$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2e89f6d-6d5c-3ecc-8899-7911f3304597.roa File: d2e89f6d-6d5c-3ecc-8899-7911f3304597.roa (raw, json) Hash identifier: aBjrmHQrB4RkIMgSN+8ZB4fJVyPGjdFxSJM0wThblII= Subject key identifier: 7B:C3:54:B6:C0:8C:F2:CA:8E:FE:E0:C1:68:EA:DA:35:C8:12:04:19 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2123EDD4270319827452A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2e89f6d-6d5c-3ecc-8899-7911f3304597.roa Signing time: Thu 24 Apr 2025 14:11:32 +0000 ROA not before: Thu 24 Apr 2025 14:11:32 +0000 ROA not after: Wed 23 Jul 2025 14:11:32 +0000 asID: 207266 IP address blocks: 65.22.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:3e:dd:42:70:31:98:27:45:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:11:32 2025 GMT Not After : Jul 23 14:11:32 2025 GMT Subject: CN=342fdf66-15cf-42ef-bd77-520196472737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:46:2b:ed:d3:4d:7a:90:34:8d:33:db:b5: fd:9f:0e:21:92:b6:81:57:e2:86:ef:f2:21:2e:dc: 05:cf:b0:3d:cd:a2:85:94:32:56:cb:03:c4:f7:56: ed:a1:bf:4d:de:1d:74:88:76:10:2e:d8:7c:fa:dd: e8:5f:52:38:c3:c3:f6:ba:62:46:d1:7d:7e:36:95: 68:c5:b7:b6:73:83:7a:32:f6:d3:ae:e0:cb:07:ac: 44:e1:eb:1b:a0:7b:86:23:3e:ac:16:47:e7:83:93: e9:c2:db:c2:30:3f:29:9b:03:a5:03:5f:20:a7:62: f2:a2:25:14:8e:41:d1:ec:0f:07:82:19:98:a3:61: 92:12:00:ae:c6:b1:be:80:ca:d5:43:d6:6d:ec:6c: ed:5b:73:f4:eb:2d:65:e2:44:c3:a9:0a:b5:96:b6: ce:a0:34:9c:12:5c:31:b9:47:09:af:71:23:2b:17: 99:85:45:f2:09:14:97:6c:6d:1a:4f:5b:c5:77:ee: dc:2b:a2:9c:6c:76:38:14:2a:f3:bf:56:62:11:c7: 4d:9f:5e:38:dd:29:90:2f:b8:91:ba:55:f0:99:4c: 85:6d:aa:62:4d:19:e0:b5:46:96:7e:27:71:3d:69: 84:8f:3f:58:42:9e:24:1c:2a:da:af:63:55:bb:77: 91:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C3:54:B6:C0:8C:F2:CA:8E:FE:E0:C1:68:EA:DA:35:C8:12:04:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2e89f6d-6d5c-3ecc-8899-7911f3304597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e3:f9:e4:1f:e1:e9:a4:b9:09:ac:2e:d7:45:1c:6c:9f:10: 1c:3a:da:ec:3d:5e:1c:64:27:6e:82:56:d3:a8:14:7c:d8:c5: 22:52:4f:5b:6a:87:e4:42:73:00:00:30:d5:0a:d1:5c:63:6a: f6:23:9b:b2:a2:c5:a1:48:10:c1:6e:02:c2:e0:c7:06:a6:53: 29:3b:97:3c:48:e1:78:77:2f:87:d4:88:a7:d9:70:50:1b:fd: 14:3b:0d:e8:94:e2:52:4d:37:3b:7d:b4:25:d4:bb:9f:6f:5b: ac:b8:1e:38:c6:a5:f6:cb:ad:0f:55:fe:79:e1:73:95:d9:76: 77:03:53:68:ca:46:08:56:f5:13:4a:1b:65:63:a2:ef:7d:a0: d9:ea:c3:bf:fb:e8:7a:45:52:a2:0b:53:bc:41:eb:ef:6a:15: 6c:5d:07:7f:e7:54:19:af:45:b7:8e:73:39:bb:84:d9:29:16: 65:38:f6:f5:9e:81:d1:5f:f0:40:0c:23:44:d5:75:cc:a7:72: c8:07:60:b1:4e:58:a2:f3:27:03:8f:57:f2:9a:f1:3c:d3:79: 7c:64:5f:c6:23:2c:ac:82:fc:6f:5e:9e:bb:fb:d6:48:8b:45: 74:c3:d2:f1:1e:9c:28:7c:8c:60:5a:ff:53:33:e4:b7:17:8d: f4:50:94:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEj7dQnAxmCdFKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTEzMloXDTI1MDcyMzE0MTEzMlowLzEtMCsGA1UEAxMk MzQyZmRmNjYtMTVjZi00MmVmLWJkNzctNTIwMTk2NDcyNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR5GK+3TTXqQNI0z27X9nw4hkraBV+KG7/Ih LtwFz7A9zaKFlDJWywPE91btob9N3h10iHYQLth8+t3oX1I4w8P2umJG0X1+NpVo xbe2c4N6MvbTruDLB6xE4esboHuGIz6sFkfng5PpwtvCMD8pmwOlA18gp2LyoiUU jkHR7A8HghmYo2GSEgCuxrG+gMrVQ9Zt7GztW3P06y1l4kTDqQq1lrbOoDScElwx uUcJr3EjKxeZhUXyCRSXbG0aT1vFd+7cK6KcbHY4FCrzv1ZiEcdNn1443SmQL7iR ulXwmUyFbapiTRngtUaWfidxPWmEjz9YQp4kHCrar2NVu3eRBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvDVLbAjPLKjv7gwWjq2jXIEgQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDJlODlmNmQtNmQ1Yy0z ZWNjLTg4OTktNzkxMWYzMzA0NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXj+eQf4emkuQmsLtdFHGyfEBw62uw9XhxkJ26CVtOoFHzYxSJST1tq h+RCcwAAMNUK0VxjavYjm7KixaFIEMFuAsLgxwamUyk7lzxI4Xh3L4fUiKfZcFAb /RQ7DeiU4lJNNzt9tCXUu59vW6y4HjjGpfbLrQ9V/nnhc5XZdncDU2jKRghW9RNK G2Vjou99oNnqw7/76HpFUqILU7xB6+9qFWxdB3/nVBmvRbeOczm7hNkpFmU49vWe gdFf8EAMI0TVdcyncsgHYLFOWKLzJwOPV/Ka8TzTeXxkX8YjLKyC/G9enrv71kiL RXTD0vEenCh8jGBa/1Mz5LcXjfRQlGg= -----END CERTIFICATE-----Generated at Wed Apr 30 01:33:48 2025 by rpki-client