$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf698d40-ce8d-36c4-830a-ccf3f3139f5a.roa File: cf698d40-ce8d-36c4-830a-ccf3f3139f5a.roa (raw, json) Hash identifier: 3s/oOO8ZRKw9JHDxSzvlgulkn9PAYh/lDNim6YpaazE= Subject key identifier: 8D:A6:20:16:41:E6:E3:3C:BE:53:F8:D8:36:46:C1:26:40:1A:D0:E0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7DD3083097E53E200DE00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf698d40-ce8d-36c4-830a-ccf3f3139f5a.roa Signing time: Thu 24 Apr 2025 11:09:26 +0000 ROA not before: Thu 24 Apr 2025 11:09:26 +0000 ROA not after: Wed 23 Jul 2025 11:09:26 +0000 asID: 12041 IP address blocks: 65.22.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:dd:30:83:09:7e:53:e2:00:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:26 2025 GMT Not After : Jul 23 11:09:26 2025 GMT Subject: CN=c9fd9125-de19-49ae-bba4-80ace9da38e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:79:4e:e7:c8:8d:3b:ed:9b:c2:c3:92:23: 3a:63:b1:dd:26:eb:39:0d:00:a8:e9:33:ee:3c:26: ca:fe:90:c6:65:a3:af:ba:e6:1b:36:24:85:6b:e2: 34:61:19:2a:f0:e5:7f:ec:fb:17:3d:c5:90:2a:22: 88:51:93:c8:ca:77:37:a5:19:a9:50:e8:d1:ab:72: b1:63:25:05:1d:77:4d:43:7a:49:f3:75:ac:f8:07: db:ba:84:a2:00:24:fb:5a:06:31:4a:76:81:e6:d3: 52:b4:b8:38:9a:b5:fd:95:ef:00:e3:15:ab:ed:53: f5:94:bf:fe:3c:58:54:fb:47:39:ed:f8:bd:11:c0: 9d:aa:56:f8:a2:78:dc:3d:eb:99:83:5e:05:07:c3: 04:c1:e7:34:12:56:b7:e8:f5:2c:d1:78:43:9d:91: e2:4d:17:03:00:3b:97:ba:57:b0:ba:5b:69:74:c0: 90:63:b9:9c:2e:0e:17:4f:f0:95:6a:90:cd:94:f2: 5b:d6:4c:b9:e9:f8:ac:68:23:ce:3d:13:51:26:d5: 91:cc:cd:25:05:98:08:7e:4b:29:91:4a:7d:d0:25: 51:6d:a9:87:e4:12:d0:af:b6:72:13:bc:bb:9c:4c: 37:aa:d9:62:c8:e3:e7:a9:94:77:a8:2d:70:16:4f: 2c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A6:20:16:41:E6:E3:3C:BE:53:F8:D8:36:46:C1:26:40:1A:D0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf698d40-ce8d-36c4-830a-ccf3f3139f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:57:36:bf:93:1a:0e:73:96:02:ff:2b:cf:06:56:a1:c1:3a: db:f2:14:7f:04:df:06:e7:7e:46:b8:c3:46:42:de:8a:70:09: c2:47:5f:82:07:7e:fc:e4:1e:2b:ff:86:25:c8:d5:73:25:aa: b7:66:72:54:70:31:bd:39:fa:73:13:6e:9c:31:1e:28:a9:22: 55:7a:47:cf:af:2e:dc:42:60:39:37:c6:a7:78:44:94:14:ca: 5c:b6:c3:66:a8:56:63:52:75:c9:27:2f:55:f0:47:85:00:f1: 0e:ce:7b:fb:e6:3b:29:1e:13:25:d1:4c:cc:7d:99:dc:c3:78: c2:54:5b:cd:39:2f:95:f6:12:ee:45:0f:c6:8b:89:cd:5b:b2: 1b:1e:4d:8f:27:2f:42:90:5c:94:69:5b:fb:4a:70:68:2a:c9: 04:0f:1b:f3:89:3c:6e:a0:52:1b:27:02:41:bf:d1:f6:12:31: 7b:23:6b:b1:99:b1:fe:b1:fe:c5:61:73:c8:73:41:da:78:8f: 4f:5f:72:c7:04:c8:8d:2e:d2:be:2d:ec:4c:de:62:aa:2c:f8: 6c:5e:61:28:62:c2:b4:8f:c0:de:57:4f:58:f3:f8:6b:b9:e9: d2:80:a1:89:e9:3c:92:a9:09:b1:6d:5a:1e:13:52:4e:d8:bb: 0f:82:8f:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht90wgwl+U+IA3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyNloXDTI1MDcyMzExMDkyNlowLzEtMCsGA1UEAxMk YzlmZDkxMjUtZGUxOS00OWFlLWJiYTQtODBhY2U5ZGEzOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgx5TufIjTvtm8LDkiM6Y7HdJus5DQCo6TPu PCbK/pDGZaOvuuYbNiSFa+I0YRkq8OV/7PsXPcWQKiKIUZPIync3pRmpUOjRq3Kx YyUFHXdNQ3pJ83Ws+AfbuoSiACT7WgYxSnaB5tNStLg4mrX9le8A4xWr7VP1lL/+ PFhU+0c57fi9EcCdqlb4onjcPeuZg14FB8MEwec0Ela36PUs0XhDnZHiTRcDADuX ulewultpdMCQY7mcLg4XT/CVapDNlPJb1ky56fisaCPOPRNRJtWRzM0lBZgIfksp kUp90CVRbamH5BLQr7ZyE7y7nEw3qtliyOPnqZR3qC1wFk8siQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2mIBZB5uM8vlP42DZGwSZAGtDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2Y2OThkNDAtY2U4ZC0z NmM0LTgzMGEtY2NmM2YzMTM5ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRajMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBXNr+TGg5zlgL/K88GVqHBOtvyFH8E3wbnfka4w0ZC3opwCcJHX4IH fvzkHiv/hiXI1XMlqrdmclRwMb05+nMTbpwxHiipIlV6R8+vLtxCYDk3xqd4RJQU yly2w2aoVmNSdcknL1XwR4UA8Q7Oe/vmOykeEyXRTMx9mdzDeMJUW805L5X2Eu5F D8aLic1bshseTY8nL0KQXJRpW/tKcGgqyQQPG/OJPG6gUhsnAkG/0fYSMXsja7GZ sf6x/sVhc8hzQdp4j09fcscEyI0u0r4t7EzeYqos+GxeYShiwrSPwN5XT1jz+Gu5 6dKAoYnpPJKpCbFtWh4TUk7Yuw+Cj3s= -----END CERTIFICATE-----Generated at Tue Apr 29 16:30:45 2025 by rpki-client