$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa File: d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa (raw, json) Hash identifier: NhK50JRS8EgWve6z9nZ00ocL/YlN1su+//J1NAxdA/s= Subject key identifier: C0:7F:88:89:2E:24:4D:D9:B1:AC:A2:19:39:2A:23:2E:A0:96:CD:64 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7E4BC8668F45ED47A7180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa Signing time: Thu 24 Apr 2025 11:09:29 +0000 ROA not before: Thu 24 Apr 2025 11:09:29 +0000 ROA not after: Wed 23 Jul 2025 11:09:29 +0000 asID: 12041 IP address blocks: 65.22.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:e4:bc:86:68:f4:5e:d4:7a:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:29 2025 GMT Not After : Jul 23 11:09:29 2025 GMT Subject: CN=29748cea-e132-4103-af0e-b916c5e53c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:8b:b5:1b:e4:9b:cd:09:1f:28:a8:68:8a: 43:f1:37:d2:60:f6:b8:9e:53:6d:d8:8b:b3:53:19: 70:22:7b:d7:35:13:9e:a3:fb:f1:a4:de:1d:34:a7: c8:22:c9:7b:e2:d4:69:e5:64:4f:f5:bb:5d:3a:92: 03:4d:f3:d3:f7:2f:d8:13:32:40:41:b7:8e:35:9c: 28:78:ba:43:0e:89:12:bd:53:d6:28:07:b8:92:f4: 45:d4:f3:cb:29:66:43:d0:3f:9f:4a:eb:68:55:cb: 46:77:83:b4:23:9f:67:dd:d3:35:1d:1e:f2:86:a3: 6c:60:fe:a2:08:11:05:bd:87:7a:fc:1f:94:26:5d: 6b:67:b8:29:c1:54:34:0b:57:5d:85:9b:5c:7a:db: 8c:48:29:63:1d:71:cc:ab:33:55:3d:16:96:e0:4c: b3:46:e2:79:6f:c4:40:a9:fb:17:31:31:6d:8f:9a: 12:94:fe:57:a1:02:7e:a6:47:d5:04:42:db:18:58: d3:1e:03:d1:16:db:32:66:8a:4d:6f:c5:29:8e:ff: ab:f9:9e:c3:d3:56:e7:8f:cd:a9:d1:fe:3c:d7:5c: e8:f4:78:9b:50:b1:ed:d7:86:60:49:e5:29:89:af: b6:d2:57:93:91:b3:34:2b:b8:55:84:a2:ba:a8:37: 3e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7F:88:89:2E:24:4D:D9:B1:AC:A2:19:39:2A:23:2E:A0:96:CD:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c4:f0:f4:24:84:1c:1b:92:03:7d:cb:35:33:50:3f:f6:0c: e5:cd:5f:17:22:d5:57:2f:06:3a:53:f0:25:b5:cf:52:08:10: 53:de:c3:7c:10:6c:c6:dc:13:a3:fe:af:4a:21:bf:53:4d:7b: 20:5d:60:e8:62:9c:92:e0:d6:26:5c:42:73:16:3a:82:f6:61: d9:c0:9a:25:8e:4a:3e:6a:44:cd:64:de:e0:bd:05:d1:87:b6: 1a:78:5b:d2:5f:aa:e2:dd:ef:96:7d:c1:73:8e:4b:6b:12:87: cf:d3:5e:ba:07:1a:c2:bc:cc:3e:8f:08:09:31:f5:77:59:9e: 4a:3b:bc:fc:28:4a:f4:03:2b:b8:dd:43:c7:5e:b2:b5:9f:29: 6a:66:b0:41:c1:c8:e2:c9:73:38:7f:9a:b1:a9:48:3f:35:ba: fd:ad:af:3c:4a:3a:8c:3a:67:25:4b:1a:d9:b0:3e:da:8d:4e: 63:b8:f3:75:64:11:72:d9:c6:bc:a6:b0:e7:e5:11:dd:b5:7c: bc:da:89:62:41:72:5d:8d:e6:03:77:12:d7:53:44:0c:b2:a1: 8e:14:2a:cc:15:e3:d6:23:30:c1:1d:a1:bc:56:d4:84:e7:69: 00:c0:91:8f:6d:e8:fe:9b:eb:75:1e:66:55:2f:1a:24:76:83: 04:3b:c6:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht+S8hmj0XtR6cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyOVoXDTI1MDcyMzExMDkyOVowLzEtMCsGA1UEAxMk Mjk3NDhjZWEtZTEzMi00MTAzLWFmMGUtYjkxNmM1ZTUzYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqeLtRvkm80JHyioaIpD8TfSYPa4nlNt2Iuz UxlwInvXNROeo/vxpN4dNKfIIsl74tRp5WRP9btdOpIDTfPT9y/YEzJAQbeONZwo eLpDDokSvVPWKAe4kvRF1PPLKWZD0D+fSutoVctGd4O0I59n3dM1HR7yhqNsYP6i CBEFvYd6/B+UJl1rZ7gpwVQ0C1ddhZtcetuMSCljHXHMqzNVPRaW4EyzRuJ5b8RA qfsXMTFtj5oSlP5XoQJ+pkfVBELbGFjTHgPRFtsyZopNb8Upjv+r+Z7D01bnj82p 0f4811zo9HibULHt14ZgSeUpia+20leTkbM0K7hVhKK6qDc+7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMB/iIkuJE3ZsayiGTkqIy6gls1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDc3NmZhMGEtOGYxMS0z MmY1LWE2ZjUtNjYzOWMxOWYwODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjE8PQkhBwbkgN9yzUzUD/2DOXNXxci1VcvBjpT8CW1z1IIEFPew3wQ bMbcE6P+r0ohv1NNeyBdYOhinJLg1iZcQnMWOoL2YdnAmiWOSj5qRM1k3uC9BdGH thp4W9JfquLd75Z9wXOOS2sSh8/TXroHGsK8zD6PCAkx9XdZnko7vPwoSvQDK7jd Q8desrWfKWpmsEHByOLJczh/mrGpSD81uv2trzxKOow6ZyVLGtmwPtqNTmO483Vk EXLZxrymsOflEd21fLzaiWJBcl2N5gN3EtdTRAyyoY4UKswV49YjMMEdobxW1ITn aQDAkY9t6P6b63UeZlUvGiR2gwQ7xrE= -----END CERTIFICATE-----Generated at Tue Apr 29 12:48:37 2025 by rpki-client