$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa File: ddc8d858-035c-3840-a15e-407ffbe6818e.roa (raw, json) Hash identifier: xBJ9BQ8MLtj0udH0ix//tOvyrOqhRiAUmUkzgS6unNk= Subject key identifier: 70:A4:66:06:C4:3E:D0:9E:1F:09:DC:E2:F2:E8:29:41:6E:82:D2:96 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7A15ADEDB902260B619E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa Signing time: Thu 24 Apr 2025 11:08:58 +0000 ROA not before: Thu 24 Apr 2025 11:08:58 +0000 ROA not after: Wed 23 Jul 2025 11:08:58 +0000 asID: 12041 IP address blocks: 65.22.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:a1:5a:de:db:90:22:60:b6:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:58 2025 GMT Not After : Jul 23 11:08:58 2025 GMT Subject: CN=53671c72-303d-4335-bd57-458e0c172ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:9e:e0:47:82:4f:5b:9e:9b:db:c9:87:28: 18:bc:d0:a5:29:db:eb:8c:b9:07:f3:7d:27:18:f7: 76:1b:5b:4b:8a:f0:8c:c6:d4:24:0f:9c:a2:1c:c2: 15:14:9e:38:06:e0:f5:f7:bd:ee:95:64:81:3f:d4: 2a:70:fd:e0:43:51:a0:46:c6:4a:92:ce:f6:d0:83: d3:08:a8:98:b3:a2:ef:d3:29:ec:91:e5:bf:b6:57: b5:1b:5b:15:2b:26:fc:7f:a2:7d:97:35:ca:8b:31: 01:01:a8:9c:7a:eb:b2:9c:35:3c:95:e2:b2:84:44: 5c:fa:11:5b:b8:46:f7:13:a0:9f:2a:37:37:a1:02: fd:90:85:1c:0c:29:c5:aa:47:e6:e2:b6:e8:ab:5b: 64:e7:9c:1d:f4:83:5c:e8:a4:81:9e:a4:b0:87:46: 22:a7:48:fa:f6:c0:68:c2:f6:7e:78:6c:43:6c:4f: 09:01:3d:c5:ac:e7:90:ff:9d:3a:f3:d4:c8:93:2d: ed:16:30:0d:63:db:a8:f1:51:80:45:15:45:42:ae: df:d3:9a:f8:d6:19:d0:97:77:8f:2f:d7:8e:b3:23: 81:53:83:32:0f:41:36:df:9e:80:8f:b2:90:54:99: 99:a6:13:ed:fd:d8:0e:28:23:88:5d:6e:78:e9:05: 06:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A4:66:06:C4:3E:D0:9E:1F:09:DC:E2:F2:E8:29:41:6E:82:D2:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:78:41:84:68:1b:2d:9e:ee:0d:6b:49:c3:66:23:d8:f6:f5: a3:5c:4a:f6:55:41:d6:d3:7b:39:af:07:98:f0:a7:c8:3c:81: bb:52:41:d7:72:1c:22:14:89:e5:75:fa:1a:f6:a7:bc:5e:12: 11:fa:77:4a:08:c6:87:d6:b1:7b:cc:19:7d:00:6b:d1:51:27: d8:0b:a7:06:49:45:b3:96:e9:75:52:c0:4f:51:d4:24:e6:4a: 59:b6:4b:aa:d0:c3:46:2c:46:67:17:77:17:74:70:8e:8e:dd: 05:c3:3a:e2:ed:5d:07:18:17:f2:97:19:a2:78:70:df:f6:72: 3d:a8:15:2e:39:61:45:1c:92:dd:21:d3:e5:ab:93:63:6b:70: 72:58:6f:fb:90:09:2a:0c:4a:ab:c5:43:bf:3d:4b:9c:7c:aa: 80:77:6d:54:b4:1f:94:37:17:30:92:b4:38:65:d2:12:d3:99: de:95:5b:37:02:34:ad:fc:27:19:dc:10:22:9f:8c:33:f1:fc: 5e:63:e9:b0:6c:9f:fc:bb:22:a5:b2:33:e8:e4:d1:78:77:4f: 39:db:8d:6b:86:dd:36:79:34:0d:9d:23:94:38:dd:b5:b7:ee: b4:53:4f:ec:e5:1a:24:8e:c1:62:5d:2e:d2:19:fe:7a:ad:8f: c8:d2:11:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht6Fa3tuQImC2GeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1OFoXDTI1MDcyMzExMDg1OFowLzEtMCsGA1UEAxMk NTM2NzFjNzItMzAzZC00MzM1LWJkNTctNDU4ZTBjMTcyZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Ke4EeCT1uem9vJhygYvNClKdvrjLkH830n GPd2G1tLivCMxtQkD5yiHMIVFJ44BuD1973ulWSBP9QqcP3gQ1GgRsZKks720IPT CKiYs6Lv0ynskeW/tle1G1sVKyb8f6J9lzXKizEBAaiceuuynDU8leKyhERc+hFb uEb3E6CfKjc3oQL9kIUcDCnFqkfm4rboq1tk55wd9INc6KSBnqSwh0Yip0j69sBo wvZ+eGxDbE8JAT3FrOeQ/50689TIky3tFjANY9uo8VGARRVFQq7f05r41hnQl3eP L9eOsyOBU4MyD0E2356Aj7KQVJmZphPt/dgOKCOIXW546QUGsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCkZgbEPtCeHwnc4vLoKUFugtKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGRjOGQ4NTgtMDM1Yy0z ODQwLWExNWUtNDA3ZmZiZTY4MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALd4QYRoGy2e7g1rScNmI9j29aNcSvZVQdbTezmvB5jwp8g8gbtSQddy HCIUieV1+hr2p7xeEhH6d0oIxofWsXvMGX0Aa9FRJ9gLpwZJRbOW6XVSwE9R1CTm Slm2S6rQw0YsRmcXdxd0cI6O3QXDOuLtXQcYF/KXGaJ4cN/2cj2oFS45YUUckt0h 0+Wrk2NrcHJYb/uQCSoMSqvFQ789S5x8qoB3bVS0H5Q3FzCStDhl0hLTmd6VWzcC NK38JxncECKfjDPx/F5j6bBsn/y7IqWyM+jk0Xh3TznbjWuG3TZ5NA2dI5Q43bW3 7rRTT+zlGiSOwWJdLtIZ/nqtj8jSESI= -----END CERTIFICATE-----Generated at Tue Apr 29 14:32:44 2025 by rpki-client