$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0bc64e9-662a-3809-966a-851372e4e96c.roa File: d0bc64e9-662a-3809-966a-851372e4e96c.roa (raw, json) Hash identifier: 52ds3OPZgRguRPYvCDmCiHF2+J5Pr40MogGfnKhNdVo= Subject key identifier: DD:D8:6E:01:7E:26:3F:EC:65:2D:FC:0C:0B:06:AE:77:33:24:EC:72 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B77B67E31C88321C305880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0bc64e9-662a-3809-966a-851372e4e96c.roa Signing time: Thu 24 Apr 2025 11:08:40 +0000 ROA not before: Thu 24 Apr 2025 11:08:40 +0000 ROA not after: Wed 23 Jul 2025 11:08:40 +0000 asID: 12041 IP address blocks: 65.22.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:7b:67:e3:1c:88:32:1c:30:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:40 2025 GMT Not After : Jul 23 11:08:40 2025 GMT Subject: CN=35a40847-44e7-40ec-b7d7-e3cc521ebc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:84:23:59:cc:a4:bc:48:2e:ad:a6:82:76: bc:eb:c9:b9:f4:a4:d7:ac:c6:da:49:e9:4b:8c:0f: 8a:b0:87:12:67:63:ac:b2:36:a1:f8:65:68:7e:02: 0d:4d:27:21:73:43:31:97:a2:f6:73:48:b1:f7:36: 73:b6:c2:e5:d0:94:de:9a:c0:a5:8a:80:32:3f:09: aa:2a:dd:e4:36:c1:b7:e5:ec:52:c5:7c:78:50:29: cc:30:20:08:67:d9:44:03:c8:84:8c:2b:31:66:05: a5:ca:5c:12:33:3b:99:81:b4:b8:b4:46:88:64:58: 3c:14:24:8e:85:71:d9:0d:67:e7:96:4e:89:08:8e: 5b:24:44:02:4f:7a:fd:44:4d:4f:45:23:d8:44:7f: df:af:d0:f2:76:b2:33:40:0b:a1:39:43:af:90:b5: 87:d1:13:d6:2e:5e:7a:5e:59:4a:bb:96:e6:2a:36: 80:ea:95:c7:01:cb:69:46:9c:4a:b3:d0:d7:a3:86: cb:60:17:a7:40:b3:b6:c9:47:20:d2:fa:16:6f:99: b8:ff:88:3d:e0:a6:b1:81:dd:66:85:8c:03:1d:63: 57:71:4d:bb:96:9d:2b:55:0e:96:a9:6d:50:18:e0: 24:79:fb:cb:a7:ee:d7:d7:80:8a:2d:e0:d0:c4:6a: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D8:6E:01:7E:26:3F:EC:65:2D:FC:0C:0B:06:AE:77:33:24:EC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0bc64e9-662a-3809-966a-851372e4e96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:34:8e:fa:e6:0d:ba:85:43:04:be:09:e6:a1:68:82:96:59: b1:49:92:7d:44:d8:cd:75:fd:85:50:ed:27:78:fb:32:8a:82: 6f:e4:ba:05:79:69:39:e7:15:45:d4:9a:e2:a3:1b:2d:66:4b: 22:fa:91:76:c2:a3:ee:4d:32:d3:b9:5a:86:fc:08:97:b8:e1: 6d:c9:52:2d:e2:83:48:0c:11:64:27:31:65:39:b5:08:00:a4: de:f7:68:41:3d:1a:13:f1:4a:b9:c3:4f:5b:26:db:2a:d1:fe: 4d:8d:88:a1:5d:94:da:6a:aa:cf:7d:e6:6e:b7:ab:06:40:50: 4d:a2:6c:6a:92:4e:da:4a:db:c7:b2:f7:2e:13:f2:b2:b7:5c: d0:18:0d:e0:98:d7:4a:f8:87:fb:d1:a1:9b:f9:e4:94:f6:d9: c2:cc:aa:8d:6d:ec:8d:78:f8:3d:11:97:f1:3e:db:92:58:57: d7:04:55:04:34:17:6e:00:7e:b6:57:74:f2:cd:26:22:65:ed: f0:83:50:0f:b8:9a:00:d6:40:ff:8c:9d:58:b5:6f:ae:11:fc: 81:85:11:e4:37:66:28:0c:60:b6:cb:09:c0:54:09:74:71:99: 27:96:31:21:b4:9e:53:01:25:bb:39:d6:b9:4d:b2:3d:dc:9b: 3d:35:4e:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht3tn4xyIMhwwWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg0MFoXDTI1MDcyMzExMDg0MFowLzEtMCsGA1UEAxMk MzVhNDA4NDctNDRlNy00MGVjLWI3ZDctZTNjYzUyMWViYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxuEI1nMpLxILq2mgna868m59KTXrMbaSelL jA+KsIcSZ2Ossjah+GVofgINTSchc0Mxl6L2c0ix9zZztsLl0JTemsClioAyPwmq Kt3kNsG35exSxXx4UCnMMCAIZ9lEA8iEjCsxZgWlylwSMzuZgbS4tEaIZFg8FCSO hXHZDWfnlk6JCI5bJEQCT3r9RE1PRSPYRH/fr9DydrIzQAuhOUOvkLWH0RPWLl56 XllKu5bmKjaA6pXHActpRpxKs9DXo4bLYBenQLO2yUcg0voWb5m4/4g94Kaxgd1m hYwDHWNXcU27lp0rVQ6WqW1QGOAkefvLp+7X14CKLeDQxGqv5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3YbgF+Jj/sZS38DAsGrnczJOxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDBiYzY0ZTktNjYyYS0z ODA5LTk2NmEtODUxMzcyZTRlOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE0jvrmDbqFQwS+CeahaIKWWbFJkn1E2M11/YVQ7Sd4+zKKgm/kugV5 aTnnFUXUmuKjGy1mSyL6kXbCo+5NMtO5Wob8CJe44W3JUi3ig0gMEWQnMWU5tQgA pN73aEE9GhPxSrnDT1sm2yrR/k2NiKFdlNpqqs995m63qwZAUE2ibGqSTtpK28ey 9y4T8rK3XNAYDeCY10r4h/vRoZv55JT22cLMqo1t7I14+D0Rl/E+25JYV9cEVQQ0 F24AfrZXdPLNJiJl7fCDUA+4mgDWQP+MnVi1b64R/IGFEeQ3ZigMYLbLCcBUCXRx mSeWMSG0nlMBJbs51rlNsj3cmz01Tho= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:38 2025 by rpki-client