$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa File: f1432ee2-0ae6-32fb-950a-ffa05a901073.roa (raw, json) Hash identifier: RtaxizYX3XP4PWhEMJFChOfqVzS/nhHxeIw2BpqmXlM= Subject key identifier: DB:22:0C:A3:8E:77:8D:1F:9B:C4:AF:8C:C7:0D:8D:14:5F:40:37:00 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B81A71DC32C28FD5B99600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa Signing time: Thu 24 Apr 2025 11:09:55 +0000 ROA not before: Thu 24 Apr 2025 11:09:55 +0000 ROA not after: Wed 23 Jul 2025 11:09:55 +0000 asID: 12041 IP address blocks: 65.22.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:1a:71:dc:32:c2:8f:d5:b9:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:55 2025 GMT Not After : Jul 23 11:09:55 2025 GMT Subject: CN=2da3924e-c142-45a5-aa93-67cf09ce197f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:31:ec:9b:a2:c7:92:05:f5:4d:cd:48:20:5d: 00:e7:13:5a:95:31:53:e5:64:7a:95:df:90:9c:02: 77:e4:db:8c:3f:54:54:a9:7f:a6:8c:58:6e:84:61: 04:86:c4:a2:a7:8f:d5:eb:e7:39:01:4e:74:ea:31: be:21:c4:47:de:ba:94:20:e5:06:4c:98:db:f5:5e: d6:3d:57:a0:73:a6:38:f4:6f:9a:be:2d:1f:c6:4f: 1c:5d:76:97:47:a9:85:62:94:2f:4b:21:87:7a:9e: 7d:67:d4:30:20:e5:22:71:56:a7:52:97:95:e9:4e: c8:0d:03:3f:07:2d:45:a4:fd:99:63:d6:4a:6b:30: c3:71:40:b9:67:8f:83:d1:e4:74:55:38:b7:bc:f5: ff:02:f9:55:97:b5:b5:f2:d1:10:1a:ea:48:6a:41: eb:98:7c:64:32:d5:02:bc:5b:ca:a3:1f:a0:88:ad: eb:9b:43:db:dd:62:d4:3c:56:a4:d7:bc:04:fa:c0: c9:7e:b9:1c:63:c1:f9:5d:9d:4c:73:b8:63:f1:bd: 1b:fc:45:ab:a4:75:17:c8:19:62:de:3e:50:e3:dc: ef:7d:f8:01:5a:00:d3:c8:37:ff:66:37:7e:08:a2: a6:98:a9:b4:0d:73:13:55:9c:1c:f4:44:67:f5:45: 00:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:22:0C:A3:8E:77:8D:1F:9B:C4:AF:8C:C7:0D:8D:14:5F:40:37:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f7:ab:2e:51:5c:86:60:1c:61:37:17:73:2d:f8:fb:cb:04: 4d:00:eb:3d:6e:d4:92:c9:49:7c:a3:36:8b:fa:69:a9:a3:ab: 18:5c:03:35:60:5c:e8:ee:51:87:45:87:00:b1:db:16:2e:13: 43:d2:c7:77:71:72:27:26:c7:13:fa:80:03:5c:fe:24:10:60: 56:7c:da:bc:8c:23:86:1a:86:17:40:f0:02:37:07:67:63:1b: a9:1b:5a:5e:7f:98:0f:15:59:e0:ca:a9:1a:60:3a:2b:d4:37: 1f:11:dd:e3:47:68:ef:4b:40:86:15:00:7d:a5:78:d9:f1:f8: e5:f9:f4:88:e2:f8:b3:f4:6c:56:28:3b:50:64:4f:fd:ff:98: 0f:e3:a2:6c:4f:f9:88:f6:37:d2:06:96:aa:63:1d:5b:ad:61: 37:bc:45:10:53:4a:49:99:0c:64:42:05:0d:bc:d7:eb:26:fd: 09:f1:03:c4:03:d0:9a:29:a9:1a:ec:e1:b2:fd:f5:74:57:d2: 20:06:0e:68:d1:68:04:bc:79:e9:c2:b3:4c:f7:f5:f5:f5:dd: 22:a7:f8:24:90:26:85:b8:be:78:65:0b:75:c6:10:af:4e:8b: 51:73:85:cb:a3:83:96:ee:7e:39:ac:3e:99:79:22:60:c7:81: f1:9a:37:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuBpx3DLCj9W5lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk1NVoXDTI1MDcyMzExMDk1NVowLzEtMCsGA1UEAxMk MmRhMzkyNGUtYzE0Mi00NWE1LWFhOTMtNjdjZjA5Y2UxOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDHsm6LHkgX1Tc1IIF0A5xNalTFT5WR6ld+Q nAJ35NuMP1RUqX+mjFhuhGEEhsSip4/V6+c5AU506jG+IcRH3rqUIOUGTJjb9V7W PVegc6Y49G+avi0fxk8cXXaXR6mFYpQvSyGHep59Z9QwIOUicVanUpeV6U7IDQM/ By1FpP2ZY9ZKazDDcUC5Z4+D0eR0VTi3vPX/AvlVl7W18tEQGupIakHrmHxkMtUC vFvKox+giK3rm0Pb3WLUPFak17wE+sDJfrkcY8H5XZ1Mc7hj8b0b/EWrpHUXyBli 3j5Q49zvffgBWgDTyDf/Zjd+CKKmmKm0DXMTVZwc9ERn9UUAsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsiDKOOd40fm8SvjMcNjRRfQDcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjE0MzJlZTItMGFlNi0z MmZiLTk1MGEtZmZhMDVhOTAxMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn3qy5RXIZgHGE3F3Mt+PvLBE0A6z1u1JLJSXyjNov6aamjqxhcAzVg XOjuUYdFhwCx2xYuE0PSx3dxcicmxxP6gANc/iQQYFZ82ryMI4YahhdA8AI3B2dj G6kbWl5/mA8VWeDKqRpgOivUNx8R3eNHaO9LQIYVAH2leNnx+OX59Iji+LP0bFYo O1BkT/3/mA/jomxP+Yj2N9IGlqpjHVutYTe8RRBTSkmZDGRCBQ281+sm/QnxA8QD 0JopqRrs4bL99XRX0iAGDmjRaAS8eenCs0z39fX13SKn+CSQJoW4vnhlC3XGEK9O i1Fzhcujg5bufjmsPpl5ImDHgfGaN6s= -----END CERTIFICATE-----Generated at Wed Apr 30 15:06:14 2025 by rpki-client