$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e8d0b251-7ba5-3d57-a466-a01de36dbec7.roa File: e8d0b251-7ba5-3d57-a466-a01de36dbec7.roa (raw, json) Hash identifier: pfsKeJBtFEKXhAtK9ncVcVyn0fzXu3/JcdRHvzNgRyc= Subject key identifier: 2C:05:AC:DB:70:C4:56:57:14:CA:35:3E:08:0B:64:E7:7B:49:8D:E0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7B2D4D3BC1E61302E20B0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e8d0b251-7ba5-3d57-a466-a01de36dbec7.roa Signing time: Thu 24 Apr 2025 11:09:06 +0000 ROA not before: Thu 24 Apr 2025 11:09:06 +0000 ROA not after: Wed 23 Jul 2025 11:09:06 +0000 asID: 12041 IP address blocks: 65.22.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:b2:d4:d3:bc:1e:61:30:2e:20:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:06 2025 GMT Not After : Jul 23 11:09:06 2025 GMT Subject: CN=a310d262-eaa2-4aeb-8377-aea98b6cd955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1d:77:a5:97:8d:99:8f:90:81:b2:63:17:6f: a8:1b:95:08:80:2c:8c:36:b7:f7:1f:f0:1f:da:46: 98:5f:9f:8a:93:63:e7:8d:d0:80:a8:8a:9d:a2:57: 78:66:d4:cc:a6:f0:4a:db:85:fc:0c:2c:88:d6:16: e8:92:2f:f8:ef:88:c9:e4:59:7e:2e:6d:1a:66:a6: 6d:ba:c5:2e:e8:b1:45:0a:39:56:e3:21:e9:17:46: fc:fe:c6:fe:22:58:e3:94:95:6d:53:a1:7e:7d:3f: 36:62:47:79:98:9c:34:0c:db:0a:43:32:3b:d2:2f: cf:22:19:98:fb:6a:ca:62:1e:71:c3:6e:b0:79:1b: a4:bd:49:d3:a2:f4:25:d7:52:97:d6:53:ec:e5:b7: 0f:ca:b0:61:f4:ae:c8:e9:47:53:f2:df:c2:2d:83: 50:68:50:b2:57:66:24:18:0e:cf:9a:2a:40:2c:e3: cc:8d:f8:48:15:cd:9e:a9:20:93:6c:34:40:1c:15: 18:cb:ed:99:a6:16:a7:d3:a3:70:ac:da:fb:d0:b7: 93:90:b9:3c:6f:54:3a:8f:ca:53:af:e8:89:3c:38: 15:d0:e4:64:2e:ca:d2:28:5d:5b:26:40:a2:76:38: 09:14:9d:47:d2:5c:af:54:8c:98:f4:8c:02:3a:91: c0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:05:AC:DB:70:C4:56:57:14:CA:35:3E:08:0B:64:E7:7B:49:8D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e8d0b251-7ba5-3d57-a466-a01de36dbec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9d:84:68:b2:40:4e:28:99:6c:9c:09:31:e8:02:fc:7e:f7: 66:ac:66:c0:a9:db:47:75:45:69:e9:8f:1a:7f:ba:39:a9:c9: 20:a8:2d:a3:2d:8d:64:d4:f4:47:38:48:9f:16:15:3f:22:ee: cb:8b:41:0e:b7:d2:da:53:1c:df:7a:01:db:47:4b:b9:57:d4: 7c:bc:7e:e0:10:ae:b4:72:4c:90:c6:b1:97:18:e1:85:97:d0: b8:1e:28:6a:de:5c:1e:9f:70:6f:0b:60:e0:8e:a0:64:07:35: 47:c2:03:c4:4f:9f:9a:b8:b5:8c:98:de:99:44:85:60:b3:10: e6:68:dc:d3:39:13:5e:b1:24:02:98:7b:3c:61:6d:39:1d:0f: 66:60:48:b0:87:bc:2c:6a:ae:28:8a:95:41:ee:e8:69:b4:7e: ba:21:2d:be:65:b0:12:9c:05:32:0e:29:00:2c:5c:b2:70:eb: ee:2e:50:51:36:63:89:c3:90:f9:43:bf:bd:dc:ee:65:56:d2: 9b:c2:7b:85:be:4b:72:8e:c8:92:da:9b:78:2e:33:15:2f:3a: aa:80:40:e3:e1:e6:ba:a5:26:ed:20:05:94:72:1e:0b:81:41: 0f:da:30:55:85:da:a7:b0:b7:31:68:97:f9:b4:3e:1b:e4:ad: 8c:dc:30:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht7LU07weYTAuILAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkwNloXDTI1MDcyMzExMDkwNlowLzEtMCsGA1UEAxMk YTMxMGQyNjItZWFhMi00YWViLTgzNzctYWVhOThiNmNkOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih13pZeNmY+QgbJjF2+oG5UIgCyMNrf3H/Af 2kaYX5+Kk2PnjdCAqIqdold4ZtTMpvBK24X8DCyI1hboki/474jJ5Fl+Lm0aZqZt usUu6LFFCjlW4yHpF0b8/sb+IljjlJVtU6F+fT82Ykd5mJw0DNsKQzI70i/PIhmY +2rKYh5xw26weRukvUnTovQl11KX1lPs5bcPyrBh9K7I6UdT8t/CLYNQaFCyV2Yk GA7PmipALOPMjfhIFc2eqSCTbDRAHBUYy+2Zphan06NwrNr70LeTkLk8b1Q6j8pT r+iJPDgV0ORkLsrSKF1bJkCidjgJFJ1H0lyvVIyY9IwCOpHADQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwFrNtwxFZXFMo1PggLZOd7SY3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZThkMGIyNTEtN2JhNS0z ZDU3LWE0NjYtYTAxZGUzNmRiZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAedhGiyQE4omWycCTHoAvx+92asZsCp20d1RWnpjxp/ujmpySCoLaMt jWTU9Ec4SJ8WFT8i7suLQQ630tpTHN96AdtHS7lX1Hy8fuAQrrRyTJDGsZcY4YWX 0LgeKGreXB6fcG8LYOCOoGQHNUfCA8RPn5q4tYyY3plEhWCzEOZo3NM5E16xJAKY ezxhbTkdD2ZgSLCHvCxqriiKlUHu6Gm0frohLb5lsBKcBTIOKQAsXLJw6+4uUFE2 Y4nDkPlDv73c7mVW0pvCe4W+S3KOyJLam3guMxUvOqqAQOPh5rqlJu0gBZRyHguB QQ/aMFWF2qewtzFol/m0PhvkrYzcMMg= -----END CERTIFICATE-----Generated at Sun Jun 15 12:02:06 2025 by rpki-client