$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e059ae5c-2f57-34ea-bc48-8ee1b11145e0.roa File: e059ae5c-2f57-34ea-bc48-8ee1b11145e0.roa (raw, json) Hash identifier: rRYBry+AUydsMuEadJMkg8Y9SXRUqRni+OfwWFUrVMo= Subject key identifier: B5:96:7F:DB:DF:87:46:DC:68:93:7F:26:F9:B9:B6:04:F2:BF:65:01 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B44A689B561CE07AC76360 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e059ae5c-2f57-34ea-bc48-8ee1b11145e0.roa Signing time: Thu 24 Apr 2025 11:02:14 +0000 ROA not before: Thu 24 Apr 2025 11:02:14 +0000 ROA not after: Wed 23 Jul 2025 11:02:14 +0000 asID: 12041 IP address blocks: 65.22.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:4a:68:9b:56:1c:e0:7a:c7:63:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:02:14 2025 GMT Not After : Jul 23 11:02:14 2025 GMT Subject: CN=2f7e9361-46a5-4083-983b-aced84b70d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7c:40:30:d4:c8:6b:0c:72:57:7f:e6:03:44: 08:7d:59:d9:bc:7b:85:80:e4:a1:ee:15:52:85:b1: b0:4e:e8:45:0a:3a:8f:32:d0:f2:fe:6b:f3:d8:6b: 27:36:2e:89:3b:21:74:5c:a7:4e:29:11:c3:48:a2: c0:2d:d2:f6:ab:26:51:e3:1d:cc:59:9d:59:ff:10: f8:e3:5e:fb:58:b3:ff:15:0e:a8:25:25:be:c0:6c: 8d:a9:46:4f:70:d8:25:fc:5d:21:e9:94:a7:97:18: fe:74:dd:98:da:c5:17:af:64:07:ec:42:3e:da:0c: 31:6a:e0:2a:06:7f:c0:6b:6c:c8:b1:68:e7:9e:a6: 9f:15:75:d8:c4:59:19:67:8c:c8:5a:fb:f3:ea:d6: 34:66:68:2e:b3:7e:43:bf:95:35:61:3d:66:0b:dc: 25:b0:d8:4e:d3:9c:ba:bf:33:72:d4:2f:89:a2:12: 7c:64:dd:72:c7:8d:34:6f:5e:b3:d1:b5:04:b9:8a: 3b:37:87:c6:76:f4:b1:3c:75:4d:b9:95:e5:33:af: 46:ce:a1:13:11:99:fd:12:6a:7c:e6:7b:2f:d1:84: 01:03:44:f3:8d:b0:3a:5b:be:d8:4a:61:77:98:28: a2:63:c5:ee:75:d5:77:34:a1:11:9e:ae:a8:f2:b8: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:96:7F:DB:DF:87:46:DC:68:93:7F:26:F9:B9:B6:04:F2:BF:65:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e059ae5c-2f57-34ea-bc48-8ee1b11145e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:d2:28:5a:a7:5c:05:a8:c6:d5:87:da:e2:9e:82:68:58:1f: fb:30:06:55:36:1a:95:7a:3a:02:44:0a:50:cb:9e:fb:cb:28: ed:41:0c:7e:b9:e5:b3:6c:5e:21:57:0c:93:02:14:c5:bf:59: fa:1d:e6:48:c6:f9:6d:ee:22:2a:4c:15:83:b2:ad:3b:81:09: 06:90:89:e9:a8:81:52:ce:f0:35:41:86:f6:e3:c5:2d:5f:73: 41:ce:07:af:34:1e:b5:11:2b:4e:6b:05:78:ad:71:32:3e:10: 3e:41:19:ea:19:09:ef:7e:1b:03:6c:44:73:c7:14:00:e6:2b: 6b:2c:91:52:bb:ac:59:bb:ba:7b:54:b5:29:3e:59:35:08:be: 26:ec:ab:84:cc:67:b8:7c:5d:31:85:aa:92:32:bf:3a:1c:d1: b5:ad:86:1c:98:b5:fc:c1:8d:6f:86:10:e6:b7:d7:4d:4a:54: 8c:97:ec:e0:10:e1:d3:fe:bd:98:4d:c6:69:12:43:30:b7:63: 53:6f:46:d8:29:d5:83:a2:95:21:d1:af:58:e3:d0:25:5c:39: 78:4b:c9:b9:1c:f4:33:85:74:f0:83:70:b7:a0:d7:d3:60:ea: cb:79:c1:2b:c2:c0:36:d6:22:96:95:f3:f4:62:41:2f:c9:86: 74:c7:38:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtEpom1Yc4HrHY2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDIxNFoXDTI1MDcyMzExMDIxNFowLzEtMCsGA1UEAxMk MmY3ZTkzNjEtNDZhNS00MDgzLTk4M2ItYWNlZDg0YjcwZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnxAMNTIawxyV3/mA0QIfVnZvHuFgOSh7hVS hbGwTuhFCjqPMtDy/mvz2GsnNi6JOyF0XKdOKRHDSKLALdL2qyZR4x3MWZ1Z/xD4 4177WLP/FQ6oJSW+wGyNqUZPcNgl/F0h6ZSnlxj+dN2Y2sUXr2QH7EI+2gwxauAq Bn/Aa2zIsWjnnqafFXXYxFkZZ4zIWvvz6tY0Zmgus35Dv5U1YT1mC9wlsNhO05y6 vzNy1C+JohJ8ZN1yx400b16z0bUEuYo7N4fGdvSxPHVNuZXlM69GzqETEZn9Emp8 5nsv0YQBA0TzjbA6W77YSmF3mCiiY8XuddV3NKERnq6o8rhNGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWWf9vfh0bcaJN/Jvm5tgTyv2UBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTA1OWFlNWMtMmY1Ny0z NGVhLWJjNDgtOGVlMWIxMTE0NWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjSKFqnXAWoxtWH2uKegmhYH/swBlU2GpV6OgJEClDLnvvLKO1BDH65 5bNsXiFXDJMCFMW/Wfod5kjG+W3uIipMFYOyrTuBCQaQiemogVLO8DVBhvbjxS1f c0HOB680HrURK05rBXitcTI+ED5BGeoZCe9+GwNsRHPHFADmK2sskVK7rFm7untU tSk+WTUIvibsq4TMZ7h8XTGFqpIyvzoc0bWthhyYtfzBjW+GEOa3101KVIyX7OAQ 4dP+vZhNxmkSQzC3Y1NvRtgp1YOilSHRr1jj0CVcOXhLybkc9DOFdPCDcLeg19Ng 6st5wSvCwDbWIpaV8/RiQS/JhnTHOL8= -----END CERTIFICATE-----Generated at Tue Apr 29 14:31:14 2025 by rpki-client