$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e85c7abd-69d4-360c-b18c-69a4bf5ecc5d.roa File: e85c7abd-69d4-360c-b18c-69a4bf5ecc5d.roa (raw, json) Hash identifier: BKkvkmwcegObs4w+zl0YPiqAvPqvmJgwCz2pw4sxBtM= Subject key identifier: 91:3B:DE:57:9E:94:8C:6C:4A:3F:D4:E5:1F:10:DF:1E:2D:29:90:E3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B79D0EFC718F5FEAD0C880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e85c7abd-69d4-360c-b18c-69a4bf5ecc5d.roa Signing time: Thu 24 Apr 2025 11:08:56 +0000 ROA not before: Thu 24 Apr 2025 11:08:56 +0000 ROA not after: Wed 23 Jul 2025 11:08:56 +0000 asID: 12041 IP address blocks: 65.22.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:9d:0e:fc:71:8f:5f:ea:d0:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:56 2025 GMT Not After : Jul 23 11:08:56 2025 GMT Subject: CN=aea4ee07-14aa-4655-83c5-5463be65e8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:00:76:44:e6:fc:2e:68:4d:4d:4d:95:90:85: 4b:51:a7:27:95:55:c4:52:47:d9:8b:b0:6c:45:ab: 3d:09:00:4b:6f:68:3a:66:77:9b:d7:9b:d6:aa:3f: 2c:08:85:e4:0a:b1:e0:ab:9f:90:9d:73:c3:b6:ca: 38:f1:ac:5b:61:ac:97:13:52:0e:c0:89:71:9a:1d: 52:66:a6:26:1b:dc:3c:c4:7b:ed:11:ad:84:94:5c: 83:d2:c5:33:e0:3c:b3:e3:89:f8:47:a9:d7:f2:78: 54:9f:7b:90:9a:76:03:1e:2b:c5:83:6e:05:a0:db: c8:3a:64:1a:cd:42:d4:d8:05:1f:79:57:ed:5c:b9: f3:f5:b6:6a:95:10:48:56:0c:ed:5b:32:c7:f5:ad: 6c:ab:e7:40:ae:14:5f:2f:18:0e:09:f2:fd:da:f4: 8d:9b:0e:6a:71:a0:21:07:c7:f0:6e:23:49:c5:89: 51:28:1f:be:95:35:9e:6f:73:e7:ad:db:99:bc:ad: 7c:82:b2:6f:84:76:e7:ff:6c:67:65:63:8a:d4:81: 86:be:b7:9f:98:72:d4:69:74:f5:71:60:7e:a2:2e: bc:1d:3e:aa:b7:cb:be:3e:fc:49:e1:f4:2d:89:a2: 71:8a:66:85:24:d4:ae:c0:b2:9c:cc:28:16:ee:0c: 7f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3B:DE:57:9E:94:8C:6C:4A:3F:D4:E5:1F:10:DF:1E:2D:29:90:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e85c7abd-69d4-360c-b18c-69a4bf5ecc5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7b:d0:d8:62:fa:91:2f:e8:a1:01:5b:03:5e:a9:ee:4a:44: fa:f3:a9:cb:f8:ce:5f:22:1d:f8:00:f8:1b:be:15:92:f1:59: eb:44:4a:18:6b:d8:4a:fc:86:12:f4:d4:b3:73:ac:c1:c2:29: a2:72:69:04:44:b3:92:1e:c2:33:f0:22:65:8f:1e:ba:c6:4a: 53:40:e9:11:cd:e3:83:dc:10:60:3d:ed:27:e1:41:d1:d7:09: 4a:fa:a4:a8:70:9f:80:2b:95:f6:89:b6:0b:96:c7:48:cb:d6: 71:fa:4d:11:f5:ae:8a:16:f5:c9:35:8d:2b:83:9a:6f:36:25: 70:c5:62:a3:bb:32:43:7c:3f:95:06:54:3f:7b:15:cd:a3:fe: 20:20:a3:f3:65:46:41:94:02:58:15:8c:b7:63:a9:ff:fa:01: 13:92:1f:26:96:f0:d3:ad:9d:99:a5:b2:8a:61:b7:b1:bb:62: d7:09:68:40:16:2d:46:dd:f0:b9:69:47:b8:d8:ef:48:0c:9a: a8:17:f9:76:1a:22:ed:52:35:e7:15:c9:4f:3e:09:d4:90:24: dd:4e:31:5a:a6:55:4c:21:ff:39:c0:a0:d2:7d:03:0f:d7:96: 56:88:ea:11:9d:8c:5b:33:99:e2:8c:bb:b8:86:16:01:32:52: 89:9f:b1:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht50O/HGPX+rQyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1NloXDTI1MDcyMzExMDg1NlowLzEtMCsGA1UEAxMk YWVhNGVlMDctMTRhYS00NjU1LTgzYzUtNTQ2M2JlNjVlOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwB2ROb8LmhNTU2VkIVLUacnlVXEUkfZi7Bs Ras9CQBLb2g6Zneb15vWqj8sCIXkCrHgq5+QnXPDtso48axbYayXE1IOwIlxmh1S ZqYmG9w8xHvtEa2ElFyD0sUz4Dyz44n4R6nX8nhUn3uQmnYDHivFg24FoNvIOmQa zULU2AUfeVftXLnz9bZqlRBIVgztWzLH9a1sq+dArhRfLxgOCfL92vSNmw5qcaAh B8fwbiNJxYlRKB++lTWeb3PnrduZvK18grJvhHbn/2xnZWOK1IGGvrefmHLUaXT1 cWB+oi68HT6qt8u+PvxJ4fQtiaJximaFJNSuwLKczCgW7gx/4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJE73leelIxsSj/U5R8Q3x4tKZDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTg1YzdhYmQtNjlkNC0z NjBjLWIxOGMtNjlhNGJmNWVjYzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd70Nhi+pEv6KEBWwNeqe5KRPrzqcv4zl8iHfgA+Bu+FZLxWetEShhr 2Er8hhL01LNzrMHCKaJyaQREs5IewjPwImWPHrrGSlNA6RHN44PcEGA97SfhQdHX CUr6pKhwn4ArlfaJtguWx0jL1nH6TRH1rooW9ck1jSuDmm82JXDFYqO7MkN8P5UG VD97Fc2j/iAgo/NlRkGUAlgVjLdjqf/6AROSHyaW8NOtnZmlsopht7G7YtcJaEAW LUbd8LlpR7jY70gMmqgX+XYaIu1SNecVyU8+CdSQJN1OMVqmVUwh/znAoNJ9Aw/X llaI6hGdjFszmeKMu7iGFgEyUomfsYA= -----END CERTIFICATE-----Generated at Sun Jun 15 12:01:23 2025 by rpki-client