$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f033c8e4-cff3-3b95-af18-42198ad5c50f.roa File: f033c8e4-cff3-3b95-af18-42198ad5c50f.roa (raw, json) Hash identifier: lhYsZjiOSkS9KzatEogElm7JGjGUupzedh/y2cIrP90= Subject key identifier: B0:D0:06:57:51:45:4B:3E:57:65:FF:23:10:37:B0:79:BA:8A:CC:46 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B81605F579460573C22F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f033c8e4-cff3-3b95-af18-42198ad5c50f.roa Signing time: Thu 24 Apr 2025 11:09:53 +0000 ROA not before: Thu 24 Apr 2025 11:09:53 +0000 ROA not after: Wed 23 Jul 2025 11:09:53 +0000 asID: 12041 IP address blocks: 65.22.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:16:05:f5:79:46:05:73:c2:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:53 2025 GMT Not After : Jul 23 11:09:53 2025 GMT Subject: CN=af00774e-e438-46a3-96fa-cac72b8fe36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:98:5c:72:d8:e6:7d:a6:04:ad:b1:3e:5a: a5:19:37:3e:f5:9c:d0:d5:35:04:72:6e:cc:0d:38: 8d:61:49:51:90:22:46:e7:a8:3f:ee:22:fa:b2:4c: d5:66:ab:c0:3c:32:36:c8:ca:16:7c:97:ea:63:a7: 7b:b5:b1:5a:8a:5b:b0:5d:b5:4a:e5:79:41:98:14: c5:d5:35:f8:77:92:c0:5c:3e:c2:47:8e:71:c7:41: 86:74:9e:f2:f3:2e:b2:d8:84:a3:50:64:75:13:4c: bd:9b:f7:e7:36:88:81:50:0c:ef:2b:ef:dc:a1:3d: f7:05:32:ab:eb:ce:ec:cd:c6:59:b8:5e:11:a0:70: f8:61:bc:6a:96:b7:39:c4:94:b1:09:30:a4:87:77: 37:30:8d:a6:f7:50:aa:b6:d6:40:fc:16:ff:e1:4c: 77:12:59:ce:f1:a6:f4:3d:4b:c1:a3:d5:7a:13:ae: 5c:40:73:3e:8d:79:4c:05:2a:90:c9:5f:5e:48:d6: 08:52:d6:39:c3:eb:f3:81:be:0c:94:3f:37:33:c8: a8:49:4c:43:26:99:c5:21:86:c8:81:ff:2c:83:f1: fa:00:51:1b:9e:61:10:8d:4a:38:2f:e6:ff:e3:d8: b0:40:68:e6:0b:14:30:b2:ad:e7:c1:2a:89:03:87: 3c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D0:06:57:51:45:4B:3E:57:65:FF:23:10:37:B0:79:BA:8A:CC:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f033c8e4-cff3-3b95-af18-42198ad5c50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:90:b8:65:f9:46:5e:d9:68:ae:44:86:84:ae:ed:b9:1d:51: 9d:bd:3b:02:86:a0:db:06:92:98:63:02:d0:1c:7c:f6:97:cc: 90:0d:5f:07:b7:f2:27:96:8c:4c:7e:99:b2:c9:fb:35:62:3d: 86:4f:df:f6:42:d1:d5:c7:2b:87:3c:85:69:89:4a:9f:f7:0d: 84:4b:1e:d0:9f:b8:f8:7a:e9:99:6d:98:81:1f:b2:76:b4:cb: d4:f7:79:b1:fc:99:17:e7:78:85:96:8f:2a:a9:49:26:f1:9d: 59:35:43:d0:cb:0f:e9:99:d7:2b:2a:97:92:aa:e2:0e:ca:c2: 20:71:8a:a7:2f:3c:0c:42:9a:66:7d:26:dc:25:3a:7e:03:14: 50:e8:38:b9:47:d3:fc:d2:b3:85:5a:83:5f:5c:c1:80:da:b4: 7e:e7:d4:35:41:06:bf:56:e3:8c:5f:1a:98:70:a0:46:da:bc: 3d:21:da:9b:15:70:13:4d:90:ea:9a:23:04:a5:20:b3:23:83: 27:7a:bf:14:46:03:11:88:9a:45:a0:e7:9f:68:58:c9:0b:52: a1:e8:3b:ea:6f:d0:29:ff:bb:b1:dc:a8:c5:62:b9:8b:8a:23: d4:23:25:25:4c:b4:c2:62:c0:62:80:b7:cb:8a:5f:2b:7f:df: 1e:aa:b6:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuBYF9XlGBXPCL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk1M1oXDTI1MDcyMzExMDk1M1owLzEtMCsGA1UEAxMk YWYwMDc3NGUtZTQzOC00NmEzLTk2ZmEtY2FjNzJiOGZlMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDSYXHLY5n2mBK2xPlqlGTc+9ZzQ1TUEcm7M DTiNYUlRkCJG56g/7iL6skzVZqvAPDI2yMoWfJfqY6d7tbFailuwXbVK5XlBmBTF 1TX4d5LAXD7CR45xx0GGdJ7y8y6y2ISjUGR1E0y9m/fnNoiBUAzvK+/coT33BTKr 687szcZZuF4RoHD4Ybxqlrc5xJSxCTCkh3c3MI2m91CqttZA/Bb/4Ux3ElnO8ab0 PUvBo9V6E65cQHM+jXlMBSqQyV9eSNYIUtY5w+vzgb4MlD83M8ioSUxDJpnFIYbI gf8sg/H6AFEbnmEQjUo4L+b/49iwQGjmCxQwsq3nwSqJA4c8zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDQBldRRUs+V2X/IxA3sHm6isxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjAzM2M4ZTQtY2ZmMy0z Yjk1LWFmMTgtNDIxOThhZDVjNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+QuGX5Rl7ZaK5EhoSu7bkdUZ29OwKGoNsGkphjAtAcfPaXzJANXwe3 8ieWjEx+mbLJ+zViPYZP3/ZC0dXHK4c8hWmJSp/3DYRLHtCfuPh66ZltmIEfsna0 y9T3ebH8mRfneIWWjyqpSSbxnVk1Q9DLD+mZ1ysql5Kq4g7KwiBxiqcvPAxCmmZ9 JtwlOn4DFFDoOLlH0/zSs4Vag19cwYDatH7n1DVBBr9W44xfGphwoEbavD0h2psV cBNNkOqaIwSlILMjgyd6vxRGAxGImkWg559oWMkLUqHoO+pv0Cn/u7HcqMViuYuK I9QjJSVMtMJiwGKAt8uKXyt/3x6qtp4= -----END CERTIFICATE-----Generated at Tue Apr 29 14:30:57 2025 by rpki-client