$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d26ec745-0fc7-3c55-99ea-f57da0d7b032.roa File: d26ec745-0fc7-3c55-99ea-f57da0d7b032.roa (raw, json) Hash identifier: Pq3iOItnalw3b9DSEH8AcAmkpjpIfcuxdoikrtkEGGk= Subject key identifier: D2:9B:D9:61:46:8B:7C:21:1A:D9:F4:59:F7:86:AF:22:D5:33:F3:40 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7E3551C25A571214E8D20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d26ec745-0fc7-3c55-99ea-f57da0d7b032.roa Signing time: Thu 24 Apr 2025 11:09:29 +0000 ROA not before: Thu 24 Apr 2025 11:09:29 +0000 ROA not after: Wed 23 Jul 2025 11:09:29 +0000 asID: 12041 IP address blocks: 65.22.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:e3:55:1c:25:a5:71:21:4e:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:29 2025 GMT Not After : Jul 23 11:09:29 2025 GMT Subject: CN=8354edd5-ec3b-438c-b3c0-f72b264db442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:2d:0d:f0:da:ae:31:b3:be:8d:5b:0f:39: b0:99:f9:b0:ea:e2:dc:c2:95:9f:62:61:69:67:b8: 16:77:1b:a0:45:59:cc:03:91:df:c4:50:d4:72:57: 34:da:91:d0:08:e1:6b:eb:5b:a4:97:4a:ce:dd:11: e3:72:7d:f0:ff:7a:5c:5d:6b:72:6d:5b:87:34:0f: fa:dd:4d:49:50:db:21:48:ab:a9:38:dd:21:a2:b7: ef:d3:2c:d1:3b:45:35:9b:58:5b:03:67:14:ec:48: b8:89:c3:6c:f7:53:1c:7c:77:52:b7:43:d2:38:b2: 23:4e:e5:6f:3d:1f:8b:39:95:70:30:24:40:3c:42: 7d:96:f5:68:3c:72:7d:3b:e7:24:81:75:8c:a4:ba: 51:07:f2:b4:f4:1d:10:6a:67:48:6a:10:49:f2:9a: 27:7e:ae:d7:a8:f0:36:de:0d:2b:69:4e:9d:c3:8b: b5:71:cc:3f:7c:4a:b4:71:09:04:eb:66:30:11:54: 9b:bc:e7:93:6f:8d:eb:27:e3:6e:5d:bc:6f:60:6a: 95:da:e2:75:29:44:52:c3:4f:9a:b8:fe:6e:74:31: 1c:68:b4:4a:32:57:ab:15:ab:0f:db:13:0e:94:f7: 2a:af:d2:96:91:3c:69:02:ae:6a:c2:be:40:78:b9: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9B:D9:61:46:8B:7C:21:1A:D9:F4:59:F7:86:AF:22:D5:33:F3:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d26ec745-0fc7-3c55-99ea-f57da0d7b032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a2:d2:48:a9:ab:f0:36:52:1d:3d:f0:9e:27:10:5b:09:09: b3:87:e6:f1:b8:8e:d5:16:2f:bb:12:89:8b:c8:84:69:11:da: 3b:31:fb:53:60:45:06:7c:0c:27:f4:fb:1a:6b:36:7a:e3:72: 51:f8:4b:81:c3:76:6f:69:e1:cf:d3:2b:3e:be:6e:6f:7a:ea: 0b:96:df:18:8e:54:f0:81:18:d9:4f:bd:53:8e:04:13:5c:c9: 06:65:07:99:ae:60:4a:8e:6f:9b:73:2c:d0:cb:ce:a7:ea:78: 43:d5:ee:38:1d:87:99:e2:4f:90:50:08:ce:4d:ba:d5:05:ae: e8:06:01:88:87:4a:7b:02:c7:03:09:2e:e4:ae:44:9f:ff:5d: 89:f9:10:d0:64:6e:42:6a:b7:36:15:0e:39:2c:0f:a1:64:d6: d6:7b:17:ce:80:3c:90:e8:dd:2a:46:d1:07:96:12:66:9e:5b: a2:d9:58:cb:cf:1b:95:e6:a8:a8:e2:08:80:80:2f:db:13:14: e2:1b:6e:f9:0e:21:96:3a:19:fb:84:4c:f4:a6:84:4c:4a:60: 65:d1:28:c7:65:be:1f:82:b3:06:a0:29:d9:6a:a9:c4:6b:13: 47:4c:42:33:f6:5d:90:d7:da:4e:f2:45:36:ce:14:0d:b6:ed: 8a:a0:ff:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht+NVHCWlcSFOjSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyOVoXDTI1MDcyMzExMDkyOVowLzEtMCsGA1UEAxMk ODM1NGVkZDUtZWMzYi00MzhjLWIzYzAtZjcyYjI2NGRiNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgstDfDarjGzvo1bDzmwmfmw6uLcwpWfYmFp Z7gWdxugRVnMA5HfxFDUclc02pHQCOFr61ukl0rO3RHjcn3w/3pcXWtybVuHNA/6 3U1JUNshSKupON0horfv0yzRO0U1m1hbA2cU7Ei4icNs91McfHdSt0PSOLIjTuVv PR+LOZVwMCRAPEJ9lvVoPHJ9O+ckgXWMpLpRB/K09B0QamdIahBJ8ponfq7XqPA2 3g0raU6dw4u1ccw/fEq0cQkE62YwEVSbvOeTb43rJ+NuXbxvYGqV2uJ1KURSw0+a uP5udDEcaLRKMlerFasP2xMOlPcqr9KWkTxpAq5qwr5AeLlg8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKb2WFGi3whGtn0WfeGryLVM/NAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDI2ZWM3NDUtMGZjNy0z YzU1LTk5ZWEtZjU3ZGEwZDdiMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRanMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIii0kipq/A2Uh098J4nEFsJCbOH5vG4jtUWL7sSiYvIhGkR2jsx+1Ng RQZ8DCf0+xprNnrjclH4S4HDdm9p4c/TKz6+bm966guW3xiOVPCBGNlPvVOOBBNc yQZlB5muYEqOb5tzLNDLzqfqeEPV7jgdh5niT5BQCM5NutUFrugGAYiHSnsCxwMJ LuSuRJ//XYn5ENBkbkJqtzYVDjksD6Fk1tZ7F86APJDo3SpG0QeWEmaeW6LZWMvP G5XmqKjiCICAL9sTFOIbbvkOIZY6GfuETPSmhExKYGXRKMdlvh+CswagKdlqqcRr E0dMQjP2XZDX2k7yRTbOFA227Yqg/38= -----END CERTIFICATE-----Generated at Tue Apr 29 18:34:10 2025 by rpki-client