$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa File: dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa (raw, json) Hash identifier: O4tPvXO9BwaOHi/wxggMPCykMLeK6et7XFqUnZPEFjk= Subject key identifier: 5A:2B:F9:46:D3:55:B4:41:97:C7:E3:3A:9B:52:A9:77:E4:58:DA:7F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7D25BA4B78C52D498A280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa Signing time: Thu 24 Apr 2025 11:09:21 +0000 ROA not before: Thu 24 Apr 2025 11:09:21 +0000 ROA not after: Wed 23 Jul 2025 11:09:21 +0000 asID: 12041 IP address blocks: 65.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:d2:5b:a4:b7:8c:52:d4:98:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:21 2025 GMT Not After : Jul 23 11:09:21 2025 GMT Subject: CN=87bf57ce-c1e2-4b4a-b321-19ed79fbc0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:65:5b:ae:d3:91:20:e2:50:3c:1f:fb:78: d6:17:0e:b2:ac:63:88:b5:96:7c:22:90:3c:87:30: 68:50:f4:dd:36:78:19:b1:f0:20:49:dc:4b:a6:97: ae:70:1e:c4:68:70:ad:b9:62:58:e1:98:a0:d6:6a: 9e:d6:05:ce:2a:4c:3b:ae:5d:c1:7a:7d:6a:00:3b: 21:ea:40:07:bb:c0:66:1d:ec:59:2c:d1:d5:60:93: ce:ae:ef:01:3a:7c:09:d3:a4:7b:f2:81:bf:02:c9: 79:04:af:38:d4:cb:4d:d1:aa:3a:df:66:75:f1:70: f1:7a:d5:ed:1b:38:f0:c9:b7:fd:7d:58:78:68:91: 7e:80:a8:3e:13:a1:bc:7d:27:83:8f:1b:77:fb:57: 97:14:e9:8f:de:50:a1:39:81:dd:e9:a1:84:56:9b: 6e:d7:59:0d:b1:a2:a7:15:3c:f5:a6:69:7d:b0:f2: 31:48:b4:ee:08:38:86:60:63:76:cb:ed:78:e6:a8: ad:63:32:bb:9d:96:55:8c:35:e3:fb:f0:76:de:97: 0a:6c:35:e1:cc:2d:13:32:8a:e2:12:ab:5e:eb:5c: 15:e1:ae:71:43:39:27:0b:41:8a:c3:0d:ec:1f:fb: b8:60:54:02:ce:a7:47:6f:ec:08:86:ed:06:30:ec: e1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2B:F9:46:D3:55:B4:41:97:C7:E3:3A:9B:52:A9:77:E4:58:DA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:de:73:e9:78:b4:0b:17:98:98:e5:55:5f:61:cd:82:0f:29: bb:cc:89:50:31:2c:e5:8e:10:7e:d0:12:d1:7b:35:76:5f:82: 10:e5:73:14:9e:5f:fd:2e:3c:f3:93:8a:6b:a7:03:a3:16:44: 83:4e:ca:98:80:ca:0d:7f:ba:3e:3b:83:bf:ce:5e:fc:05:c9: fe:36:67:5a:df:a9:f4:98:21:7b:7f:a4:3d:77:85:65:fe:96: 88:cf:cd:8d:c2:cd:66:ab:db:1b:ea:6a:72:81:84:7a:06:10: 5d:88:9b:87:ac:3d:2b:35:a7:21:6e:a0:87:18:3e:a9:8f:ee: e3:f8:dd:e3:5b:90:17:e5:9e:12:ed:a7:7b:14:af:38:f6:ba: ef:9a:61:e6:47:78:e8:7c:41:d0:0e:67:5e:3a:d2:6e:11:e7: f9:4e:3a:31:0e:bf:9d:b9:e2:58:dc:a0:e6:30:2c:ab:e7:8f: 79:c8:00:56:52:47:5c:53:ab:64:c3:13:e6:8a:81:61:92:68: 32:1d:61:c3:2d:e8:dd:b9:af:70:15:e1:0d:d0:5c:a8:7f:4a: b6:ba:dc:e0:fe:83:d1:69:2a:fc:ca:be:f3:dc:92:a6:b0:3e: dd:e8:3d:14:1a:94:12:13:85:f4:db:c3:6a:f8:d4:44:66:83: 04:4e:87:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht9JbpLeMUtSYooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyMVoXDTI1MDcyMzExMDkyMVowLzEtMCsGA1UEAxMk ODdiZjU3Y2UtYzFlMi00YjRhLWIzMjEtMTllZDc5ZmJjMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoFlW67TkSDiUDwf+3jWFw6yrGOItZZ8IpA8 hzBoUPTdNngZsfAgSdxLppeucB7EaHCtuWJY4Zig1mqe1gXOKkw7rl3Ben1qADsh 6kAHu8BmHexZLNHVYJPOru8BOnwJ06R78oG/Asl5BK841MtN0ao632Z18XDxetXt Gzjwybf9fVh4aJF+gKg+E6G8fSeDjxt3+1eXFOmP3lChOYHd6aGEVptu11kNsaKn FTz1pml9sPIxSLTuCDiGYGN2y+145qitYzK7nZZVjDXj+/B23pcKbDXhzC0TMori Eqte61wV4a5xQzknC0GKww3sH/u4YFQCzqdHb+wIhu0GMOzhUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFor+UbTVbRBl8fjOptSqXfkWNp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGZmOTliYTgtY2IxZi0z NDI3LWE4NDEtNmExMzYyY2QyNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3ec+l4tAsXmJjlVV9hzYIPKbvMiVAxLOWOEH7QEtF7NXZfghDlcxSe X/0uPPOTimunA6MWRINOypiAyg1/uj47g7/OXvwFyf42Z1rfqfSYIXt/pD13hWX+ lojPzY3CzWar2xvqanKBhHoGEF2Im4esPSs1pyFuoIcYPqmP7uP43eNbkBflnhLt p3sUrzj2uu+aYeZHeOh8QdAOZ1460m4R5/lOOjEOv5254ljcoOYwLKvnj3nIAFZS R1xTq2TDE+aKgWGSaDIdYcMt6N25r3AV4Q3QXKh/Sra63OD+g9FpKvzKvvPckqaw Pt3oPRQalBIThfTbw2r41ERmgwROh3A= -----END CERTIFICATE-----Generated at Sun Jun 15 12:05:55 2025 by rpki-client