$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa File: bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa (raw, json) Hash identifier: rqihD5S5J7b5P574HNOz191kwd+264AJ77Q1bWB11pY= Subject key identifier: 62:79:88:8A:D9:78:5D:AD:3F:5C:29:F7:25:81:90:8C:B8:A5:98:5A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B73D68D0D7678FD44E9680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa Signing time: Thu 24 Apr 2025 11:08:10 +0000 ROA not before: Thu 24 Apr 2025 11:08:10 +0000 ROA not after: Wed 23 Jul 2025 11:08:10 +0000 asID: 12041 IP address blocks: 65.22.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:3d:68:d0:d7:67:8f:d4:4e:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:10 2025 GMT Not After : Jul 23 11:08:10 2025 GMT Subject: CN=b9fd9243-e873-46a9-ba68-d069d8934e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:af:7e:a4:a6:96:22:45:af:cd:8c:91:db: 2a:85:70:34:da:33:d7:d5:5b:dc:da:5b:a0:fc:79: 1c:22:42:cf:f2:06:b1:4c:e9:5b:10:30:6e:b7:f7: b1:cc:db:69:6f:3b:ee:3f:3b:b1:af:aa:c1:b1:09: aa:0c:19:ee:c2:ec:84:9c:f9:87:40:d2:33:96:dc: 4f:14:bb:53:38:7c:d1:3b:af:88:57:81:5f:1a:79: 9f:18:cd:b4:95:ff:3c:8c:d5:be:29:0b:17:9a:d3: dc:31:a0:74:19:fa:d0:50:01:27:81:7c:7d:65:7b: 7c:1c:8c:88:00:79:72:20:41:0b:68:5d:a7:25:db: b1:ab:44:71:ca:04:f2:19:f9:94:75:94:dc:df:92: 1a:fb:fd:de:c4:60:c9:21:f4:bd:75:3f:bd:47:40: 82:c2:68:74:39:4f:eb:7d:db:1a:c0:fe:54:fe:50: 56:64:61:6a:a2:30:72:af:34:76:c4:16:58:10:6c: 91:6c:1b:3a:d1:a9:ab:16:f9:dd:80:e6:d2:97:73: 3e:b1:1b:0a:ee:12:54:d2:07:84:3e:91:36:e2:42: 9a:56:17:4b:27:77:22:88:2d:db:85:3e:8a:08:49: de:b2:9c:90:c5:40:f6:35:4e:6c:ee:23:54:58:e0: 08:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:79:88:8A:D9:78:5D:AD:3F:5C:29:F7:25:81:90:8C:B8:A5:98:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5a:0e:19:21:a5:cc:8f:1d:ca:a8:44:b7:98:f2:ca:2d:2e: 7a:84:f2:59:28:9a:ef:52:d9:e3:52:89:43:47:a3:1a:71:e1: cb:fd:e2:03:38:8b:57:84:ea:72:fd:a2:d5:b6:97:a3:b2:5c: de:9d:63:13:8e:5e:c8:cd:e4:23:b1:fc:7f:bc:7d:aa:dd:19: 6a:40:c3:44:5d:b5:94:ce:20:0c:f2:a0:7d:98:50:1e:be:fe: f1:31:7d:aa:a0:ad:10:8f:94:d3:fd:b5:5a:fe:ec:5d:d8:8a: 28:20:b2:0f:38:c9:be:9d:a7:fd:98:c2:3e:bb:63:bb:f1:ba: e7:d2:c5:83:e1:b6:2a:17:93:18:68:d0:f5:0c:b5:db:05:e9: 1f:60:a3:94:23:96:2f:45:2f:bd:8b:f3:97:6e:82:1c:3a:87: 10:c6:6f:12:76:29:1f:38:42:5f:60:9f:56:93:5a:9d:0e:59: 99:cb:89:66:65:3a:05:75:36:bb:f9:0c:30:98:61:b0:c0:11: 8d:23:d0:33:08:a1:25:d8:db:46:d2:e6:b2:69:d0:ee:eb:d7: 09:5a:9d:1c:42:43:6d:28:c3:4f:20:5c:8e:90:a3:4d:60:2f: bb:33:18:23:9f:f1:80:d7:2b:cd:1c:15:7c:70:36:f1:77:2a: 5d:bd:78:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtz1o0Ndnj9ROloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgxMFoXDTI1MDcyMzExMDgxMFowLzEtMCsGA1UEAxMk YjlmZDkyNDMtZTg3My00NmE5LWJhNjgtZDA2OWQ4OTM0ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQqvfqSmliJFr82MkdsqhXA02jPX1Vvc2lug /HkcIkLP8gaxTOlbEDBut/exzNtpbzvuPzuxr6rBsQmqDBnuwuyEnPmHQNIzltxP FLtTOHzRO6+IV4FfGnmfGM20lf88jNW+KQsXmtPcMaB0GfrQUAEngXx9ZXt8HIyI AHlyIEELaF2nJduxq0RxygTyGfmUdZTc35Ia+/3exGDJIfS9dT+9R0CCwmh0OU/r fdsawP5U/lBWZGFqojByrzR2xBZYEGyRbBs60amrFvndgObSl3M+sRsK7hJU0geE PpE24kKaVhdLJ3ciiC3bhT6KCEnespyQxUD2NU5s7iNUWOAInQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJ5iIrZeF2tP1wp9yWBkIy4pZhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmZmNTNmYTEtNzAyYy0z MjY1LWI4ZmYtZDFkYWU5NmQ2YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1aDhkhpcyPHcqoRLeY8sotLnqE8lkomu9S2eNSiUNHoxpx4cv94gM4 i1eE6nL9otW2l6OyXN6dYxOOXsjN5COx/H+8fardGWpAw0RdtZTOIAzyoH2YUB6+ /vExfaqgrRCPlNP9tVr+7F3Yiiggsg84yb6dp/2Ywj67Y7vxuufSxYPhtioXkxho 0PUMtdsF6R9go5Qjli9FL72L85dughw6hxDGbxJ2KR84Ql9gn1aTWp0OWZnLiWZl OgV1Nrv5DDCYYbDAEY0j0DMIoSXY20bS5rJp0O7r1wlanRxCQ20ow08gXI6Qo01g L7szGCOf8YDXK80cFXxwNvF3Kl29eBU= -----END CERTIFICATE-----Generated at Tue Apr 29 12:51:33 2025 by rpki-client