$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c96f8ace-bc7c-32e3-8d50-5f0860e83ad4.roa File: c96f8ace-bc7c-32e3-8d50-5f0860e83ad4.roa (raw, json) Hash identifier: 49x61dfU2nSCDfXqFN+Zdtr6pfGRhQCW220TD/njCPU= Subject key identifier: E7:80:84:33:9F:5A:E4:35:11:96:B2:4E:DD:3A:91:8E:BB:B5:0A:43 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2115480BA7F20CF79A97B20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c96f8ace-bc7c-32e3-8d50-5f0860e83ad4.roa Signing time: Thu 24 Apr 2025 14:09:42 +0000 ROA not before: Thu 24 Apr 2025 14:09:42 +0000 ROA not after: Wed 23 Jul 2025 14:09:42 +0000 asID: 207266 IP address blocks: 65.22.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:54:80:ba:7f:20:cf:79:a9:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:09:42 2025 GMT Not After : Jul 23 14:09:42 2025 GMT Subject: CN=e75a23b9-f320-4d57-a406-770d3c8c38ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:01:1f:d2:d1:ac:1f:d9:c5:60:b5:c7:b0: 3e:da:9a:bb:35:aa:18:81:86:11:83:3f:c7:4b:cc: f6:1c:6f:5f:50:89:69:64:2a:a6:ea:aa:1f:9b:e3: c2:a8:7c:a2:ee:e2:8c:07:eb:5e:11:4a:e7:8a:1e: 63:b7:0a:4a:e8:8f:24:54:4a:db:0b:b4:b5:62:72: 4a:ba:ee:f2:9f:a6:e1:ff:68:63:f2:f6:94:2b:af: dc:d9:f9:7b:76:e2:6a:e7:c2:c2:4a:23:17:45:bf: 23:25:45:5b:20:a6:10:9e:2f:a0:16:96:0f:a5:f9: bf:d3:a9:33:81:a7:dc:c2:7f:a7:45:c2:46:a8:0e: c6:5b:64:0b:c6:2f:22:1e:67:99:b3:a7:3c:a3:b8: cc:6e:5a:e8:09:8a:b3:f6:39:a6:21:51:da:39:23: b8:d6:70:5a:e5:7f:2b:bc:19:22:01:73:85:c5:9d: 16:e0:a6:8b:3b:15:30:2d:ca:d8:16:5c:f5:9a:3d: be:13:e2:ff:4b:0e:b1:f9:ab:ba:a8:5d:3a:ea:2d: cd:bc:eb:bb:d1:a8:71:08:f1:7c:50:c9:7c:70:16: 06:13:ca:43:48:cb:f6:b1:22:92:e3:0e:51:1e:45: ee:4f:eb:4f:1d:b1:ed:0a:b1:3b:f8:af:3d:b1:db: da:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:80:84:33:9F:5A:E4:35:11:96:B2:4E:DD:3A:91:8E:BB:B5:0A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c96f8ace-bc7c-32e3-8d50-5f0860e83ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7c:c2:c4:70:31:8a:7b:7f:b4:0e:86:53:97:0d:52:4f:59: 81:f3:03:88:26:e7:20:e4:2d:5f:f6:45:d5:69:43:0e:6f:2e: c5:15:9e:6d:a6:e2:4b:a6:ac:7c:4d:e2:ae:6d:32:9e:18:f0: 3d:85:53:7d:52:30:e3:94:ce:af:b6:16:91:a4:e7:15:dd:74: b1:af:13:da:81:2c:33:d6:29:a5:10:a8:99:fc:c0:f7:89:ed: 58:c1:c4:74:45:0e:68:4d:1f:26:d5:2c:64:b5:be:e7:b5:04: a3:a6:62:2e:dd:0a:e5:82:b1:ad:f6:5a:6a:d7:4a:54:56:b8: 12:92:5c:1b:8b:c7:76:d1:7f:9a:40:cb:60:82:04:e5:d9:23: d4:d8:9f:b8:a6:a6:9e:99:da:9a:0f:1c:cd:8f:ba:a2:fe:79: 82:fc:e3:ec:da:bd:eb:86:e2:64:44:48:df:d7:de:02:0b:15: 6a:28:14:a6:b9:62:9c:b3:20:d9:08:86:ca:7f:3f:5a:61:98: c2:42:37:6a:12:ed:c4:7b:13:ce:53:cc:b9:cf:c2:51:f2:69: ad:a3:32:e8:76:6d:eb:83:ca:28:a7:81:73:a4:52:1c:48:d6: 34:02:5e:3c:65:aa:24:cb:16:96:af:cc:9d:b1:71:fd:8a:98: 89:04:64:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEVSAun8gz3mpeyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MDk0MloXDTI1MDcyMzE0MDk0MlowLzEtMCsGA1UEAxMk ZTc1YTIzYjktZjMyMC00ZDU3LWE0MDYtNzcwZDNjOGMzOGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwgBH9LRrB/ZxWC1x7A+2pq7NaoYgYYRgz/H S8z2HG9fUIlpZCqm6qofm+PCqHyi7uKMB+teEUrnih5jtwpK6I8kVErbC7S1YnJK uu7yn6bh/2hj8vaUK6/c2fl7duJq58LCSiMXRb8jJUVbIKYQni+gFpYPpfm/06kz gafcwn+nRcJGqA7GW2QLxi8iHmeZs6c8o7jMblroCYqz9jmmIVHaOSO41nBa5X8r vBkiAXOFxZ0W4KaLOxUwLcrYFlz1mj2+E+L/Sw6x+au6qF066i3NvOu70ahxCPF8 UMl8cBYGE8pDSMv2sSKS4w5RHkXuT+tPHbHtCrE7+K89sdvaswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeAhDOfWuQ1EZayTt06kY67tQpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzk2ZjhhY2UtYmM3Yy0z MmUzLThkNTAtNWYwODYwZTgzYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx8wsRwMYp7f7QOhlOXDVJPWYHzA4gm5yDkLV/2RdVpQw5vLsUVnm2m 4kumrHxN4q5tMp4Y8D2FU31SMOOUzq+2FpGk5xXddLGvE9qBLDPWKaUQqJn8wPeJ 7VjBxHRFDmhNHybVLGS1vue1BKOmYi7dCuWCsa32WmrXSlRWuBKSXBuLx3bRf5pA y2CCBOXZI9TYn7impp6Z2poPHM2PuqL+eYL84+zaveuG4mRESN/X3gILFWooFKa5 YpyzINkIhsp/P1phmMJCN2oS7cR7E85TzLnPwlHyaa2jMuh2beuDyiingXOkUhxI 1jQCXjxlqiTLFpavzJ2xcf2KmIkEZIQ= -----END CERTIFICATE-----Generated at Wed Apr 30 03:40:36 2025 by rpki-client