$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c2045b19-0bf1-31bb-9b4b-b900c0c92a32.roa File: c2045b19-0bf1-31bb-9b4b-b900c0c92a32.roa (raw, json) Hash identifier: JC3rhHWCdxjSFt/dg0MSH1wCM+E9oPGSnEIkMJocjKU= Subject key identifier: 1E:7F:E8:EE:0B:ED:76:1E:7B:66:34:33:AA:6A:1A:58:2B:13:E6:BE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B415A14D77EAD5F231B600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c2045b19-0bf1-31bb-9b4b-b900c0c92a32.roa Signing time: Thu 24 Apr 2025 11:01:49 +0000 ROA not before: Thu 24 Apr 2025 11:01:49 +0000 ROA not after: Wed 23 Jul 2025 11:01:49 +0000 asID: 12041 IP address blocks: 65.22.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:15:a1:4d:77:ea:d5:f2:31:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:01:49 2025 GMT Not After : Jul 23 11:01:49 2025 GMT Subject: CN=fd306056-5142-43d9-971a-e555f1d88aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:30:5b:42:8b:0b:e3:fa:a5:14:ce:7b:83: 64:34:42:d0:11:a9:83:82:bb:b3:0e:28:c0:ee:3e: 1e:39:e4:0d:40:0b:b8:02:1f:69:6a:1a:f4:24:d3: ea:55:9a:aa:0c:58:58:84:2a:62:b1:d2:60:2d:d6: a6:43:01:2b:e9:91:9f:4b:33:05:9b:f8:d8:93:06: bf:8a:25:78:17:1f:95:43:35:78:51:03:06:29:f3: 37:c8:21:38:48:1b:ee:16:cf:ed:77:88:0b:c8:26: 92:c6:68:4a:fe:e1:4b:27:02:d9:63:31:18:4a:18: b1:e9:0f:61:6d:01:be:59:6b:bd:56:bc:e1:a3:43: 9d:b2:2c:ca:01:b1:1c:45:8c:60:bd:76:90:da:bf: fc:45:b0:57:26:b0:a5:58:f2:78:ae:e8:6d:49:72: a0:43:05:28:e7:55:6d:86:33:44:e3:4a:82:14:56: 96:b1:a4:b8:c0:52:9a:76:46:3c:06:d4:c2:46:00: bc:42:83:a1:b1:b0:ff:24:22:df:31:f7:d1:76:b8: 79:15:8a:4a:b2:80:ae:78:e3:32:38:07:ff:a0:0f: a1:b7:70:59:49:57:ac:4f:1a:79:2e:1a:39:9a:4d: 1b:2d:5f:46:61:7c:18:2c:aa:b9:86:04:00:b8:3e: af:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7F:E8:EE:0B:ED:76:1E:7B:66:34:33:AA:6A:1A:58:2B:13:E6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c2045b19-0bf1-31bb-9b4b-b900c0c92a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a0:8d:4c:9c:d3:0b:3d:b5:a0:0f:a2:09:b7:18:a6:6b:35: d2:24:6c:94:84:36:b9:42:15:56:0d:1d:b7:c3:0d:82:d4:6b: 49:95:49:e2:1a:46:16:a0:54:b9:15:0b:4c:80:4d:fd:b5:b1: cc:94:12:1a:d2:45:db:55:27:6d:c1:1d:69:61:58:93:3f:17: bf:f8:b0:ab:4a:83:13:df:1f:66:c8:69:28:a9:dd:ef:58:63: 42:b2:65:dd:74:00:9a:7c:c5:ee:ff:5c:65:db:07:80:7a:2d: 0a:43:ff:d5:ec:e3:32:2e:60:a9:ba:d9:81:66:ae:17:00:11: b7:e1:cf:b0:42:69:02:e0:f5:b8:5f:e0:61:3f:78:ca:f5:65: f3:27:fc:04:6b:14:d8:66:3d:bb:a0:35:39:43:87:75:ee:92: 1f:c0:df:03:d1:30:b4:14:bd:6e:b6:84:25:c5:11:03:33:5c: 25:21:cf:8b:ec:ab:68:60:77:0a:b2:c8:98:00:01:3a:94:dc: 45:51:5f:9c:fc:e2:1c:ff:2c:3b:64:58:69:4d:4c:5f:dc:c9: b3:37:91:8b:de:54:2d:59:fc:e1:b5:f1:47:e9:c2:b2:38:c1: 68:e6:ba:3c:0b:69:fd:e3:b8:dd:58:63:a3:9b:09:06:46:2f: 87:0a:6c:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtBWhTXfq1fIxtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDE0OVoXDTI1MDcyMzExMDE0OVowLzEtMCsGA1UEAxMk ZmQzMDYwNTYtNTE0Mi00M2Q5LTk3MWEtZTU1NWYxZDg4YWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimUwW0KLC+P6pRTOe4NkNELQEamDgruzDijA 7j4eOeQNQAu4Ah9pahr0JNPqVZqqDFhYhCpisdJgLdamQwEr6ZGfSzMFm/jYkwa/ iiV4Fx+VQzV4UQMGKfM3yCE4SBvuFs/td4gLyCaSxmhK/uFLJwLZYzEYShix6Q9h bQG+WWu9Vrzho0OdsizKAbEcRYxgvXaQ2r/8RbBXJrClWPJ4ruhtSXKgQwUo51Vt hjNE40qCFFaWsaS4wFKadkY8BtTCRgC8QoOhsbD/JCLfMffRdrh5FYpKsoCueOMy OAf/oA+ht3BZSVesTxp5Lho5mk0bLV9GYXwYLKq5hgQAuD6vGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5/6O4L7XYee2Y0M6pqGlgrE+a+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzIwNDViMTktMGJmMS0z MWJiLTliNGItYjkwMGMwYzkyYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmgjUyc0ws9taAPogm3GKZrNdIkbJSENrlCFVYNHbfDDYLUa0mVSeIa RhagVLkVC0yATf21scyUEhrSRdtVJ23BHWlhWJM/F7/4sKtKgxPfH2bIaSip3e9Y Y0KyZd10AJp8xe7/XGXbB4B6LQpD/9Xs4zIuYKm62YFmrhcAEbfhz7BCaQLg9bhf 4GE/eMr1ZfMn/ARrFNhmPbugNTlDh3Xukh/A3wPRMLQUvW62hCXFEQMzXCUhz4vs q2hgdwqyyJgAATqU3EVRX5z84hz/LDtkWGlNTF/cybM3kYveVC1Z/OG18UfpwrI4 wWjmujwLaf3juN1YY6ObCQZGL4cKbP0= -----END CERTIFICATE-----Generated at Sun Jun 15 12:01:31 2025 by rpki-client