ed:01:b2:15:a3:38:19: c5:d7:c9:9d:9a:53:e6:2d:f6:63:52:fb:73:0d:99: 07:1c:a1:8a:08:92:ea:7f:c4:8e:25:46:e9:b8:0e: b2:fa:12:26:2b:3c:1c:b6:ab:68:fd:73:ee:f0:ba: f3:59:a2:7a:20:87:f9:c8:63:08:57:80:28:10:ba: 6c:93:11:3e:23:14:ff:11:d3:19:d4:4f:c0:09:0d: 6f:1a:c7:e4:b4:9e:85:af:0b:67:97:f9:ff:bc:76: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:65:FB:DA:F5:44:B9:D3:02:07:E8:ED:83:49:F9:AB:0F:E3:57:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bc20d850-ec04-31ab-85bf-210b8d7d9a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f1:b6:9d:91:73:ae:fa:dc:4b:5b:c4:2d:0f:5d:60:d9:6d: bb:52:13:2d:ee:1e:1d:32:a2:86:84:fd:c1:b8:56:6c:6d:e5: 40:4c:14:8f:f8:c7:66:b2:b5:b0:58:26:b4:51:b9:28:f6:99: a9:34:17:ce:c1:d0:c8:c6:c5:39:64:6e:52:34:4f:12:93:06: 21:04:e7:de:42:4c:aa:74:7c:83:44:c0:f7:c8:e1:be:fb:e2: 3c:6f:d8:f3:01:6b:c1:e2:6e:b6:13:0b:50:16:04:32:8d:90: 28:24:77:9a:17:03:fd:7c:2f:41:35:50:9c:6f:36:b5:2a:5f: c7:af:25:97:93:c7:9b:d9:76:ff:10:7b:06:da:74:b1:b1:0f: cf:0d:7b:28:1c:d9:5a:69:97:87:03:57:61:78:f4:59:e1:8a: b2:35:3d:31:ef:50:e1:6d:d3:0d:6b:9d:1a:4e:82:3c:39:4a: 73:06:22:90:24:ec:9c:b6:a7:ce:56:31:2e:4c:e4:6b:7f:c7: 2e:1e:90:2a:89:7f:b1:68:9a:d6:6b:83:59:f0:59:b0:d7:d7: 2a:e2:15:a1:0f:68:24:d8:0b:5b:29:ab:3a:82:fc:4d:d0:ff: 13:98:8d:af:dd:ea:50:6f:e3:a9:7f:b2:07:5a:d3:d4:72:45: 5a:a6:fc:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuER1tE2XkvrMTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAxNVoXDTI1MDcyMzExMTAxNVowLzEtMCsGA1UEAxMk M2U4MTg4NTAtYjU5MC00ZWYyLWJkYmUtYTQ4OTJlYjIyYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApunmbjEEARUMiUAwXk1WR76qEbSUlavc40DH +JwG5QC8VV+eGkGtaFM8rP/AaVEHMyUa7jfvCgncCL8dbeE7QRykiQZDWeVbd5L9 KYTk9K0fGGOwXDqhrJqExysGdp2SAqKggQRWuBX2wllSeHhpD+5XQOn0uM8NCX9z 3FZR6Rk3YPLwlouhSHYqtG7yIrVh6bekz0SUi2/ZZLv1d+0BshWjOBnF18mdmlPm LfZjUvtzDZkHHKGKCJLqf8SOJUbpuA6y+hImKzwctqto/XPu8LrzWaJ6IIf5yGMI V4AoELpskxE+IxT/EdMZ1E/ACQ1vGsfktJ6Frwtnl/n/vHY3WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhl+9r1RLnTAgfo7YNJ+asP41ccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmMyMGQ4NTAtZWMwNC0z MWFiLTg1YmYtMjEwYjhkN2Q5YTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrxtp2Rc6763EtbxC0PXWDZbbtSEy3uHh0yooaE/cG4Vmxt5UBMFI/4 x2aytbBYJrRRuSj2mak0F87B0MjGxTlkblI0TxKTBiEE595CTKp0fINEwPfI4b77 4jxv2PMBa8HibrYTC1AWBDKNkCgkd5oXA/18L0E1UJxvNrUqX8evJZeTx5vZdv8Q ewbadLGxD88Neygc2Vppl4cDV2F49FnhirI1PTHvUOFt0w1rnRpOgjw5SnMGIpAk 7Jy2p85WMS5M5Gt/xy4ekCqJf7FomtZrg1nwWbDX1yriFaEPaCTYC1spqzqC/E3Q /xOYja/d6lBv46l/sgda09RyRVqm/Ao= -----END CERTIFICATE-----Generated at Wed Apr 30 05:47:16 2025 by rpki-client