$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa File: bf24e998-f4cb-3166-9844-bebff8d2d03a.roa (raw, json) Hash identifier: flD61kMyEEN0uB2qs+vYoBchqGxPVc8MO1gpmlEqSP8= Subject key identifier: 5F:EB:8B:90:22:FA:99:C0:BB:2A:55:B1:8A:FB:81:E9:70:B3:8B:93 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2117D58C8CCB5472B746820 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa Signing time: Thu 24 Apr 2025 14:10:01 +0000 ROA not before: Thu 24 Apr 2025 14:10:01 +0000 ROA not after: Wed 23 Jul 2025 14:10:01 +0000 asID: 207266 IP address blocks: 65.22.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:7d:58:c8:cc:b5:47:2b:74:68:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:10:01 2025 GMT Not After : Jul 23 14:10:01 2025 GMT Subject: CN=9f163e65-6c2b-4f2f-a935-68fbd14e6fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:80:95:5e:20:36:71:4d:42:37:82:98:f3: 29:27:e8:64:a1:64:99:26:61:de:85:81:73:94:0b: 11:93:a1:04:41:13:69:1e:df:79:a3:65:dd:72:d6: e2:94:b3:78:96:ff:0c:02:01:4f:9b:09:4d:93:af: 9f:04:79:dc:74:ca:1a:f6:81:57:15:3e:8e:3f:48: 85:a4:98:be:0a:83:ac:e6:b2:42:eb:ae:1e:9c:74: 10:a6:0c:47:bb:04:e3:5b:57:25:e3:7e:fe:94:95: 7f:6b:29:1f:c3:30:59:cc:24:de:9a:09:aa:5d:4f: fa:4c:aa:84:71:18:77:04:6f:d6:15:31:c3:e2:2c: a9:3e:dc:97:75:f1:a4:b5:59:c3:de:91:2a:f9:79: 30:ab:12:f5:75:fa:bc:c9:5b:6f:6d:04:ae:a2:67: 88:59:19:b4:0d:10:97:50:68:cb:82:b4:7b:ea:50: 9a:bc:81:63:ee:ec:31:c0:ea:88:40:13:ae:10:b6: 3b:01:8b:b0:5b:b1:ef:23:18:7b:f6:e1:bb:33:b2: 00:ba:da:9b:7b:ac:a0:0e:f6:e6:17:90:0d:60:f1: 29:62:d9:46:f8:ae:ed:9e:33:2a:58:0c:81:ec:93: 0c:20:0c:68:49:7a:5c:52:cc:6f:89:a4:a5:fb:0a: 15:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EB:8B:90:22:FA:99:C0:BB:2A:55:B1:8A:FB:81:E9:70:B3:8B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ac:a8:85:b0:9b:aa:a5:f9:3b:fb:8c:b0:a4:c9:75:f5:65: 55:9a:3f:a1:50:49:8b:ef:2c:c5:34:fe:9f:f9:7d:73:f4:e0: 53:c2:30:2a:36:61:a2:0d:b8:37:13:ff:29:6d:32:91:e8:36: a1:93:ca:99:c2:88:64:86:89:3b:95:25:89:27:7d:87:e1:5e: b6:fd:3c:de:c0:45:89:ff:11:8e:61:70:eb:f8:16:ca:ce:43: f9:2a:bc:e6:70:da:80:24:a8:46:80:a5:df:b0:bf:fc:de:3e: 4e:d1:b3:e8:27:59:38:4f:ad:0d:fb:6b:67:0a:54:4d:98:0a: 60:18:35:b3:1e:90:aa:53:aa:26:16:9e:e0:0a:16:a2:c3:05: ae:b7:74:68:bf:fd:af:78:0e:39:c3:0f:c4:36:14:d1:67:01: 29:16:69:fe:c5:5d:78:fb:18:87:75:87:8b:bf:36:54:e9:3b: fb:52:5f:04:55:6d:b3:c6:10:c8:dc:cc:32:5f:0f:b5:fd:0c: fb:c2:91:39:3f:88:ad:e3:20:8b:4c:e1:eb:e1:c3:98:8a:86: 61:3c:6b:f2:8f:44:99:78:c9:b6:e1:e9:f9:48:92:e5:c9:c6: d1:8b:d5:5b:0d:88:61:8a:85:e1:c2:8a:d9:b2:1e:ac:dd:40: b5:32:9d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEX1YyMy1Ryt0aCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTAwMVoXDTI1MDcyMzE0MTAwMVowLzEtMCsGA1UEAxMk OWYxNjNlNjUtNmMyYi00ZjJmLWE5MzUtNjhmYmQxNGU2ZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hWAlV4gNnFNQjeCmPMpJ+hkoWSZJmHehYFz lAsRk6EEQRNpHt95o2XdctbilLN4lv8MAgFPmwlNk6+fBHncdMoa9oFXFT6OP0iF pJi+CoOs5rJC664enHQQpgxHuwTjW1cl437+lJV/aykfwzBZzCTemgmqXU/6TKqE cRh3BG/WFTHD4iypPtyXdfGktVnD3pEq+XkwqxL1dfq8yVtvbQSuomeIWRm0DRCX UGjLgrR76lCavIFj7uwxwOqIQBOuELY7AYuwW7HvIxh79uG7M7IAutqbe6ygDvbm F5ANYPEpYtlG+K7tnjMqWAyB7JMMIAxoSXpcUsxviaSl+woV+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/ri5Ai+pnAuypVsYr7gelws4uTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmYyNGU5OTgtZjRjYi0z MTY2LTk4NDQtYmViZmY4ZDJkMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKsqIWwm6ql+Tv7jLCkyXX1ZVWaP6FQSYvvLMU0/p/5fXP04FPCMCo2 YaINuDcT/yltMpHoNqGTypnCiGSGiTuVJYknfYfhXrb9PN7ARYn/EY5hcOv4FsrO Q/kqvOZw2oAkqEaApd+wv/zePk7Rs+gnWThPrQ37a2cKVE2YCmAYNbMekKpTqiYW nuAKFqLDBa63dGi//a94DjnDD8Q2FNFnASkWaf7FXXj7GId1h4u/NlTpO/tSXwRV bbPGEMjczDJfD7X9DPvCkTk/iK3jIItM4evhw5iKhmE8a/KPRJl4ybbh6flIkuXJ xtGL1VsNiGGKheHCitmyHqzdQLUynQs= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:27 2025 by rpki-client