$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa File: c1625472-18de-3d1e-a0f1-7bbc7f729425.roa (raw, json) Hash identifier: idaHGB9EvLcim2CSeaaFDT3c8OenM6hjHUrbkw71PzQ= Subject key identifier: D9:D9:3C:A4:FC:21:44:A3:25:59:94:3D:30:73:56:64:52:6C:0D:13 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B4185E3CD1FC12C2130180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa Signing time: Thu 24 Apr 2025 11:01:50 +0000 ROA not before: Thu 24 Apr 2025 11:01:50 +0000 ROA not after: Wed 23 Jul 2025 11:01:50 +0000 asID: 12041 IP address blocks: 65.22.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:18:5e:3c:d1:fc:12:c2:13:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:01:50 2025 GMT Not After : Jul 23 11:01:50 2025 GMT Subject: CN=127ef28b-e49c-486b-b5c2-e72fec9efd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:87:10:7c:73:05:97:06:c6:e5:44:c7:80: d5:d3:d7:90:dd:6b:24:46:c0:37:84:84:35:57:d3: 88:ec:29:bc:09:f0:3f:db:1c:74:72:7b:60:13:f4: 34:8d:cb:ae:08:de:38:55:9a:57:d8:fc:7d:9d:69: 97:bc:7f:e9:72:40:5b:6e:44:ae:3c:d9:de:9b:8e: b1:0e:2f:db:6e:3e:f1:e7:68:c7:3d:1b:13:7f:69: b7:4f:c0:95:81:80:2e:a3:f3:b6:69:3d:56:99:6b: 9e:b6:34:05:2b:dc:f0:d9:81:59:82:9e:70:05:81: 71:18:a4:03:5c:b9:00:16:a4:64:17:8d:4c:28:0f: 07:67:0c:34:cb:71:7e:64:a3:be:10:28:76:1e:3d: 21:81:2a:df:25:e2:68:1f:6a:db:19:20:a4:0e:31: ea:fa:86:85:71:47:dc:bb:15:68:d4:1f:de:43:52: d2:7e:02:27:3a:cf:73:1d:db:1f:09:a9:12:ff:ed: ab:d5:c2:14:da:6d:ac:6f:48:39:82:3c:5e:2e:c5: 47:86:26:38:4e:10:c5:f6:4d:56:18:05:3d:a3:88: f1:6e:3f:2d:a4:28:45:f6:f9:bc:c2:5b:6b:cc:15: a9:8d:28:a6:13:8d:58:01:1a:52:cc:9b:bf:e9:c5: 06:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D9:3C:A4:FC:21:44:A3:25:59:94:3D:30:73:56:64:52:6C:0D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:a3:c2:b3:9a:ae:fc:eb:d1:3b:23:45:06:8f:c7:7d:87:af: 19:51:96:6e:7e:4e:b7:92:da:b4:c1:00:94:8e:dc:c7:06:cb: 83:1d:26:f0:01:1c:cf:d3:75:53:08:81:c5:6c:b5:d6:8b:25: b2:22:78:9d:a3:c9:87:0c:0b:67:67:b3:6e:09:73:1e:7b:d6: 90:43:43:8b:46:f6:91:d1:9a:cd:fd:19:ef:b0:e6:9c:22:10: ec:66:52:23:dd:1c:ad:d4:33:69:10:a4:3e:d5:ed:67:04:bc: 53:d3:a6:56:a2:6e:cf:04:91:24:51:cd:17:b6:fb:6b:32:5f: e0:80:f3:76:52:a7:88:1a:15:af:4e:d7:80:62:dd:7e:cf:61: d1:7e:58:be:8b:b1:4b:3e:24:0c:08:43:6f:2b:b6:1d:bb:8b: 2d:72:63:4b:d6:a9:0f:f2:12:68:ef:95:9a:31:86:7b:52:23: 40:d2:2e:bc:b0:09:eb:5f:e6:cf:e3:6f:f7:ae:8b:7a:8e:59: c4:f9:b9:92:05:51:9f:ef:37:0a:19:3d:e4:43:2e:72:91:24: 91:b5:7c:13:0f:29:82:86:f4:84:e4:fc:c5:4b:fd:26:84:99: 88:58:6d:6a:5f:54:fa:2d:44:6a:4c:46:67:10:f4:04:08:15: 6f:66:73:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtBhePNH8EsITAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDE1MFoXDTI1MDcyMzExMDE1MFowLzEtMCsGA1UEAxMk MTI3ZWYyOGItZTQ5Yy00ODZiLWI1YzItZTcyZmVjOWVmZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstCHEHxzBZcGxuVEx4DV09eQ3WskRsA3hIQ1 V9OI7Cm8CfA/2xx0cntgE/Q0jcuuCN44VZpX2Px9nWmXvH/pckBbbkSuPNnem46x Di/bbj7x52jHPRsTf2m3T8CVgYAuo/O2aT1WmWuetjQFK9zw2YFZgp5wBYFxGKQD XLkAFqRkF41MKA8HZww0y3F+ZKO+ECh2Hj0hgSrfJeJoH2rbGSCkDjHq+oaFcUfc uxVo1B/eQ1LSfgInOs9zHdsfCakS/+2r1cIU2m2sb0g5gjxeLsVHhiY4ThDF9k1W GAU9o4jxbj8tpChF9vm8wltrzBWpjSimE41YARpSzJu/6cUGQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnZPKT8IUSjJVmUPTBzVmRSbA0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzE2MjU0NzItMThkZS0z ZDFlLWEwZjEtN2JiYzdmNzI5NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKujwrOarvzr0TsjRQaPx32HrxlRlm5+TreS2rTBAJSO3McGy4MdJvAB HM/TdVMIgcVstdaLJbIieJ2jyYcMC2dns24Jcx571pBDQ4tG9pHRms39Ge+w5pwi EOxmUiPdHK3UM2kQpD7V7WcEvFPTplaibs8EkSRRzRe2+2syX+CA83ZSp4gaFa9O 14Bi3X7PYdF+WL6LsUs+JAwIQ28rth27iy1yY0vWqQ/yEmjvlZoxhntSI0DSLryw Cetf5s/jb/eui3qOWcT5uZIFUZ/vNwoZPeRDLnKRJJG1fBMPKYKG9ITk/MVL/SaE mYhYbWpfVPotRGpMRmcQ9AQIFW9mc90= -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:11 2025 by rpki-client