$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf96c460-909e-35f7-a364-3789939a0064.roa File: bf96c460-909e-35f7-a364-3789939a0064.roa (raw, json) Hash identifier: iMR1N2i/irTueIYVKo9jSZQQwLZneNeLYVtGHRMF+jk= Subject key identifier: 96:7B:4F:D7:28:57:D5:FE:80:7A:BF:17:0A:53:6D:00:C7:0B:63:7B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B72ECDE96C8CA59F4C8A80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf96c460-909e-35f7-a364-3789939a0064.roa Signing time: Thu 24 Apr 2025 11:08:04 +0000 ROA not before: Thu 24 Apr 2025 11:08:04 +0000 ROA not after: Wed 23 Jul 2025 11:08:04 +0000 asID: 12041 IP address blocks: 65.22.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:2e:cd:e9:6c:8c:a5:9f:4c:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:04 2025 GMT Not After : Jul 23 11:08:04 2025 GMT Subject: CN=648acd7c-a625-4cd1-be30-99f508a40c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:5a:70:78:e2:81:b0:0e:32:9a:a9:95:39: da:6a:76:77:df:63:03:39:1c:23:25:aa:7d:ef:c3: 2c:0b:51:4d:ec:0a:0b:1f:09:20:86:f9:e3:44:ba: 4d:2b:62:99:5f:ab:8b:6e:09:49:35:bd:fa:9b:f7: 11:36:32:3a:17:6c:e7:d3:2c:5b:16:cc:48:be:66: 84:61:5d:9d:5a:fb:04:9d:6f:a7:76:4c:1f:8f:66: b6:b9:da:2a:18:a1:f6:6f:a7:ff:93:ec:5e:b6:12: 74:fb:dc:90:e5:07:dd:c4:94:6e:26:13:e9:c2:bb: fa:f1:57:1d:bd:f8:67:64:77:4c:d4:ec:4a:6a:dc: db:42:11:a6:c6:cb:cc:5d:99:e5:46:48:8a:72:9b: 88:a1:93:98:21:c0:2a:49:49:19:fc:23:99:5d:e8: d1:1f:b9:91:79:09:8a:a7:3d:91:63:9f:76:70:21: 81:6d:b7:16:4f:5a:5b:86:8b:80:65:95:64:34:31: ee:d8:2f:a9:09:70:fd:8d:f1:c1:d1:23:b1:4d:6a: 53:dd:3b:7d:83:0e:d8:6b:35:56:39:03:ce:31:00: 15:28:f1:f9:44:d8:a4:ca:60:67:dc:a8:b3:ce:6a: c3:ae:4e:9f:21:77:c9:e2:57:c4:2d:57:c2:77:b9: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7B:4F:D7:28:57:D5:FE:80:7A:BF:17:0A:53:6D:00:C7:0B:63:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf96c460-909e-35f7-a364-3789939a0064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:dd:8c:9c:b0:8c:44:3a:01:21:94:34:55:ca:fa:ad:d2:ea: 45:df:b1:09:e4:07:de:c0:1d:9a:15:be:ef:7a:b2:6a:e9:06: 8b:90:38:aa:54:bd:e1:75:57:f1:ce:e5:70:55:f1:11:e1:b1: ef:4a:6a:b2:29:ab:dd:62:2c:63:ba:b0:92:8f:3b:99:09:4b: 19:e5:84:b0:07:24:b8:16:02:13:f6:e7:0d:39:d8:2b:d7:55: 4b:d0:c5:86:28:33:f1:07:da:11:82:d2:ce:4b:a2:65:e4:d1: 83:4f:fe:b5:bc:52:94:47:b4:01:77:4c:fe:e4:12:5f:d9:65: 44:86:e1:15:98:eb:67:ee:c9:ed:3e:45:ca:2e:d8:fc:58:1b: 1a:c9:6a:ed:2f:57:f5:fc:dd:59:ee:f7:84:1e:01:f3:98:6e: c3:45:24:9b:13:55:c6:c0:07:70:68:13:ae:5d:23:b0:cd:fc: c0:a8:e9:10:41:2a:07:9a:97:4a:82:d7:db:9a:de:a6:85:4a: e1:bb:21:04:5f:f5:05:01:61:8c:a6:14:0e:67:1f:60:23:8d: 8d:5a:80:42:73:f3:f2:38:f9:76:6f:ea:0c:2e:b9:07:ba:d1: 36:44:6b:2b:44:ad:5d:1e:20:c0:be:68:94:79:a7:64:0f:21: 5b:c3:b3:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhty7N6WyMpZ9MioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgwNFoXDTI1MDcyMzExMDgwNFowLzEtMCsGA1UEAxMk NjQ4YWNkN2MtYTYyNS00Y2QxLWJlMzAtOTlmNTA4YTQwYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuJacHjigbAOMpqplTnaanZ332MDORwjJap9 78MsC1FN7AoLHwkghvnjRLpNK2KZX6uLbglJNb36m/cRNjI6F2zn0yxbFsxIvmaE YV2dWvsEnW+ndkwfj2a2udoqGKH2b6f/k+xethJ0+9yQ5QfdxJRuJhPpwrv68Vcd vfhnZHdM1OxKatzbQhGmxsvMXZnlRkiKcpuIoZOYIcAqSUkZ/COZXejRH7mReQmK pz2RY592cCGBbbcWT1pbhouAZZVkNDHu2C+pCXD9jfHB0SOxTWpT3Tt9gw7YazVW OQPOMQAVKPH5RNikymBn3KizzmrDrk6fIXfJ4lfELVfCd7mXZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ7T9coV9X+gHq/FwpTbQDHC2N7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmY5NmM0NjAtOTA5ZS0z NWY3LWEzNjQtMzc4OTkzOWEwMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjdjJywjEQ6ASGUNFXK+q3S6kXfsQnkB97AHZoVvu96smrpBouQOKpU veF1V/HO5XBV8RHhse9KarIpq91iLGO6sJKPO5kJSxnlhLAHJLgWAhP25w052CvX VUvQxYYoM/EH2hGC0s5LomXk0YNP/rW8UpRHtAF3TP7kEl/ZZUSG4RWY62fuye0+ Rcou2PxYGxrJau0vV/X83Vnu94QeAfOYbsNFJJsTVcbAB3BoE65dI7DN/MCo6RBB Kgeal0qC19ua3qaFSuG7IQRf9QUBYYymFA5nH2AjjY1agEJz8/I4+XZv6gwuuQe6 0TZEaytErV0eIMC+aJR5p2QPIVvDs4U= -----END CERTIFICATE-----Generated at Sun Jun 15 13:20:02 2025 by rpki-client