$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3f4a3cf-f99c-329e-a0ee-e5f480de42f9.roa File: e3f4a3cf-f99c-329e-a0ee-e5f480de42f9.roa (raw, json) Hash identifier: Q1xIMOwt6ssM9jrGknSbXqeUSzZdTkPOwqxvTYoqdEM= Subject key identifier: C6:1A:36:EC:3C:F1:FF:17:30:51:88:E9:BF:C7:E7:65:20:07:93:AC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A211270357B95BE2B3635080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3f4a3cf-f99c-329e-a0ee-e5f480de42f9.roa Signing time: Thu 24 Apr 2025 14:09:20 +0000 ROA not before: Thu 24 Apr 2025 14:09:20 +0000 ROA not after: Wed 23 Jul 2025 14:09:20 +0000 asID: 207266 IP address blocks: 65.22.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:27:03:57:b9:5b:e2:b3:63:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:09:20 2025 GMT Not After : Jul 23 14:09:20 2025 GMT Subject: CN=091a2cee-7386-4a6f-8297-8560bd4da4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:02:3f:b3:ba:b5:e0:8c:7d:89:1a:fc:53:06: 98:8c:3f:b9:29:84:bd:6b:c8:3c:67:5d:74:af:10: 41:80:26:3e:8f:57:18:50:f7:ec:86:0c:a7:20:3b: d6:d3:f5:84:af:7b:67:d6:a0:af:6b:ef:81:81:56: 4d:bd:3c:ab:b2:11:87:ef:f1:52:d9:55:8c:0e:0c: cc:a3:5a:60:83:df:33:18:b6:96:d9:19:f4:09:ec: fd:6d:b7:2e:8f:d9:2b:5c:77:24:61:bc:01:e2:de: 78:13:9f:e1:96:a7:ee:09:5f:ab:6c:dd:af:e1:b8: e2:33:f2:f3:71:a9:72:f6:57:3b:9c:08:32:69:88: 25:75:58:93:95:55:1e:a1:96:19:0a:0b:cb:0c:e6: be:b3:cf:d6:36:c5:1c:cb:0d:16:23:3c:a2:b9:9b: f4:f0:92:23:d4:40:d7:ff:4c:38:4e:fd:68:2e:c1: d7:06:b2:a5:83:8d:8b:eb:ce:6a:84:be:3e:9f:97: 47:ae:a1:eb:fb:17:d8:8d:0a:4e:c0:74:f1:14:1b: 23:eb:92:19:08:a8:96:d5:ac:c1:27:57:85:3f:6d: 7a:dc:1b:75:6d:a0:fc:d2:19:14:34:69:bf:41:e4: f8:67:0f:17:0c:4f:78:f4:89:d4:a4:88:58:c1:fd: b1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1A:36:EC:3C:F1:FF:17:30:51:88:E9:BF:C7:E7:65:20:07:93:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3f4a3cf-f99c-329e-a0ee-e5f480de42f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:22:fa:4e:1a:8c:b3:ad:52:e4:46:ed:cb:29:cb:08:0e:87: 26:7e:dc:91:de:05:f9:ab:11:0a:33:f1:cf:48:f0:c1:92:63: 86:2d:6e:8c:4d:4e:b0:33:1b:d6:82:14:d8:b3:af:22:79:64: 4f:da:95:16:e8:21:ae:77:e4:1c:13:11:8f:da:b3:00:bb:5d: d0:ed:e6:ce:88:bf:c5:e3:d3:ae:21:6e:2a:a6:a9:c2:6d:2d: a4:b0:e3:1f:21:99:17:2f:42:66:de:cd:4f:6a:4d:33:de:8f: 3f:3a:9a:c4:e3:9e:04:3a:fc:3f:a1:0e:5b:43:ec:3c:9e:08: 3c:e7:2f:29:b8:ea:2c:19:4c:dd:4c:1d:69:b6:6c:a4:39:df: 8b:9f:eb:4c:b6:cd:4c:cc:7c:47:ad:74:5d:91:8f:5a:e4:81: d1:4a:c4:c1:bc:79:c1:78:00:90:c4:61:f1:28:b6:24:12:1b: 5d:c8:cd:b9:77:41:09:e6:43:8a:b0:4e:ea:98:d5:84:cc:c3: bf:28:d1:26:dd:b8:f7:19:9a:ef:5b:56:08:31:69:ef:a4:38: a8:91:46:93:60:9c:50:22:ad:d1:84:a6:91:ad:08:65:7d:4b: 5f:e4:86:70:72:ba:d6:26:a7:32:7b:13:6e:6a:9c:78:2b:ee: 27:dd:f1:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEScDV7lb4rNjUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MDkyMFoXDTI1MDcyMzE0MDkyMFowLzEtMCsGA1UEAxMk MDkxYTJjZWUtNzM4Ni00YTZmLTgyOTctODU2MGJkNGRhNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwI/s7q14Ix9iRr8UwaYjD+5KYS9a8g8Z110 rxBBgCY+j1cYUPfshgynIDvW0/WEr3tn1qCva++BgVZNvTyrshGH7/FS2VWMDgzM o1pgg98zGLaW2Rn0Cez9bbcuj9krXHckYbwB4t54E5/hlqfuCV+rbN2v4bjiM/Lz caly9lc7nAgyaYgldViTlVUeoZYZCgvLDOa+s8/WNsUcyw0WIzyiuZv08JIj1EDX /0w4Tv1oLsHXBrKlg42L685qhL4+n5dHrqHr+xfYjQpOwHTxFBsj65IZCKiW1azB J1eFP2163Bt1baD80hkUNGm/QeT4Zw8XDE949InUpIhYwf2x6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYaNuw88f8XMFGI6b/H52UgB5OsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTNmNGEzY2YtZjk5Yy0z MjllLWEwZWUtZTVmNDgwZGU0MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoi+k4ajLOtUuRG7cspywgOhyZ+3JHeBfmrEQoz8c9I8MGSY4YtboxN TrAzG9aCFNizryJ5ZE/alRboIa535BwTEY/aswC7XdDt5s6Iv8Xj064hbiqmqcJt LaSw4x8hmRcvQmbezU9qTTPejz86msTjngQ6/D+hDltD7DyeCDznLym46iwZTN1M HWm2bKQ534uf60y2zUzMfEetdF2Rj1rkgdFKxMG8ecF4AJDEYfEotiQSG13Izbl3 QQnmQ4qwTuqY1YTMw78o0SbduPcZmu9bVggxae+kOKiRRpNgnFAirdGEppGtCGV9 S1/khnByutYmpzJ7E25qnHgr7ifd8aY= -----END CERTIFICATE-----Generated at Wed Apr 30 00:11:26 2025 by rpki-client