$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa File: d5b724de-9f61-31f2-b085-181a0a9d1526.roa (raw, json) Hash identifier: UlYgP/0UcFMTXVr8YeEHDhs1ujMUkWL+UO45dDuFFsI= Subject key identifier: BD:70:A1:B4:30:55:C8:C2:8B:28:89:FD:45:DF:1D:C5:9A:D2:FB:78 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B79E5B44AD6725517796C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa Signing time: Thu 24 Apr 2025 11:08:56 +0000 ROA not before: Thu 24 Apr 2025 11:08:56 +0000 ROA not after: Wed 23 Jul 2025 11:08:56 +0000 asID: 12041 IP address blocks: 65.22.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:9e:5b:44:ad:67:25:51:77:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:56 2025 GMT Not After : Jul 23 11:08:56 2025 GMT Subject: CN=9b3ef98c-8a98-4d00-8d05-513cd02a35d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:a8:f5:9e:6f:d1:3c:a0:f7:1f:f8:eb:e0: 76:ab:4d:52:d3:a6:32:f0:28:d0:cc:3c:a0:eb:4d: 46:b3:af:e0:e3:ca:c9:28:a6:37:83:bf:75:42:85: 63:a1:3e:2c:62:a3:65:d7:16:d5:81:19:2b:0e:da: a9:10:55:21:b9:47:04:6e:cd:49:07:0d:a5:3f:75: 90:c8:bf:74:6d:54:34:b2:72:5c:37:04:a0:2d:a7: 77:a3:be:d3:28:d9:75:23:d7:d3:f8:d3:22:1b:87: a7:3d:d9:c2:8b:4f:ae:92:e5:4e:52:6d:f1:27:f9: 39:b9:e9:79:e7:b3:0c:0b:30:9b:d7:cf:d5:d1:84: 4e:0c:33:07:cc:b8:7e:d1:6f:64:e2:ac:81:15:23: 3c:5b:c4:f0:ae:cb:49:5f:6b:64:28:ca:a3:ee:1a: ff:7d:6b:48:32:43:a3:26:1e:dc:77:64:3a:15:2b: e6:3d:ab:4e:34:60:40:c3:f5:4a:ff:c6:08:15:7e: b5:94:38:63:1b:94:53:e9:08:88:2d:6f:2a:47:9d: ab:78:30:c3:5a:dd:85:e5:81:c2:6b:ff:6e:18:68: c0:2f:51:62:24:00:6e:58:bd:45:6f:65:1c:0c:54: 0f:d6:3e:9b:d3:8b:65:16:8c:6c:fd:7e:99:12:3c: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:70:A1:B4:30:55:C8:C2:8B:28:89:FD:45:DF:1D:C5:9A:D2:FB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0f:35:95:56:9e:13:11:73:c3:72:56:b4:b1:1e:16:f9:44: 96:70:d5:36:c5:c7:b4:2c:a9:58:57:73:6f:6f:f6:9b:64:f9: 86:a7:ca:b8:b5:65:62:ca:95:45:c9:e8:59:37:dd:58:ef:58: 99:35:dc:51:b8:16:30:81:0b:60:43:98:45:f3:f9:5c:fb:11: 57:e7:dc:93:23:cd:5e:1f:c9:d9:04:20:2f:af:75:be:02:28: ae:7d:be:89:77:3f:3c:7c:4f:e3:9a:5f:da:15:8c:d6:b2:7a: 03:e5:f8:ca:f7:37:f0:84:d9:8c:e3:f4:87:5b:2c:5a:2a:3c: c7:9d:26:7d:ea:f4:72:f3:f7:e3:1e:68:ae:9f:ed:42:6b:81: 7b:71:87:57:2b:67:c9:7a:a5:0e:34:c3:fd:2f:f1:80:0b:1d: dd:98:50:62:11:c3:67:47:90:da:50:9a:73:e8:32:7e:61:82: da:0d:87:46:a3:a7:b7:28:c8:1f:ba:4c:04:05:e1:29:ce:22: 6c:43:95:57:4a:04:4d:3f:2d:5b:fd:9e:ee:76:80:5b:e6:d9: a4:5a:59:5b:8f:ae:bb:a9:93:f7:86:f6:2d:e6:37:b0:4c:f0: 6f:33:f6:4c:ca:44:dd:4c:e7:0e:46:31:1c:d0:0b:ba:49:63: c5:bc:8e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht55bRK1nJVF3lsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1NloXDTI1MDcyMzExMDg1NlowLzEtMCsGA1UEAxMk OWIzZWY5OGMtOGE5OC00ZDAwLThkMDUtNTEzY2QwMmEzNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGmo9Z5v0Tyg9x/46+B2q01S06Yy8CjQzDyg 601Gs6/g48rJKKY3g791QoVjoT4sYqNl1xbVgRkrDtqpEFUhuUcEbs1JBw2lP3WQ yL90bVQ0snJcNwSgLad3o77TKNl1I9fT+NMiG4enPdnCi0+ukuVOUm3xJ/k5uel5 57MMCzCb18/V0YRODDMHzLh+0W9k4qyBFSM8W8TwrstJX2tkKMqj7hr/fWtIMkOj Jh7cd2Q6FSvmPatONGBAw/VK/8YIFX61lDhjG5RT6QiILW8qR52reDDDWt2F5YHC a/9uGGjAL1FiJABuWL1Fb2UcDFQP1j6b04tlFoxs/X6ZEjywcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1wobQwVcjCiyiJ/UXfHcWa0vt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDViNzI0ZGUtOWY2MS0z MWYyLWIwODUtMTgxYTBhOWQxNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4PNZVWnhMRc8NyVrSxHhb5RJZw1TbFx7QsqVhXc29v9ptk+Yanyri1 ZWLKlUXJ6Fk33VjvWJk13FG4FjCBC2BDmEXz+Vz7EVfn3JMjzV4fydkEIC+vdb4C KK59vol3Pzx8T+OaX9oVjNayegPl+Mr3N/CE2Yzj9IdbLFoqPMedJn3q9HLz9+Me aK6f7UJrgXtxh1crZ8l6pQ40w/0v8YALHd2YUGIRw2dHkNpQmnPoMn5hgtoNh0aj p7coyB+6TAQF4SnOImxDlVdKBE0/LVv9nu52gFvm2aRaWVuPrrupk/eG9i3mN7BM 8G8z9kzKRN1M5w5GMRzQC7pJY8W8jlo= -----END CERTIFICATE-----Generated at Tue Apr 29 16:21:33 2025 by rpki-client