$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa File: bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa (raw, json) Hash identifier: nQPudDHEm0qu9/SpeFi3y/3VhrFC5FsVDDykoRP1JSY= Subject key identifier: F7:3C:AF:10:C1:5D:3F:08:CF:E6:66:5A:30:2C:AE:F9:7A:AE:8B:31 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7D0D9AFB9670ADAE02780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa Signing time: Thu 24 Apr 2025 11:09:20 +0000 ROA not before: Thu 24 Apr 2025 11:09:20 +0000 ROA not after: Wed 23 Jul 2025 11:09:20 +0000 asID: 12041 IP address blocks: 65.22.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:d0:d9:af:b9:67:0a:da:e0:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:20 2025 GMT Not After : Jul 23 11:09:20 2025 GMT Subject: CN=eedfc708-5138-4738-9c2a-97e451cbe230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:3e:02:42:81:cd:0c:0d:2b:2e:69:9d:ad: 82:8e:ca:57:cd:3b:ff:8b:77:5c:58:fd:34:94:2b: 42:d6:c4:ac:29:9a:bc:00:20:17:61:ce:8b:2e:ef: 5b:2d:46:82:9c:24:21:ab:b1:b2:14:93:b0:b0:c3: bc:53:34:29:26:a6:ed:19:28:2f:ff:c3:c2:8f:13: 2f:6d:66:1d:40:22:46:2a:c1:ed:c3:07:8b:94:cd: d2:27:65:ea:1b:76:11:24:bf:cb:2c:ef:7a:aa:8d: f3:fb:30:f0:2a:29:d8:c6:23:84:48:ce:a6:94:84: e6:ce:5d:9b:fa:fd:be:10:f1:65:b8:0a:61:8a:5c: e7:ee:3d:f9:ca:ee:dd:46:d3:f4:82:a4:89:f0:bf: 33:22:e7:25:a1:ae:50:88:c9:07:cd:e1:1e:f4:25: 41:8d:04:c9:46:63:dd:3d:47:1d:bb:62:c0:09:7f: 40:cf:0f:13:a5:83:7a:3d:43:1c:2e:68:71:88:6b: 8d:b1:14:7e:3a:ca:94:42:bb:aa:29:f8:43:51:cd: b1:1f:5a:fc:b8:d9:1b:d4:8d:2e:6e:f7:c3:20:e0: 80:c3:45:74:21:93:83:21:0b:d1:d7:25:7a:3a:e8: d7:77:cd:c1:2f:22:26:24:ad:f4:f7:25:7e:93:e0: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3C:AF:10:C1:5D:3F:08:CF:E6:66:5A:30:2C:AE:F9:7A:AE:8B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:17:50:bf:75:2e:87:a5:f1:ec:2e:13:14:63:70:0f:1b:f8: 77:b2:9b:2f:3d:29:f6:1d:24:6a:2d:fe:1d:04:44:ae:56:92: b7:6f:a7:8b:c1:a1:a9:18:34:e1:ff:4c:9a:0a:70:46:fb:95: 6f:11:21:e6:d9:ef:07:98:45:ce:40:6f:b3:bb:28:22:d6:be: 63:07:68:e4:95:bb:a5:c5:2a:72:2e:58:31:a0:68:4d:21:04: d3:3a:7d:82:eb:01:84:78:cf:23:c1:08:93:88:a2:3f:08:27: 3f:9f:a1:01:cf:42:de:70:88:38:4a:d1:ca:c8:50:96:d7:92: 38:42:2b:21:6f:4c:d3:ac:e6:8c:d3:ac:e2:30:34:19:a3:ff: 62:af:59:11:2a:a8:71:18:5d:e4:82:4b:d1:6d:74:0a:7a:d3: 6e:0f:37:31:7d:80:dc:dd:9c:b5:65:69:f5:e6:52:9e:a5:ea: c0:07:80:4d:f7:a6:99:d2:a2:08:00:d7:dc:6d:ac:a7:bf:de: ed:c1:d2:0b:43:65:42:ff:f0:5a:45:f2:9a:9d:72:df:0c:96: ea:ab:2b:f7:d0:b0:bc:10:84:d2:af:70:58:7d:76:16:32:d7: 09:20:62:ef:0f:f5:be:01:0c:96:8e:86:8e:75:4d:2c:91:ae: e3:3f:e9:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht9DZr7lnCtrgJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyMFoXDTI1MDcyMzExMDkyMFowLzEtMCsGA1UEAxMk ZWVkZmM3MDgtNTEzOC00NzM4LTljMmEtOTdlNDUxY2JlMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/U+AkKBzQwNKy5pna2CjspXzTv/i3dcWP00 lCtC1sSsKZq8ACAXYc6LLu9bLUaCnCQhq7GyFJOwsMO8UzQpJqbtGSgv/8PCjxMv bWYdQCJGKsHtwweLlM3SJ2XqG3YRJL/LLO96qo3z+zDwKinYxiOESM6mlITmzl2b +v2+EPFluAphilzn7j35yu7dRtP0gqSJ8L8zIucloa5QiMkHzeEe9CVBjQTJRmPd PUcdu2LACX9Azw8TpYN6PUMcLmhxiGuNsRR+OsqUQruqKfhDUc2xH1r8uNkb1I0u bvfDIOCAw0V0IZODIQvR1yV6OujXd83BLyImJK309yV+k+BHZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPc8rxDBXT8Iz+ZmWjAsrvl6rosxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmVjOTBiYjktZWE5OS0z ZmE2LWIzMzAtNGIzNjZhYTBhMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRabMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsXUL91Loel8ewuExRjcA8b+Heymy89KfYdJGot/h0ERK5Wkrdvp4vB oakYNOH/TJoKcEb7lW8RIebZ7weYRc5Ab7O7KCLWvmMHaOSVu6XFKnIuWDGgaE0h BNM6fYLrAYR4zyPBCJOIoj8IJz+foQHPQt5wiDhK0crIUJbXkjhCKyFvTNOs5ozT rOIwNBmj/2KvWREqqHEYXeSCS9FtdAp6024PNzF9gNzdnLVlafXmUp6l6sAHgE33 ppnSoggA19xtrKe/3u3B0gtDZUL/8FpF8pqdct8MluqrK/fQsLwQhNKvcFh9dhYy 1wkgYu8P9b4BDJaOho51TSyRruM/6aA= -----END CERTIFICATE-----Generated at Tue Apr 29 20:30:56 2025 by rpki-client