$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6424d99-d68e-3dbd-94ad-39ec36944016.roa File: c6424d99-d68e-3dbd-94ad-39ec36944016.roa (raw, json) Hash identifier: 7ixPGDTkKBW2H3+1bazdILNDZzPneZP4JQOPfYnms9g= Subject key identifier: 54:89:07:D6:C8:EC:53:FF:B9:BB:AA:21:96:54:D5:60:F1:02:F0:EE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B78A85F1305645751B9CE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6424d99-d68e-3dbd-94ad-39ec36944016.roa Signing time: Thu 24 Apr 2025 11:08:47 +0000 ROA not before: Thu 24 Apr 2025 11:08:47 +0000 ROA not after: Wed 23 Jul 2025 11:08:47 +0000 asID: 12041 IP address blocks: 65.22.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:8a:85:f1:30:56:45:75:1b:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:47 2025 GMT Not After : Jul 23 11:08:47 2025 GMT Subject: CN=81c0d59e-5be2-4111-97fe-1bcdf3bbcc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f3:97:dc:ac:0b:c0:ae:fb:e2:7f:c3:e0:1c: 15:12:53:d2:9c:d8:f7:33:9f:71:a7:32:68:77:6c: 18:91:c1:54:60:bf:67:ad:fe:7f:83:8d:1e:ae:ac: 43:cf:ac:33:6b:e2:1e:58:13:3b:fb:70:8f:d8:21: b8:ec:9a:af:0c:53:ca:dc:5c:2c:35:68:dc:1d:87: c8:b1:f6:76:77:47:06:7c:6a:88:36:cf:f6:62:d2: 42:39:8b:80:9a:84:da:60:f6:8a:4a:38:df:b4:10: 25:db:94:88:1e:bf:8d:83:b1:3e:26:11:ab:13:43: c5:1b:bb:bb:39:62:06:cb:6c:11:30:91:53:1b:78: 2a:5a:dd:91:d7:11:23:19:99:64:71:d3:70:74:06: 52:6c:bf:f5:d8:26:bb:a8:a7:ac:e7:9e:63:20:df: 52:0d:1d:f7:7c:8b:81:64:d9:e8:c9:1e:5c:67:86: 89:ce:a1:aa:7f:2f:8b:ca:05:48:86:8c:bc:76:51: 45:82:4a:f4:43:b2:26:5e:2c:ed:3c:86:16:2f:df: 56:2b:62:2e:c1:9d:9d:47:05:92:a1:21:ce:80:bc: 7d:ce:9e:1c:15:e8:40:55:4e:b8:ff:16:26:10:cc: af:33:2c:cf:c9:41:dc:85:12:9e:18:a2:9e:e2:0f: b9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:89:07:D6:C8:EC:53:FF:B9:BB:AA:21:96:54:D5:60:F1:02:F0:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6424d99-d68e-3dbd-94ad-39ec36944016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8f:2d:7b:ad:ca:74:37:ac:b3:8a:58:85:0e:8d:5e:3c:44: 22:d7:d3:e5:73:a9:01:ce:b2:88:66:33:70:59:3c:61:48:de: 1f:b2:01:fe:51:7f:34:d3:e6:18:f9:9b:7c:83:48:89:5f:d2: 23:f1:96:6d:d1:37:bd:54:2c:e8:e8:9e:57:61:b0:f9:77:c2: 63:ea:c7:47:30:bf:11:69:07:53:e3:db:c7:ba:5d:4c:18:4c: 78:b8:a2:da:99:ff:ef:a0:bd:37:ff:a1:f2:bd:4a:a6:02:74: b7:4d:f7:0c:79:6a:a3:2a:2e:77:30:43:0a:e2:cd:6d:d6:a7: e1:7c:52:b8:bd:df:b8:1f:0d:51:45:71:48:61:42:6b:5a:cf: e7:42:f3:32:97:d6:07:e2:58:1f:6a:fb:e1:7d:1a:3a:d0:a5: 36:8d:a6:9f:ab:5d:0b:cf:f0:00:85:92:44:f6:08:27:88:fd: 04:1c:8c:c5:9e:24:6c:8e:7b:e0:c8:19:31:4e:bf:90:83:4b: 76:db:49:bf:70:f4:71:f5:d0:99:40:a3:4b:a9:8a:83:23:18: 0a:c1:8c:af:6e:97:45:5d:a0:48:b1:b9:b4:d6:cd:85:d2:9d: 0e:33:ec:7a:a6:2b:10:fc:c2:1c:1f:ad:2a:17:cf:f6:af:07: f4:66:65:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht4qF8TBWRXUbnOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg0N1oXDTI1MDcyMzExMDg0N1owLzEtMCsGA1UEAxMk ODFjMGQ1OWUtNWJlMi00MTExLTk3ZmUtMWJjZGYzYmJjYzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/OX3KwLwK774n/D4BwVElPSnNj3M59xpzJo d2wYkcFUYL9nrf5/g40erqxDz6wza+IeWBM7+3CP2CG47JqvDFPK3FwsNWjcHYfI sfZ2d0cGfGqINs/2YtJCOYuAmoTaYPaKSjjftBAl25SIHr+Ng7E+JhGrE0PFG7u7 OWIGy2wRMJFTG3gqWt2R1xEjGZlkcdNwdAZSbL/12Ca7qKes555jIN9SDR33fIuB ZNnoyR5cZ4aJzqGqfy+LygVIhoy8dlFFgkr0Q7ImXiztPIYWL99WK2IuwZ2dRwWS oSHOgLx9zp4cFehAVU64/xYmEMyvMyzPyUHchRKeGKKe4g+5hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSJB9bI7FP/ubuqIZZU1WDxAvDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzY0MjRkOTktZDY4ZS0z ZGJkLTk0YWQtMzllYzM2OTQ0MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSPLXutynQ3rLOKWIUOjV48RCLX0+VzqQHOsohmM3BZPGFI3h+yAf5R fzTT5hj5m3yDSIlf0iPxlm3RN71ULOjonldhsPl3wmPqx0cwvxFpB1Pj28e6XUwY THi4otqZ/++gvTf/ofK9SqYCdLdN9wx5aqMqLncwQwrizW3Wp+F8Uri937gfDVFF cUhhQmtaz+dC8zKX1gfiWB9q++F9GjrQpTaNpp+rXQvP8ACFkkT2CCeI/QQcjMWe JGyOe+DIGTFOv5CDS3bbSb9w9HH10JlAo0upioMjGArBjK9ul0VdoEixubTWzYXS nQ4z7HqmKxD8whwfrSoXz/avB/RmZSk= -----END CERTIFICATE-----Generated at Wed Apr 30 01:36:24 2025 by rpki-client