$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa File: c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa (raw, json) Hash identifier: EvKHDxPu5hQzB+ii1czBwBsar0XM6ugLhJ8AJCk96OY= Subject key identifier: 49:AA:6A:C6:6C:9B:8A:DF:0C:12:A5:36:B9:5C:1F:8A:AE:7E:44:01 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B4474A1D48D0E09082E800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa Signing time: Thu 24 Apr 2025 11:02:12 +0000 ROA not before: Thu 24 Apr 2025 11:02:12 +0000 ROA not after: Wed 23 Jul 2025 11:02:12 +0000 asID: 12041 IP address blocks: 65.22.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:47:4a:1d:48:d0:e0:90:82:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:02:12 2025 GMT Not After : Jul 23 11:02:12 2025 GMT Subject: CN=0199e2a3-22d8-4c6e-af1d-c544d0454ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ab:c3:b0:c3:22:f8:b2:19:7b:77:7c:ca:99: 44:b1:9e:b1:da:b0:b1:bd:c5:29:0e:65:03:88:f0: 3e:07:24:c6:8d:3f:9a:6b:8b:57:8e:0a:61:23:03: 28:3d:4f:fd:95:7e:51:ec:81:f4:ae:a9:45:1c:24: a4:24:73:b7:a4:e2:b5:c6:fb:bb:fa:43:05:50:bb: 55:17:27:ac:eb:36:e4:72:4a:41:7c:89:8c:ed:73: 27:fa:62:36:85:49:73:93:16:bc:d3:57:d3:eb:30: cd:e4:ad:1e:83:91:57:86:da:56:e2:24:53:26:94: 56:8a:8b:6c:03:5d:16:0e:35:5f:4c:47:ce:50:77: 00:5d:91:67:c7:49:bf:77:f0:c4:bc:df:ee:b1:cf: 30:83:3f:5a:b1:f7:61:b5:bc:78:6c:37:81:4f:d5: 22:83:43:9a:53:9c:2b:82:09:3d:c1:9b:dc:f9:d8: 18:96:da:f8:8f:7f:3d:77:df:d8:01:1c:5d:cc:99: 35:ca:a2:6a:a5:72:3e:e2:63:74:d8:47:61:71:4f: 21:33:7c:2b:10:1c:9c:39:29:c1:7a:ed:e8:57:2e: 23:bc:06:06:de:e4:30:b2:77:83:c9:3b:6f:23:b3: bd:af:84:55:b7:e8:f2:4a:e7:fd:30:62:f8:9d:1b: 31:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AA:6A:C6:6C:9B:8A:DF:0C:12:A5:36:B9:5C:1F:8A:AE:7E:44:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4a:1b:51:dc:42:74:6c:7a:84:b7:51:06:b7:6c:6c:55:f0: ea:7e:ac:7f:8a:15:79:d9:f2:b1:27:0f:21:43:ff:64:4f:cb: d7:a3:62:96:8b:27:d1:56:2e:11:84:fc:3c:5f:54:67:35:6c: 21:66:da:5a:e9:e5:c9:ef:db:76:5c:3d:d7:5b:7c:7f:28:a6: d5:b5:ad:04:dc:33:ea:04:32:24:7a:47:b8:b6:08:9e:b2:b4: 92:f0:22:b3:9c:b4:2c:dd:8e:87:bc:d9:66:f8:18:dd:ad:e9: 86:b3:d6:3b:21:61:58:51:41:cf:67:be:b9:63:89:fb:d1:44: 9a:5f:3e:a1:5f:a4:15:7a:74:17:eb:d7:30:bf:ea:a0:34:d9: 92:81:8a:0f:bc:09:b8:ce:f9:28:41:ae:2e:6a:11:71:e7:e9: 20:89:68:33:08:2c:a2:c0:85:ce:eb:fd:ed:d1:07:c1:75:1c: 82:49:cc:ac:8c:b2:35:5f:ef:72:17:d2:98:c4:2f:3f:7c:ec: b8:96:b1:cb:c7:a3:dd:c9:b5:ce:b3:97:31:58:43:8a:2c:83: 52:d8:65:41:fe:be:6f:44:f0:d0:9f:66:95:e7:32:19:38:9d: 7a:f9:bb:13:4c:d5:bc:3e:c4:61:90:44:c9:1c:0c:19:1a:63: 8c:23:0a:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtEdKHUjQ4JCC6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDIxMloXDTI1MDcyMzExMDIxMlowLzEtMCsGA1UEAxMk MDE5OWUyYTMtMjJkOC00YzZlLWFmMWQtYzU0NGQwNDU0YWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6vDsMMi+LIZe3d8yplEsZ6x2rCxvcUpDmUD iPA+ByTGjT+aa4tXjgphIwMoPU/9lX5R7IH0rqlFHCSkJHO3pOK1xvu7+kMFULtV Fyes6zbkckpBfImM7XMn+mI2hUlzkxa801fT6zDN5K0eg5FXhtpW4iRTJpRWiots A10WDjVfTEfOUHcAXZFnx0m/d/DEvN/usc8wgz9asfdhtbx4bDeBT9Uig0OaU5wr ggk9wZvc+dgYltr4j389d9/YARxdzJk1yqJqpXI+4mN02EdhcU8hM3wrEBycOSnB eu3oVy4jvAYG3uQwsneDyTtvI7O9r4RVt+jySuf9MGL4nRsxoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmqasZsm4rfDBKlNrlcH4qufkQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzQ5YTdhYmItYzcyYy0z OWRiLThlMTUtYzJhNmY3YzM0YzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZKG1HcQnRseoS3UQa3bGxV8Op+rH+KFXnZ8rEnDyFD/2RPy9ejYpaL J9FWLhGE/DxfVGc1bCFm2lrp5cnv23ZcPddbfH8optW1rQTcM+oEMiR6R7i2CJ6y tJLwIrOctCzdjoe82Wb4GN2t6Yaz1jshYVhRQc9nvrljifvRRJpfPqFfpBV6dBfr 1zC/6qA02ZKBig+8CbjO+ShBri5qEXHn6SCJaDMILKLAhc7r/e3RB8F1HIJJzKyM sjVf73IX0pjELz987LiWscvHo93Jtc6zlzFYQ4osg1LYZUH+vm9E8NCfZpXnMhk4 nXr5uxNM1bw+xGGQRMkcDBkaY4wjCp4= -----END CERTIFICATE-----Generated at Wed Apr 30 00:09:41 2025 by rpki-client