$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa File: d3d48afe-6908-31d4-958a-74f7b78b9069.roa (raw, json) Hash identifier: oJgKHWxBca3FakJ9fuPg+Waayq6LvJC6azRqez0v9ik= Subject key identifier: 75:69:68:7C:3D:02:C9:FB:C1:8F:9F:A5:17:F4:67:25:2D:1D:92:C9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B448C59A3AFCA51594B380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa Signing time: Thu 24 Apr 2025 11:02:13 +0000 ROA not before: Thu 24 Apr 2025 11:02:13 +0000 ROA not after: Wed 23 Jul 2025 11:02:13 +0000 asID: 12041 IP address blocks: 65.22.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:48:c5:9a:3a:fc:a5:15:94:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:02:13 2025 GMT Not After : Jul 23 11:02:13 2025 GMT Subject: CN=5b8d77ed-b0eb-4455-9fea-301fb57a315e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:2a:53:29:83:17:02:8f:80:52:e0:00:00: 4c:36:bb:20:40:18:38:8c:0a:6b:7d:03:29:97:c4: 64:bd:ad:10:04:db:35:e2:08:83:9b:7b:c8:d7:00: dc:c3:a6:ba:50:a6:40:2a:51:20:d6:4f:5e:e1:b4: 7e:0b:68:c4:7e:cf:f3:18:21:2c:b7:e2:09:bd:55: 29:fb:4a:1c:f1:9b:59:89:90:d3:af:1e:07:d0:fc: ad:6b:56:f2:f1:82:9a:a1:26:9b:77:91:59:cb:af: 9a:47:27:eb:57:e2:f8:2c:52:35:07:86:77:88:7a: 3a:1b:ae:e3:c7:43:9f:a3:d7:a3:ee:db:88:44:45: dd:4c:6a:1c:ab:b2:a9:4c:ab:c1:c5:bc:4d:e8:89: 75:7e:f6:2d:b8:d3:33:a9:fe:1f:a7:91:6d:dd:26: 9d:60:2b:da:82:75:f7:28:2b:f0:a6:cc:07:8b:cb: b8:b5:eb:48:01:c8:a3:1d:bc:11:1c:ca:c8:a9:ce: 87:80:b1:fd:57:ea:ed:d1:e3:83:ff:65:40:ee:b0: b3:b7:af:05:da:53:97:18:6b:c1:41:57:3b:7a:7d: 13:f4:cd:06:47:11:e5:43:9d:c0:81:b7:c7:bc:04: 4e:4a:1e:9b:a3:aa:bf:ca:27:dc:b1:4f:1d:5a:0a: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:69:68:7C:3D:02:C9:FB:C1:8F:9F:A5:17:F4:67:25:2D:1D:92:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fe:d4:75:0e:4c:a5:15:57:42:8a:ad:4c:7f:1c:bd:1a:c8: d9:00:31:4c:4f:c1:b0:ce:e9:a0:b9:c1:ee:e3:9c:28:4a:48: 9d:c1:2d:6c:e3:9a:2a:96:f2:f9:a0:ef:b5:99:7d:9e:79:01: a7:10:4d:94:18:81:f0:d9:b2:d2:bb:9a:52:3e:d5:06:7f:c3: 8d:a7:04:c2:e2:50:97:be:2e:0c:8d:08:96:20:e0:f8:33:3f: 19:b7:61:c3:e6:3f:2c:2a:6d:9e:56:68:03:57:09:89:96:c1: ea:8f:26:09:0e:f6:71:df:70:ab:45:18:e2:b1:9c:ed:9f:37: 2e:5a:d2:d5:ab:41:43:f2:fb:9e:c4:1a:a4:3f:0d:76:40:2d: 12:ea:6b:c4:83:86:37:2e:48:18:0e:22:59:81:ad:d9:b1:09: e7:29:31:dd:23:b2:3e:44:de:87:de:ee:89:74:cb:44:26:d8: f5:40:a7:92:56:5e:79:2f:e5:43:4a:b6:0e:bc:b7:7b:cd:59: 35:fc:e0:fa:bc:5a:da:9f:25:23:77:21:39:18:4e:71:3f:93: 1b:83:d3:59:7f:37:29:ec:c9:0a:dc:26:50:eb:38:32:e0:c0: f6:cf:91:eb:fb:9e:04:fc:e5:2d:fb:dd:29:91:25:c7:17:a7: 39:d7:57:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtEjFmjr8pRWUs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDIxM1oXDTI1MDcyMzExMDIxM1owLzEtMCsGA1UEAxMk NWI4ZDc3ZWQtYjBlYi00NDU1LTlmZWEtMzAxZmI1N2EzMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zMqUymDFwKPgFLgAABMNrsgQBg4jAprfQMp l8Rkva0QBNs14giDm3vI1wDcw6a6UKZAKlEg1k9e4bR+C2jEfs/zGCEst+IJvVUp +0oc8ZtZiZDTrx4H0Pyta1by8YKaoSabd5FZy6+aRyfrV+L4LFI1B4Z3iHo6G67j x0Ofo9ej7tuIREXdTGocq7KpTKvBxbxN6Il1fvYtuNMzqf4fp5Ft3SadYCvagnX3 KCvwpswHi8u4tetIAcijHbwRHMrIqc6HgLH9V+rt0eOD/2VA7rCzt68F2lOXGGvB QVc7en0T9M0GRxHlQ53AgbfHvAROSh6bo6q/yifcsU8dWgptnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVpaHw9Asn7wY+fpRf0ZyUtHZLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDNkNDhhZmUtNjkwOC0z MWQ0LTk1OGEtNzRmN2I3OGI5MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv+1HUOTKUVV0KKrUx/HL0ayNkAMUxPwbDO6aC5we7jnChKSJ3BLWzj miqW8vmg77WZfZ55AacQTZQYgfDZstK7mlI+1QZ/w42nBMLiUJe+LgyNCJYg4Pgz Pxm3YcPmPywqbZ5WaANXCYmWweqPJgkO9nHfcKtFGOKxnO2fNy5a0tWrQUPy+57E GqQ/DXZALRLqa8SDhjcuSBgOIlmBrdmxCecpMd0jsj5E3ofe7ol0y0Qm2PVAp5JW Xnkv5UNKtg68t3vNWTX84Pq8WtqfJSN3ITkYTnE/kxuD01l/NynsyQrcJlDrODLg wPbPkev7ngT85S373SmRJccXpznXV94= -----END CERTIFICATE-----Generated at Tue Apr 29 22:31:56 2025 by rpki-client