$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfc66b7e-e101-360f-83f7-999dd47957b8.roa File: bfc66b7e-e101-360f-83f7-999dd47957b8.roa (raw, json) Hash identifier: 20vrkklCshRapjsHjXJXrg86J6rHuxt56KSvZsYfpyo= Subject key identifier: B7:0D:AF:A3:0A:64:1B:F5:9B:E6:0B:6D:AB:35:18:5B:F0:22:09:12 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B847965BF9C8FC4E8FD7C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfc66b7e-e101-360f-83f7-999dd47957b8.roa Signing time: Thu 24 Apr 2025 11:10:16 +0000 ROA not before: Thu 24 Apr 2025 11:10:16 +0000 ROA not after: Wed 23 Jul 2025 11:10:16 +0000 asID: 12041 IP address blocks: 65.22.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:47:96:5b:f9:c8:fc:4e:8f:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:16 2025 GMT Not After : Jul 23 11:10:16 2025 GMT Subject: CN=03ead95a-da6b-4ac3-8dc3-ccba3223e0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:4b:03:d0:19:d0:d6:57:8d:37:ce:f5:49: 88:9b:42:d5:84:f8:1c:7d:75:3d:cb:c4:3c:d0:d0: 69:57:e9:7f:5a:a6:95:0e:f6:1a:9a:75:99:59:d6: 39:76:b4:20:d8:32:68:b1:bf:98:f5:32:1d:0a:01: 78:ad:2f:5d:1d:29:7b:84:89:70:98:84:1d:f0:fe: 49:66:52:48:c9:27:4d:45:09:c4:f2:7f:a7:4e:e1: 44:64:a6:82:c9:60:f8:b6:14:b5:ae:6b:50:b0:b2: 21:b4:ff:59:ae:7b:2d:3d:a1:1d:36:e4:b2:ab:70: 1e:8b:ec:b8:35:ce:e0:db:41:a0:01:38:b9:29:bc: 66:9f:70:91:be:b0:19:8e:24:a5:f6:fe:b4:ad:c3: a5:6c:d9:5d:4d:4f:8c:fb:14:20:a7:17:b3:28:c9: 45:d6:ef:fa:e3:40:2e:14:fd:2c:44:77:60:1c:b4: 17:a7:70:e7:e7:cc:b2:f4:03:28:93:90:ae:0d:d5: a6:f9:55:fc:f3:2e:32:ca:9a:0f:57:39:d0:2c:bb: d5:aa:fc:3c:92:e8:e8:74:65:2b:96:ff:71:5f:35: 22:a8:c4:49:ec:a5:8b:c1:f6:c6:cc:0e:1c:4f:1d: d7:e6:c1:10:00:2d:f6:2e:b8:3e:dc:e3:d2:aa:27: c6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0D:AF:A3:0A:64:1B:F5:9B:E6:0B:6D:AB:35:18:5B:F0:22:09:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfc66b7e-e101-360f-83f7-999dd47957b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b6:4f:7a:00:c4:9c:7f:73:08:bd:3f:1f:cf:14:0a:9e:2a: 8c:8f:33:01:50:6d:f6:2a:75:25:5b:64:80:37:30:bd:6c:2b: 49:e8:f0:9c:01:ab:33:54:82:87:7e:b0:a1:12:b7:f5:d8:4b: 98:81:07:88:1d:78:dc:40:2b:21:9a:f7:d2:6c:fe:e7:83:6a: 8f:39:2b:6f:ab:e1:e1:35:94:d6:ba:30:ed:f5:fd:f1:ca:b8: 89:6c:26:ee:94:6e:54:12:40:33:e0:bd:2d:68:df:7a:db:85: 92:e4:8a:e4:89:1c:63:82:31:57:30:dd:ab:e4:7a:0f:6b:25: c4:4b:aa:80:8b:4c:ad:35:6d:7b:c1:65:85:a3:10:57:22:22: 11:ac:c4:1e:c1:d3:9c:64:a5:af:02:fe:c9:51:fd:4b:06:b4: 5d:d0:ba:d7:5e:d8:4f:37:85:df:23:6f:4b:da:98:06:f1:c2: 5e:21:08:4a:6d:da:11:0e:5b:33:d6:f5:11:e9:ad:48:71:9e: 63:96:f7:7b:14:94:22:f5:b1:fe:08:1f:df:6c:22:71:fb:f8: ab:fc:19:06:8e:7e:3e:4b:5e:0a:fd:99:1a:73:b7:dd:f4:18: 00:0b:1c:58:05:39:5b:a0:c3:03:7f:93:67:ec:07:cb:7f:cb: dd:25:6d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuEeWW/nI/E6P18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAxNloXDTI1MDcyMzExMTAxNlowLzEtMCsGA1UEAxMk MDNlYWQ5NWEtZGE2Yi00YWMzLThkYzMtY2NiYTMyMjNlMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBRLA9AZ0NZXjTfO9UmIm0LVhPgcfXU9y8Q8 0NBpV+l/WqaVDvYamnWZWdY5drQg2DJosb+Y9TIdCgF4rS9dHSl7hIlwmIQd8P5J ZlJIySdNRQnE8n+nTuFEZKaCyWD4thS1rmtQsLIhtP9ZrnstPaEdNuSyq3Aei+y4 Nc7g20GgATi5Kbxmn3CRvrAZjiSl9v60rcOlbNldTU+M+xQgpxezKMlF1u/640Au FP0sRHdgHLQXp3Dn58yy9AMok5CuDdWm+VX88y4yypoPVznQLLvVqvw8kujodGUr lv9xXzUiqMRJ7KWLwfbGzA4cTx3X5sEQAC32Lrg+3OPSqifGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcNr6MKZBv1m+YLbas1GFvwIgkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmZjNjZiN2UtZTEwMS0z NjBmLTgzZjctOTk5ZGQ0Nzk1N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe2T3oAxJx/cwi9Px/PFAqeKoyPMwFQbfYqdSVbZIA3ML1sK0no8JwB qzNUgod+sKESt/XYS5iBB4gdeNxAKyGa99Js/ueDao85K2+r4eE1lNa6MO31/fHK uIlsJu6UblQSQDPgvS1o33rbhZLkiuSJHGOCMVcw3avkeg9rJcRLqoCLTK01bXvB ZYWjEFciIhGsxB7B05xkpa8C/slR/UsGtF3Qutde2E83hd8jb0vamAbxwl4hCEpt 2hEOWzPW9RHprUhxnmOW93sUlCL1sf4IH99sInH7+Kv8GQaOfj5LXgr9mRpzt930 GAALHFgFOVugwwN/k2fsB8t/y90lbZg= -----END CERTIFICATE-----Generated at Tue Apr 29 13:10:03 2025 by rpki-client