$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebe44c39-cb14-3067-aa42-f2c37949369d.roa File: ebe44c39-cb14-3067-aa42-f2c37949369d.roa (raw, json) Hash identifier: g0rFmIZwTb0EhZ0nLri+XOVFVIoP5cgAztKXyzIxPJ8= Subject key identifier: 12:7D:33:9D:EF:01:F2:D6:47:B6:CD:95:02:CE:CA:3E:78:AD:DF:85 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7C9657BF1C5B55FAD8100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebe44c39-cb14-3067-aa42-f2c37949369d.roa Signing time: Thu 24 Apr 2025 11:09:17 +0000 ROA not before: Thu 24 Apr 2025 11:09:17 +0000 ROA not after: Wed 23 Jul 2025 11:09:17 +0000 asID: 12041 IP address blocks: 65.22.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:c9:65:7b:f1:c5:b5:5f:ad:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:17 2025 GMT Not After : Jul 23 11:09:17 2025 GMT Subject: CN=c17932c2-8c49-4d31-9ae4-f1893fb24aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:cc:6f:8e:0b:00:91:90:00:bb:52:12:a0: 59:11:0c:b4:85:c8:4f:e2:74:a6:98:be:b7:34:f4: 36:d0:3b:00:53:74:84:21:14:a1:93:32:09:56:1e: 08:d5:02:b4:de:17:e7:40:d8:3d:48:a7:c0:e6:a1: 42:0d:70:02:98:2a:30:0d:48:8f:f7:05:cc:84:53: 8a:da:44:df:2f:f8:8f:fc:79:09:87:0f:43:5e:89: c0:10:17:47:ea:38:20:a3:71:4d:c3:40:bd:95:8a: 56:d7:1d:aa:6e:12:87:3a:5d:1c:a9:8f:08:b2:bf: 43:4c:30:2f:c8:48:6e:4d:d4:7e:6f:07:f5:3a:30: 31:aa:d8:7c:3b:5a:c1:46:d6:e9:eb:de:9b:33:b8: 7e:f4:7d:11:8b:4c:f1:be:89:d3:14:88:d3:e0:63: e3:fc:18:aa:fd:c3:a2:5d:54:17:a3:55:e6:4e:7a: 29:b9:e3:bc:18:68:2b:9b:aa:b6:3b:2e:1b:0e:d5: 50:97:f8:35:4b:96:0d:3e:53:72:f2:aa:8d:18:ee: ce:c6:5c:54:d0:36:95:2c:22:0d:d4:1a:c7:5c:fe: a0:ab:cb:1f:44:2a:76:d6:e6:6a:d3:23:65:1a:6c: 19:ab:59:31:72:9a:0a:aa:2a:78:62:e3:db:35:91: 89:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7D:33:9D:EF:01:F2:D6:47:B6:CD:95:02:CE:CA:3E:78:AD:DF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebe44c39-cb14-3067-aa42-f2c37949369d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:9d:fa:7f:75:a4:21:80:b5:59:29:40:16:8c:32:6c:7b:c5: 61:68:03:99:7e:d2:48:7c:6f:8b:87:6c:22:ba:7e:8c:8c:bf: ed:56:59:2b:32:40:7d:24:f5:a3:59:d7:ce:8d:0b:f8:d3:66: 34:01:ab:d4:3f:d7:eb:aa:33:ea:2b:aa:99:ed:8a:c2:6a:54: 47:e8:a0:bd:15:a4:f4:67:2f:e9:ee:61:bf:b5:26:61:dd:a9: 29:29:8c:20:71:82:41:f5:80:b3:6d:03:a0:cd:9c:7b:bf:78: 30:b6:6d:e6:a3:4a:3d:b9:53:ad:45:6d:8b:3c:a9:94:8b:45: f1:24:1a:96:d2:1b:76:14:cf:65:53:c9:bc:b9:5a:9a:11:27: 96:13:77:05:6b:ef:c1:ef:e3:b1:4e:c5:f2:b6:ba:2a:35:8b: ce:a6:d1:c6:ba:6e:e1:8d:f5:f6:eb:73:90:be:39:7d:92:9d: 2c:b6:20:5e:8d:62:87:e5:99:67:5e:c4:05:f4:3e:8f:21:cb: 27:2b:7a:27:bd:f1:42:fe:12:10:61:58:af:a1:a5:29:06:ab: a9:6a:35:50:f7:6b:1c:29:cb:3e:e2:8d:59:88:08:7e:ae:47: b9:30:c5:71:40:39:b3:80:c1:71:66:0d:cd:71:c0:00:2a:35: 5b:98:20:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht8lle/HFtV+tgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkxN1oXDTI1MDcyMzExMDkxN1owLzEtMCsGA1UEAxMk YzE3OTMyYzItOGM0OS00ZDMxLTlhZTQtZjE4OTNmYjI0YWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOHMb44LAJGQALtSEqBZEQy0hchP4nSmmL63 NPQ20DsAU3SEIRShkzIJVh4I1QK03hfnQNg9SKfA5qFCDXACmCowDUiP9wXMhFOK 2kTfL/iP/HkJhw9DXonAEBdH6jggo3FNw0C9lYpW1x2qbhKHOl0cqY8Isr9DTDAv yEhuTdR+bwf1OjAxqth8O1rBRtbp696bM7h+9H0Ri0zxvonTFIjT4GPj/Biq/cOi XVQXo1XmTnopueO8GGgrm6q2Oy4bDtVQl/g1S5YNPlNy8qqNGO7OxlxU0DaVLCIN 1BrHXP6gq8sfRCp21uZq0yNlGmwZq1kxcpoKqip4YuPbNZGJzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ9M53vAfLWR7bNlQLOyj54rd+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWJlNDRjMzktY2IxNC0z MDY3LWFhNDItZjJjMzc5NDkzNjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2d+n91pCGAtVkpQBaMMmx7xWFoA5l+0kh8b4uHbCK6foyMv+1WWSsy QH0k9aNZ186NC/jTZjQBq9Q/1+uqM+orqpntisJqVEfooL0VpPRnL+nuYb+1JmHd qSkpjCBxgkH1gLNtA6DNnHu/eDC2beajSj25U61FbYs8qZSLRfEkGpbSG3YUz2VT yby5WpoRJ5YTdwVr78Hv47FOxfK2uio1i86m0ca6buGN9fbrc5C+OX2SnSy2IF6N YoflmWdexAX0Po8hyycreie98UL+EhBhWK+hpSkGq6lqNVD3axwpyz7ijVmICH6u R7kwxXFAObOAwXFmDc1xwAAqNVuYINo= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:41 2025 by rpki-client