$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce248efd-acfe-3304-bf23-bfe52b18d94d.roa File: ce248efd-acfe-3304-bf23-bfe52b18d94d.roa (raw, json) Hash identifier: 1HsxdaQQJ1rZ77LI9qUJ3t9prJaTNtcuKJ5S0rJPzDI= Subject key identifier: F8:8E:54:07:77:39:E6:4A:99:71:89:88:19:48:05:40:BC:B5:51:63 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B81793D3D30E4EBD223A10 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce248efd-acfe-3304-bf23-bfe52b18d94d.roa Signing time: Thu 24 Apr 2025 11:09:54 +0000 ROA not before: Thu 24 Apr 2025 11:09:54 +0000 ROA not after: Wed 23 Jul 2025 11:09:54 +0000 asID: 12041 IP address blocks: 65.22.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:17:93:d3:d3:0e:4e:bd:22:3a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:54 2025 GMT Not After : Jul 23 11:09:54 2025 GMT Subject: CN=059639de-f894-4d15-8df7-2cb6cc3cb08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:e7:84:b1:22:0d:83:c3:f8:24:28:e7:ce: d3:79:12:c8:f7:ec:29:37:e8:66:70:92:54:bd:6e: 2d:bf:98:30:46:fe:40:eb:f0:de:dc:23:b5:6e:b9: fd:45:7c:55:35:cb:7b:d7:61:e8:a4:ec:d7:04:9e: 74:60:fa:b5:38:46:d5:1c:97:00:51:b6:40:40:15: c1:26:a0:3d:bf:36:53:b9:e5:84:8e:a8:ed:dc:97: 89:c0:af:b6:95:ef:f6:82:5a:9f:6c:ca:a2:bb:59: e5:53:88:04:76:ab:97:39:8f:f4:64:f7:e0:de:49: 02:8a:db:d2:3d:54:f6:8d:89:f9:a3:f0:eb:a3:0f: b3:16:35:0c:31:77:7c:99:3c:90:0d:19:f5:41:54: ee:29:51:e3:77:65:45:7e:79:5c:a4:4e:08:f9:07: cb:53:d5:d0:fc:42:4b:fd:4a:5f:f5:b8:43:75:8a: c4:bf:fa:73:ce:f6:67:f8:08:bb:6c:eb:0b:4a:8b: 9c:48:44:78:0b:4a:4d:0c:80:c8:82:de:88:08:46: b2:64:32:e8:bc:42:1b:a4:31:b1:ce:a4:a8:1b:2c: 4b:bf:ba:81:73:a7:ed:85:c1:b1:5f:40:91:7b:a3: 52:be:55:23:e3:aa:8a:bb:ec:76:f3:aa:79:e1:99: fa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8E:54:07:77:39:E6:4A:99:71:89:88:19:48:05:40:BC:B5:51:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce248efd-acfe-3304-bf23-bfe52b18d94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:93:97:a7:ad:94:2e:c3:44:c2:13:0b:64:aa:d0:5e:fe:9f: 16:6b:27:32:7d:cc:87:ee:a1:69:ee:00:89:b6:d5:99:0a:3e: b5:bb:81:c2:ef:c3:03:35:45:ba:b1:58:b1:a1:e8:b9:b7:31: ee:46:71:b5:bb:13:2f:d8:54:b0:e0:41:79:7a:e9:b6:dc:79: 82:c4:08:a9:67:b4:c0:35:af:d8:95:c5:5d:4f:09:ec:2a:2c: 42:5e:25:9e:f2:a5:fd:6b:41:ed:a2:cd:0c:b8:34:0c:5d:13: f5:5a:6f:86:2d:2e:83:e7:ee:60:68:40:67:6b:a5:d1:0f:1a: ed:54:6e:5c:ba:75:89:4b:ee:df:1b:0e:60:ba:5d:d7:17:61: a5:8c:e4:da:d7:20:2f:2f:ba:22:fe:b0:9b:b1:ae:85:29:02: 07:1a:c5:e5:68:01:88:14:aa:ab:67:a2:9e:73:ca:ac:47:8a: a9:41:2a:0f:c4:86:ca:c5:e5:78:59:39:c4:80:49:2d:44:68: f6:e0:64:76:85:c1:01:33:23:5a:d3:9b:99:7d:52:54:42:de: ed:9d:88:37:51:80:93:84:47:25:4a:25:85:cc:5e:f9:2c:a7: 72:05:6c:f1:d4:5a:ad:c1:59:4d:25:f6:7f:4b:6e:ca:72:6e: 41:9d:dc:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuBeT09MOTr0iOhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk1NFoXDTI1MDcyMzExMDk1NFowLzEtMCsGA1UEAxMk MDU5NjM5ZGUtZjg5NC00ZDE1LThkZjctMmNiNmNjM2NiMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsannhLEiDYPD+CQo587TeRLI9+wpN+hmcJJU vW4tv5gwRv5A6/De3CO1brn9RXxVNct712HopOzXBJ50YPq1OEbVHJcAUbZAQBXB JqA9vzZTueWEjqjt3JeJwK+2le/2glqfbMqiu1nlU4gEdquXOY/0ZPfg3kkCitvS PVT2jYn5o/Drow+zFjUMMXd8mTyQDRn1QVTuKVHjd2VFfnlcpE4I+QfLU9XQ/EJL /Upf9bhDdYrEv/pzzvZn+Ai7bOsLSoucSER4C0pNDIDIgt6ICEayZDLovEIbpDGx zqSoGyxLv7qBc6fthcGxX0CRe6NSvlUj46qKu+x286p54Zn6owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiOVAd3OeZKmXGJiBlIBUC8tVFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2UyNDhlZmQtYWNmZS0z MzA0LWJmMjMtYmZlNTJiMThkOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuTl6etlC7DRMITC2Sq0F7+nxZrJzJ9zIfuoWnuAIm21ZkKPrW7gcLv wwM1RbqxWLGh6Lm3Me5GcbW7Ey/YVLDgQXl66bbceYLECKlntMA1r9iVxV1PCewq LEJeJZ7ypf1rQe2izQy4NAxdE/Vab4YtLoPn7mBoQGdrpdEPGu1Ubly6dYlL7t8b DmC6XdcXYaWM5NrXIC8vuiL+sJuxroUpAgcaxeVoAYgUqqtnop5zyqxHiqlBKg/E hsrF5XhZOcSASS1EaPbgZHaFwQEzI1rTm5l9UlRC3u2diDdRgJOERyVKJYXMXvks p3IFbPHUWq3BWU0l9n9LbspybkGd3BA= -----END CERTIFICATE-----Generated at Tue Apr 29 14:34:11 2025 by rpki-client