$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/df814382-2771-306d-bbaa-4a63b2d2379f.roa File: df814382-2771-306d-bbaa-4a63b2d2379f.roa (raw, json) Hash identifier: u7asQCVuTrJSucSh09k111yyVfEFLH5hFCWoDsbm3rE= Subject key identifier: BE:86:80:D8:06:47:5F:14:5A:CC:FA:B5:E9:C4:FD:CD:2F:A0:B1:72 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B80FDACBE45490D3C8FB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/df814382-2771-306d-bbaa-4a63b2d2379f.roa Signing time: Thu 24 Apr 2025 11:09:50 +0000 ROA not before: Thu 24 Apr 2025 11:09:50 +0000 ROA not after: Wed 23 Jul 2025 11:09:50 +0000 asID: 12041 IP address blocks: 65.22.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:0f:da:cb:e4:54:90:d3:c8:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:50 2025 GMT Not After : Jul 23 11:09:50 2025 GMT Subject: CN=14e3009e-9476-4e1c-b1c5-04f859a6a8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:29:be:ba:71:52:66:cb:8d:e0:2f:f0:c2: 25:49:8c:f8:ca:a6:09:d8:25:ce:46:fc:46:e9:63: 12:55:a8:8b:0b:3a:b0:2e:56:ac:8f:0a:4b:ab:ca: d3:95:cc:55:81:69:ec:69:d2:f1:c4:93:8f:ed:74: e2:20:96:11:24:57:7d:6e:b6:8a:f8:ad:0d:b9:48: 2c:37:a2:01:82:7a:ed:2c:5c:2e:68:ca:04:0b:7c: cf:3c:fc:dc:d9:9b:2e:70:1d:50:2b:d6:e3:23:2a: c9:11:12:6c:e2:ad:6c:2d:54:40:75:71:eb:d2:f1: 73:7a:ea:5c:95:a6:de:09:72:da:89:7b:57:8b:2a: c0:01:b6:54:5d:1a:77:fe:9c:3a:c6:2b:52:3c:a0: a0:e2:9c:33:4b:5a:84:30:d9:55:8a:ee:10:58:bb: b5:c7:24:8b:8f:ad:c7:f7:de:26:4c:38:a0:ff:a9: a2:6f:7a:93:89:fb:ce:dd:91:88:76:8c:4c:32:03: 44:35:b8:9c:c7:e7:b2:84:37:0e:31:72:1c:ab:72: 1f:8b:e4:66:f2:8a:6b:63:75:91:59:d9:51:81:69: f7:59:6b:10:51:c2:49:c1:d0:78:fd:5c:da:67:b9: cf:a1:ea:24:04:b4:89:c8:14:7a:36:4d:4c:6f:56: b2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:86:80:D8:06:47:5F:14:5A:CC:FA:B5:E9:C4:FD:CD:2F:A0:B1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/df814382-2771-306d-bbaa-4a63b2d2379f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f9:09:2a:67:6e:7f:ba:0c:74:2e:4d:1e:7d:08:8e:2a:5c: 7c:d5:de:2f:61:d2:66:12:a1:6b:a0:04:68:fc:bd:8a:a6:25: 21:8f:88:17:3a:d3:0f:d3:c5:86:ed:2f:d3:38:d2:8c:92:e3: 00:4f:ea:4f:a9:3c:73:5d:2c:b6:f0:f8:c8:f8:ed:8c:07:9b: c2:fe:00:e0:ea:37:cc:42:87:b9:27:4a:3d:54:34:64:e0:44: 98:cc:58:7d:a6:3d:a8:4d:32:f7:9f:6e:d4:cf:4b:20:da:34: e8:c1:3f:1c:fd:bd:d8:56:2c:ee:38:9e:00:c9:74:e6:6f:8a: 75:36:a0:1e:e7:b2:8e:00:83:d5:4e:72:7c:26:3b:67:f5:9e: ba:45:3d:d0:49:0a:74:2b:44:91:4d:c8:13:73:b9:6e:d9:2e: 01:5e:ce:53:3d:4b:60:09:31:8f:8d:6a:34:e0:4d:1b:be:44: 38:fa:96:18:14:20:ae:07:c0:f7:de:8b:ee:34:29:55:52:00: 8b:cb:4e:57:54:30:77:50:94:84:87:f1:66:e1:2b:b5:7f:ee: 6d:da:51:9c:c1:e3:29:55:02:a3:91:e7:a5:93:a6:57:53:5f: 07:3a:05:d7:77:71:25:e0:fa:c5:b9:fb:3b:67:1b:f5:8a:69: 52:85:26:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuA/ay+RUkNPI+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk1MFoXDTI1MDcyMzExMDk1MFowLzEtMCsGA1UEAxMk MTRlMzAwOWUtOTQ3Ni00ZTFjLWIxYzUtMDRmODU5YTZhOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SwpvrpxUmbLjeAv8MIlSYz4yqYJ2CXORvxG 6WMSVaiLCzqwLlasjwpLq8rTlcxVgWnsadLxxJOP7XTiIJYRJFd9braK+K0NuUgs N6IBgnrtLFwuaMoEC3zPPPzc2ZsucB1QK9bjIyrJERJs4q1sLVRAdXHr0vFzeupc labeCXLaiXtXiyrAAbZUXRp3/pw6xitSPKCg4pwzS1qEMNlViu4QWLu1xySLj63H 994mTDig/6mib3qTifvO3ZGIdoxMMgNENbicx+eyhDcOMXIcq3Ifi+Rm8oprY3WR WdlRgWn3WWsQUcJJwdB4/VzaZ7nPoeokBLSJyBR6Nk1Mb1aypQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6GgNgGR18UWsz6tenE/c0voLFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGY4MTQzODItMjc3MS0z MDZkLWJiYWEtNGE2M2IyZDIzNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/5CSpnbn+6DHQuTR59CI4qXHzV3i9h0mYSoWugBGj8vYqmJSGPiBc6 0w/TxYbtL9M40oyS4wBP6k+pPHNdLLbw+Mj47YwHm8L+AODqN8xCh7knSj1UNGTg RJjMWH2mPahNMvefbtTPSyDaNOjBPxz9vdhWLO44ngDJdOZvinU2oB7nso4Ag9VO cnwmO2f1nrpFPdBJCnQrRJFNyBNzuW7ZLgFezlM9S2AJMY+NajTgTRu+RDj6lhgU IK4HwPfei+40KVVSAIvLTldUMHdQlISH8WbhK7V/7m3aUZzB4ylVAqOR56WTpldT Xwc6Bdd3cSXg+sW5+ztnG/WKaVKFJq4= -----END CERTIFICATE-----Generated at Tue Apr 29 12:08:01 2025 by rpki-client