$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c07d0100-1923-3129-b2a4-2b90ba051615.roa File: c07d0100-1923-3129-b2a4-2b90ba051615.roa (raw, json) Hash identifier: Cog3F8Z3xsvkrrQsS0nLzNMsjHLU5cjZUB2R0DFhn1o= Subject key identifier: 66:A6:2B:02:3C:63:1A:73:96:C2:44:B1:2E:6F:9B:2A:8A:38:73:97 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7C7E8F1D3569965A05B00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c07d0100-1923-3129-b2a4-2b90ba051615.roa Signing time: Thu 24 Apr 2025 11:09:16 +0000 ROA not before: Thu 24 Apr 2025 11:09:16 +0000 ROA not after: Wed 23 Jul 2025 11:09:16 +0000 asID: 12041 IP address blocks: 65.22.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:c7:e8:f1:d3:56:99:65:a0:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:16 2025 GMT Not After : Jul 23 11:09:16 2025 GMT Subject: CN=988cee9d-0ea3-4c70-9df0-68447308ed6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:33:cb:ee:e8:a7:64:9a:f5:3e:b3:2f:44: ed:73:65:61:49:ee:b7:41:6e:1a:d6:d7:00:cc:02: ba:8b:8b:90:b1:43:c1:b8:88:8b:3b:87:b5:57:bb: d8:db:45:33:73:a3:33:e4:8f:7f:22:91:96:5a:18: b9:8a:be:a9:c6:8a:45:c2:af:09:36:36:4f:c8:e6: bf:4c:d7:30:4c:67:de:02:f8:11:6c:4c:50:dc:21: dc:6e:f3:47:f8:75:ef:0a:be:99:54:e4:f1:e9:71: 6d:8b:f4:1f:9d:41:97:61:37:82:84:86:25:93:84: 93:1c:68:00:73:3e:f2:2b:20:42:1d:8a:db:7d:c0: 52:ed:61:f0:ba:40:c8:c9:54:b3:ad:8c:c5:5f:6c: 5d:b6:ce:74:80:c9:a1:63:83:0d:59:5c:9b:5b:cd: 45:9a:62:ef:d2:2d:d1:50:f4:e6:03:e8:b2:7f:21: 62:41:72:20:69:9f:15:b3:09:8b:00:c5:bd:62:5a: 4c:bb:30:cc:ff:a8:02:57:30:9a:db:d3:07:f2:ad: 3a:2a:d8:1d:be:5d:7a:b4:4a:91:cb:7c:01:46:7f: 40:b6:8f:e6:f0:d3:c2:f4:1e:07:15:b9:c1:df:ff: 2e:02:f8:12:b9:6f:73:e7:13:f6:ee:b1:21:a6:3c: 36:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A6:2B:02:3C:63:1A:73:96:C2:44:B1:2E:6F:9B:2A:8A:38:73:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c07d0100-1923-3129-b2a4-2b90ba051615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9f:ee:c6:75:8b:68:f3:8a:90:15:f6:ad:46:94:4a:e6:a8: 97:75:84:f3:37:69:d5:e0:e7:5d:67:11:0f:cd:53:14:b6:44: a9:cd:32:8a:45:fe:b4:97:99:2f:93:6a:58:5b:22:bf:4d:a2: c7:54:fc:d4:01:db:5e:a0:f4:7b:66:11:02:f0:4c:d3:9c:65: 53:f0:da:c2:69:eb:8d:8d:e5:fd:9a:83:07:6c:75:df:16:45: af:d7:9a:96:bc:5c:95:56:29:10:bc:89:a4:cb:b3:3a:50:10: 33:14:d2:c2:55:8a:e7:0b:d7:68:cd:e7:a0:62:06:f0:a7:22: 56:c8:a9:cf:60:1a:a4:64:31:82:98:cf:b5:a2:77:8c:b1:e8: 45:31:9c:3b:74:d4:62:1f:4e:8f:47:4c:32:92:42:eb:d1:ef: ab:93:29:40:b7:36:14:55:1c:27:6e:7b:28:26:99:0a:93:2f: f3:2d:ac:f6:a1:e7:83:02:7a:33:79:85:f5:04:00:f6:a0:61: 7a:a0:79:c0:1a:8e:29:53:28:09:4b:33:af:9b:b8:b5:76:75: f7:25:7a:61:68:2e:bd:08:0f:fb:d7:3e:66:5e:9f:a6:91:08: 00:df:3d:81:3a:75:c1:10:7a:c9:3b:67:99:b2:25:ae:cb:1e: 22:0b:5c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht8fo8dNWmWWgWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkxNloXDTI1MDcyMzExMDkxNlowLzEtMCsGA1UEAxMk OTg4Y2VlOWQtMGVhMy00YzcwLTlkZjAtNjg0NDczMDhlZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJszy+7op2Sa9T6zL0Ttc2VhSe63QW4a1tcA zAK6i4uQsUPBuIiLO4e1V7vY20Uzc6Mz5I9/IpGWWhi5ir6pxopFwq8JNjZPyOa/ TNcwTGfeAvgRbExQ3CHcbvNH+HXvCr6ZVOTx6XFti/QfnUGXYTeChIYlk4STHGgA cz7yKyBCHYrbfcBS7WHwukDIyVSzrYzFX2xdts50gMmhY4MNWVybW81FmmLv0i3R UPTmA+iyfyFiQXIgaZ8VswmLAMW9YlpMuzDM/6gCVzCa29MH8q06Ktgdvl16tEqR y3wBRn9Ato/m8NPC9B4HFbnB3/8uAvgSuW9z5xP27rEhpjw2nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGamKwI8YxpzlsJEsS5vmyqKOHOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzA3ZDAxMDAtMTkyMy0z MTI5LWIyYTQtMmI5MGJhMDUxNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImf7sZ1i2jzipAV9q1GlErmqJd1hPM3adXg511nEQ/NUxS2RKnNMopF /rSXmS+TalhbIr9NosdU/NQB216g9HtmEQLwTNOcZVPw2sJp642N5f2agwdsdd8W Ra/Xmpa8XJVWKRC8iaTLszpQEDMU0sJViucL12jN56BiBvCnIlbIqc9gGqRkMYKY z7Wid4yx6EUxnDt01GIfTo9HTDKSQuvR76uTKUC3NhRVHCdueygmmQqTL/MtrPah 54MCejN5hfUEAPagYXqgecAajilTKAlLM6+buLV2dfclemFoLr0ID/vXPmZen6aR CADfPYE6dcEQesk7Z5myJa7LHiILXEc= -----END CERTIFICATE-----Generated at Tue Apr 29 12:12:44 2025 by rpki-client