$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa File: d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa (raw, json) Hash identifier: c3wDpgTNPahm9h67Bu0AeWx79+y9PB9XGjZgYHC/I2U= Subject key identifier: 66:69:20:12:7B:3B:01:DB:6C:91:B9:BF:BA:FF:84:F7:87:66:6E:25 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2111B3B18AEA8D1C171C800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa Signing time: Thu 24 Apr 2025 14:09:15 +0000 ROA not before: Thu 24 Apr 2025 14:09:15 +0000 ROA not after: Wed 23 Jul 2025 14:09:15 +0000 asID: 207266 IP address blocks: 65.22.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:1b:3b:18:ae:a8:d1:c1:71:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:09:15 2025 GMT Not After : Jul 23 14:09:15 2025 GMT Subject: CN=57b09f6e-de74-4302-8bfe-8f8b385fa936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8e:53:c9:e4:b6:6a:c3:6b:23:36:8c:8c:75: 34:3b:13:e7:17:0b:c9:4b:b6:a6:7a:25:75:bb:f4: d6:ba:84:5c:8d:a1:6c:2b:44:af:5e:21:0f:41:2f: ae:51:4b:10:ba:6a:19:9a:a2:56:3d:30:f2:5b:c8: 43:46:65:22:50:8a:74:8f:8b:7c:7f:13:d4:63:1c: 8e:67:e6:a4:e8:b2:38:c1:ff:df:e6:e3:de:db:9e: 57:5f:3b:53:08:21:60:76:53:c7:2e:bb:c2:54:b3: ff:b0:bd:29:14:4a:0f:b5:93:49:9b:2c:97:8d:c5: 05:b8:99:40:12:41:f4:43:56:d7:a8:38:b7:0c:8f: 15:61:3a:4f:97:22:db:08:d3:3d:2e:c3:4c:61:50: 2e:ac:7d:20:6c:e9:6f:20:c0:f5:34:55:9c:59:9b: 16:42:18:6a:d0:2e:01:c1:b2:35:5c:b1:41:30:0a: a3:d3:15:23:de:6c:cd:2c:cc:96:3a:31:82:35:6c: 71:6c:72:7f:8e:10:5d:e1:95:1d:a2:b2:ca:3d:2a: 0b:63:3d:fb:33:46:f9:f7:8b:92:f0:a8:e0:aa:eb: 12:8e:0a:ef:ef:ca:df:d8:e7:a8:87:c5:83:4d:32: a1:93:da:2e:5d:8b:4e:55:18:fe:3f:72:bc:e8:b4: 35:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:69:20:12:7B:3B:01:DB:6C:91:B9:BF:BA:FF:84:F7:87:66:6E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:88:2b:2d:a5:b3:09:1f:e7:fc:35:65:07:d2:db:e5:7d:d8: 85:3b:64:c0:6b:71:44:e3:49:f8:6d:f4:90:df:e5:4c:60:fd: 2e:82:54:80:ee:b2:2f:93:2d:90:3f:e8:f3:3f:e9:0f:42:60: 3b:bc:a6:87:13:ea:e6:48:11:44:14:39:07:b4:04:f8:57:d8: f5:80:24:d6:7e:73:5d:7e:70:42:07:e4:b3:d9:95:a7:57:30: aa:da:9d:59:0d:31:5d:f9:9e:55:07:86:f3:5a:14:2b:a7:7b: d7:ba:34:b4:b7:84:83:15:6a:a1:77:f7:af:ff:c3:79:c1:93: 35:8d:a4:1c:a5:54:23:38:b6:d1:70:11:dd:2b:3c:b1:f7:8f: 0b:84:b0:f3:5c:51:fd:04:11:f6:59:1e:bb:d5:13:a0:d7:f1: 5f:b7:08:19:20:7f:48:d8:82:54:6e:92:9d:c5:d5:cd:7a:5a: 39:fb:5c:fe:10:b8:13:43:b0:e1:98:ac:35:1f:56:97:d8:65: d5:a3:ce:5a:43:80:19:a5:90:02:26:eb:f7:a7:31:f4:b3:0f: c6:3e:b4:26:bc:7f:07:02:41:36:8d:49:d8:cc:34:fc:ce:64: f1:ae:15:a2:7d:fb:b7:bf:5d:0a:8a:a0:1a:55:61:a3:3e:a3: 31:89:50:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiERs7GK6o0cFxyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MDkxNVoXDTI1MDcyMzE0MDkxNVowLzEtMCsGA1UEAxMk NTdiMDlmNmUtZGU3NC00MzAyLThiZmUtOGY4YjM4NWZhOTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I5TyeS2asNrIzaMjHU0OxPnFwvJS7ameiV1 u/TWuoRcjaFsK0SvXiEPQS+uUUsQumoZmqJWPTDyW8hDRmUiUIp0j4t8fxPUYxyO Z+ak6LI4wf/f5uPe255XXztTCCFgdlPHLrvCVLP/sL0pFEoPtZNJmyyXjcUFuJlA EkH0Q1bXqDi3DI8VYTpPlyLbCNM9LsNMYVAurH0gbOlvIMD1NFWcWZsWQhhq0C4B wbI1XLFBMAqj0xUj3mzNLMyWOjGCNWxxbHJ/jhBd4ZUdorLKPSoLYz37M0b594uS 8KjgqusSjgrv78rf2Oeoh8WDTTKhk9ouXYtOVRj+P3K86LQ17QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZpIBJ7OwHbbJG5v7r/hPeHZm4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDQ2ZjMyMTktYWZmOC0z MTU2LWJiM2EtNmRmOWM5NGIxYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyIKy2lswkf5/w1ZQfS2+V92IU7ZMBrcUTjSfht9JDf5Uxg/S6CVIDu si+TLZA/6PM/6Q9CYDu8pocT6uZIEUQUOQe0BPhX2PWAJNZ+c11+cEIH5LPZladX MKranVkNMV35nlUHhvNaFCune9e6NLS3hIMVaqF396//w3nBkzWNpBylVCM4ttFw Ed0rPLH3jwuEsPNcUf0EEfZZHrvVE6DX8V+3CBkgf0jYglRukp3F1c16Wjn7XP4Q uBNDsOGYrDUfVpfYZdWjzlpDgBmlkAIm6/enMfSzD8Y+tCa8fwcCQTaNSdjMNPzO ZPGuFaJ9+7e/XQqKoBpVYaM+ozGJUDI= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:36 2025 by rpki-client