$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c21f1766-fc74-3a08-ba8e-0dd33437395e.roa File: c21f1766-fc74-3a08-ba8e-0dd33437395e.roa (raw, json) Hash identifier: 3L+62uBhAz8E7alKTQZ908ddBs83daFaWwnaSGoj0Dk= Subject key identifier: 9F:8C:DC:15:BE:0E:30:21:92:4E:70:ED:22:DA:BE:7D:A7:5A:17:B6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7F29BDDB09D7D4D498F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c21f1766-fc74-3a08-ba8e-0dd33437395e.roa Signing time: Thu 24 Apr 2025 11:09:36 +0000 ROA not before: Thu 24 Apr 2025 11:09:36 +0000 ROA not after: Wed 23 Jul 2025 11:09:36 +0000 asID: 12041 IP address blocks: 65.22.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:f2:9b:dd:b0:9d:7d:4d:49:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:36 2025 GMT Not After : Jul 23 11:09:36 2025 GMT Subject: CN=7cdb94d6-5583-42c0-99b2-f04807b7d0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:67:64:e8:51:ae:27:10:51:d6:90:a7:76:dd: 93:79:4e:09:09:6a:db:7f:cd:32:97:ca:1f:72:3b: c7:3f:71:19:8c:00:38:8b:84:f1:2a:28:85:ef:1b: bb:a1:59:5a:a0:fb:ee:af:89:e7:5d:b5:58:5f:2c: 8a:29:f9:13:48:bf:84:bc:5e:f8:d4:d4:38:88:a9: e2:5f:b6:6e:4d:a3:9f:79:49:38:2f:43:10:25:0f: 0c:b0:96:75:9a:7b:50:9f:ef:12:d6:a9:0f:a4:eb: d0:7c:d3:f1:38:cd:e2:f7:99:bc:01:fa:8e:78:84: b4:5e:e8:8d:19:47:23:51:7d:39:29:8a:47:3c:ed: a0:55:25:df:c3:af:76:6a:48:e8:dc:42:36:34:4c: 9a:d0:0f:bd:ed:ba:c1:b3:ac:78:f4:69:e4:38:ad: 32:da:c6:ab:16:94:a8:15:79:04:06:1c:6f:16:ce: af:a3:fa:93:57:db:2d:c1:9d:a7:16:f4:ab:c7:94: bd:ac:9d:82:3b:7f:f4:02:1d:5d:c6:ed:ef:99:a0: 55:71:d4:50:4f:a7:b7:7d:16:d9:3e:66:ac:89:83: c9:ba:20:30:3e:d7:0a:0e:61:76:d9:f5:62:d9:81: dd:34:4a:d9:08:08:22:fa:5c:6b:3b:58:ec:b8:8b: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8C:DC:15:BE:0E:30:21:92:4E:70:ED:22:DA:BE:7D:A7:5A:17:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c21f1766-fc74-3a08-ba8e-0dd33437395e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:95:09:86:04:f7:ea:ba:e3:c5:d0:c1:58:25:ea:69:82:a1: 60:23:7b:e5:84:bf:16:dd:d4:ce:16:75:e9:7c:9c:fb:58:25: 21:5a:94:ea:f9:76:2a:50:66:a9:e3:3b:37:03:ba:b7:d1:6a: dd:b3:77:25:b6:85:ca:ba:c6:c7:33:1c:65:57:5d:3d:13:e1: 1a:f2:e0:b9:f3:94:43:a0:7c:ef:58:af:36:76:ea:d6:3d:a5: 9c:87:8e:ab:27:14:dc:36:54:a6:00:0c:85:ba:5c:12:75:db: 00:fc:81:26:f4:8d:fb:93:36:ba:bd:d4:1f:c8:af:ee:5e:49: dc:fe:74:fe:e5:f5:71:a9:53:5f:2c:12:f0:b9:ad:66:7b:41: 18:45:13:ff:3c:2b:a5:23:e2:29:81:cc:82:c7:cc:57:75:ca: 31:86:3e:47:52:72:9b:20:17:1f:fc:85:0c:3d:ed:cb:6f:e3: c1:35:ee:18:94:97:67:14:fb:cd:a4:b4:94:84:70:78:6d:8b: da:51:46:f3:ef:0c:16:68:20:4f:d7:58:4b:00:01:8b:71:55: 4c:d8:16:af:40:87:f7:6e:02:e9:10:2d:6a:65:e5:2a:6a:88: 9e:0c:ac:49:31:85:84:41:4c:5d:d1:b8:0b:03:a2:b8:0c:98: 20:ce:de:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht/Kb3bCdfU1Jj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkzNloXDTI1MDcyMzExMDkzNlowLzEtMCsGA1UEAxMk N2NkYjk0ZDYtNTU4My00MmMwLTk5YjItZjA0ODA3YjdkMGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGdk6FGuJxBR1pCndt2TeU4JCWrbf80yl8of cjvHP3EZjAA4i4TxKiiF7xu7oVlaoPvur4nnXbVYXyyKKfkTSL+EvF741NQ4iKni X7ZuTaOfeUk4L0MQJQ8MsJZ1mntQn+8S1qkPpOvQfNPxOM3i95m8AfqOeIS0XuiN GUcjUX05KYpHPO2gVSXfw692akjo3EI2NEya0A+97brBs6x49GnkOK0y2sarFpSo FXkEBhxvFs6vo/qTV9stwZ2nFvSrx5S9rJ2CO3/0Ah1dxu3vmaBVcdRQT6e3fRbZ PmasiYPJuiAwPtcKDmF22fVi2YHdNErZCAgi+lxrO1jsuIsXnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+M3BW+DjAhkk5w7SLavn2nWhe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzIxZjE3NjYtZmM3NC0z YTA4LWJhOGUtMGRkMzM0MzczOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKVCYYE9+q648XQwVgl6mmCoWAje+WEvxbd1M4Wdel8nPtYJSFalOr5 dipQZqnjOzcDurfRat2zdyW2hcq6xsczHGVXXT0T4Rry4LnzlEOgfO9YrzZ26tY9 pZyHjqsnFNw2VKYADIW6XBJ12wD8gSb0jfuTNrq91B/Ir+5eSdz+dP7l9XGpU18s EvC5rWZ7QRhFE/88K6Uj4imBzILHzFd1yjGGPkdScpsgFx/8hQw97ctv48E17hiU l2cU+82ktJSEcHhti9pRRvPvDBZoIE/XWEsAAYtxVUzYFq9Ah/duAukQLWpl5Spq iJ4MrEkxhYRBTF3RuAsDorgMmCDO3h0= -----END CERTIFICATE-----Generated at Tue Apr 29 14:59:44 2025 by rpki-client