$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77d3ac5-a400-3311-8a42-2ba2329a8b2c.roa File: e77d3ac5-a400-3311-8a42-2ba2329a8b2c.roa (raw, json) Hash identifier: omXieXE/BZQDHUa6n8iZ9TsKrNatSzOK69UIHR60NmA= Subject key identifier: 4E:E9:49:14:D2:43:2F:DB:16:FA:5E:89:B8:CA:EB:2D:8C:DA:06:FF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2115F7FE4A4B4AA73EF1980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77d3ac5-a400-3311-8a42-2ba2329a8b2c.roa Signing time: Thu 24 Apr 2025 14:09:47 +0000 ROA not before: Thu 24 Apr 2025 14:09:47 +0000 ROA not after: Wed 23 Jul 2025 14:09:47 +0000 asID: 207266 IP address blocks: 65.22.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:5f:7f:e4:a4:b4:aa:73:ef:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:09:47 2025 GMT Not After : Jul 23 14:09:47 2025 GMT Subject: CN=e0c46f5b-caf8-4cd6-8de7-f032f9f61f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2c:de:7f:da:f2:9b:f5:5e:3f:27:60:99:93: c3:81:34:b8:b3:f0:be:9e:33:cf:a3:ac:33:ae:68: 1c:72:4a:b8:16:b2:0d:83:8a:d1:27:70:27:11:10: fb:96:ac:af:2e:67:14:e1:6d:9d:0d:c3:21:03:e5: 6b:e5:37:27:2b:2a:8e:80:6e:3d:af:4a:56:ab:83: 15:14:10:96:e1:19:d0:e6:8a:4f:f9:8a:d7:ce:bf: a6:4a:d5:ef:9f:fd:88:aa:a2:c2:3d:c4:10:37:61: e4:e5:83:68:41:a3:06:88:78:46:e7:6f:46:d1:9e: 63:da:95:00:dc:8d:3d:43:ee:e7:a6:fb:78:f3:e2: f1:83:fb:ee:d1:bc:40:4d:8a:e6:55:91:80:ab:cb: af:ba:40:b0:ea:6a:3d:68:b2:49:c2:9d:09:c6:ea: 9c:a5:4d:6b:d3:d8:19:3e:e0:bb:a5:5d:97:d6:78: 81:7a:73:cc:a7:ea:19:6f:bb:75:b3:ba:27:99:d1: 8f:d4:5e:9b:50:7d:6d:46:9c:31:e2:74:b5:5e:c9: 72:65:72:58:a7:73:57:7b:f6:50:58:8f:26:32:36: 2f:f8:a8:79:cc:92:df:e2:4f:49:95:40:22:8d:1a: 1e:8b:3f:47:7f:13:cc:21:2b:9f:e7:88:6d:e6:bf: bb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E9:49:14:D2:43:2F:DB:16:FA:5E:89:B8:CA:EB:2D:8C:DA:06:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77d3ac5-a400-3311-8a42-2ba2329a8b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:56:75:d8:e1:6a:df:cb:2b:95:c0:f3:9a:c9:33:48:f2:f8: 14:dd:c6:86:68:df:da:ea:4d:22:ce:27:32:ab:f6:0c:1b:a8: 95:e9:b5:d7:31:f4:4e:c8:54:cd:8d:89:62:72:7f:e5:b0:c1: 55:44:13:78:07:e3:bd:30:9c:69:b8:cd:35:ef:9c:a5:a8:fa: 7d:63:87:df:b4:75:50:c2:63:62:df:4c:0b:7b:c2:1d:b4:1f: 90:95:04:8b:11:ea:b4:e0:ae:cb:9a:ee:b3:de:a4:61:39:65: 21:db:c1:75:b9:f0:b9:5d:48:e8:f9:c8:e2:71:c0:06:67:aa: 1e:2e:f0:f1:46:d7:2e:2b:23:38:bd:4f:82:a3:5c:c7:fa:80: 78:13:46:7c:5e:8d:d9:77:d6:78:bc:2a:cc:69:76:4f:96:88: 7b:67:0f:ab:da:16:47:33:d6:0d:1e:4a:cb:09:dc:6c:c9:50: 50:88:8b:61:ee:46:0c:09:6c:10:9a:19:c8:49:6e:67:c5:30: 4a:c2:a8:9f:a0:de:ce:8c:65:43:f6:e7:40:8a:9d:53:65:f1: 02:e4:24:51:96:25:c7:61:8a:06:23:b5:c9:b2:a5:fc:37:97: 0f:ab:fe:02:29:fb:4a:b2:fb:7b:c5:de:95:b1:db:b7:b4:27: ff:5c:66:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEV9/5KS0qnPvGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MDk0N1oXDTI1MDcyMzE0MDk0N1owLzEtMCsGA1UEAxMk ZTBjNDZmNWItY2FmOC00Y2Q2LThkZTctZjAzMmY5ZjYxZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCzef9rym/VePydgmZPDgTS4s/C+njPPo6wz rmgcckq4FrINg4rRJ3AnERD7lqyvLmcU4W2dDcMhA+Vr5TcnKyqOgG49r0pWq4MV FBCW4RnQ5opP+YrXzr+mStXvn/2IqqLCPcQQN2Hk5YNoQaMGiHhG529G0Z5j2pUA 3I09Q+7npvt48+Lxg/vu0bxATYrmVZGAq8uvukCw6mo9aLJJwp0JxuqcpU1r09gZ PuC7pV2X1niBenPMp+oZb7t1s7onmdGP1F6bUH1tRpwx4nS1XslyZXJYp3NXe/ZQ WI8mMjYv+Kh5zJLf4k9JlUAijRoeiz9HfxPMISuf54ht5r+7HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7pSRTSQy/bFvpeibjK6y2M2gb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTc3ZDNhYzUtYTQwMC0z MzExLThhNDItMmJhMjMyOWE4YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9Wddjhat/LK5XA85rJM0jy+BTdxoZo39rqTSLOJzKr9gwbqJXptdcx 9E7IVM2NiWJyf+WwwVVEE3gH470wnGm4zTXvnKWo+n1jh9+0dVDCY2LfTAt7wh20 H5CVBIsR6rTgrsua7rPepGE5ZSHbwXW58LldSOj5yOJxwAZnqh4u8PFG1y4rIzi9 T4KjXMf6gHgTRnxejdl31ni8Ksxpdk+WiHtnD6vaFkcz1g0eSssJ3GzJUFCIi2Hu RgwJbBCaGchJbmfFMErCqJ+g3s6MZUP250CKnVNl8QLkJFGWJcdhigYjtcmypfw3 lw+r/gIp+0qy+3vF3pWx27e0J/9cZk8= -----END CERTIFICATE-----Generated at Tue Apr 29 23:30:30 2025 by rpki-client