$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5611521-3a17-3fea-bfdc-e147780928b0.roa File: f5611521-3a17-3fea-bfdc-e147780928b0.roa (raw, json) Hash identifier: bYpFBA6sRb9Tn5NN/2AQNzU3hojfHwYKQ+ljoGdYKMY= Subject key identifier: 13:52:1E:0F:8E:83:7F:07:55:D6:18:16:75:F7:BA:69:82:A0:9D:A4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A21228D05CA698FAF6E55480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5611521-3a17-3fea-bfdc-e147780928b0.roa Signing time: Thu 24 Apr 2025 14:11:22 +0000 ROA not before: Thu 24 Apr 2025 14:11:22 +0000 ROA not after: Wed 23 Jul 2025 14:11:22 +0000 asID: 207266 IP address blocks: 65.22.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:28:d0:5c:a6:98:fa:f6:e5:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:11:22 2025 GMT Not After : Jul 23 14:11:22 2025 GMT Subject: CN=ca2958a8-892d-4eda-8cb5-85209c71e138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:85:38:51:d8:d6:04:bb:3c:77:43:30:f0: 58:ca:6d:e5:bd:4b:66:3a:d8:98:8d:ad:74:fc:0d: 22:21:7f:09:d9:8e:7e:f7:f0:9f:96:e7:c3:bd:13: c7:0a:c6:7e:60:f7:c2:70:29:fc:74:93:40:ee:cb: a7:50:16:46:5b:d3:a5:6e:14:18:bd:28:19:20:0f: ef:97:da:a6:7a:43:db:8a:ae:5f:37:24:09:66:49: 41:86:12:f4:a0:78:fd:30:af:98:20:10:f8:dc:ef: 6d:f0:b9:31:79:48:00:75:5a:99:19:fe:8e:5f:9c: c1:25:12:39:e3:07:4b:39:0f:17:51:c5:76:0e:3f: 02:1b:bb:98:91:6f:e3:ab:a0:0d:42:97:45:0c:11: b4:0d:6d:33:88:70:5b:d9:d0:e4:67:ed:90:49:17: 57:5c:d9:70:7e:78:0d:ee:53:b2:b7:f5:5d:43:15: 5c:22:53:4f:8f:f1:4e:37:1d:59:54:a4:1b:25:e6: 7f:1f:f3:79:70:3c:18:d6:e9:7d:d7:8c:3e:c8:96: 47:67:58:cb:99:b3:87:75:ae:43:e3:a6:cf:53:a9: 1c:fc:be:4c:e1:15:d2:d4:a6:6e:69:2e:76:aa:75: 0f:f4:ec:d2:c8:7c:38:0d:5d:f7:ed:e4:f2:91:38: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:52:1E:0F:8E:83:7F:07:55:D6:18:16:75:F7:BA:69:82:A0:9D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5611521-3a17-3fea-bfdc-e147780928b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7e:d7:13:ce:48:e6:a2:20:e8:53:34:f5:0d:18:c4:f8:58: 70:3e:75:4d:aa:9d:e3:2f:82:20:7d:b5:32:1c:b1:fe:02:c4: ec:8b:18:b0:a7:a8:88:e2:b5:fb:17:5c:f4:c1:80:72:4f:b5: b6:a7:e6:9e:d7:2f:d5:7b:09:4d:19:21:80:c6:d2:db:ae:d9: f1:4d:d4:5f:9f:40:f0:2f:c6:24:cc:d3:8d:df:23:1d:2a:b1: be:46:95:c0:a6:be:66:ef:30:37:b7:68:20:cf:e9:1e:ca:83: b3:80:62:1d:f5:ef:bb:cb:56:4a:8e:75:f4:6f:e8:48:96:5b: f9:ea:cb:9e:c9:3a:03:d9:85:25:1b:7d:8b:8b:96:ed:58:09: cf:9d:28:df:76:74:a4:64:6e:9a:c0:eb:53:6c:f1:c2:f4:fc: a6:08:60:53:26:85:05:6f:b1:92:b8:d0:d8:4d:84:33:47:f1: 40:d7:d6:af:3c:15:cc:59:ff:6e:52:a4:cd:ed:fe:75:d6:f0: 0f:ef:51:1d:ae:fb:34:40:63:63:11:4a:1e:0a:1b:bf:9a:5e: 5b:27:e0:15:49:01:50:27:23:b1:cf:12:a1:f4:e0:90:e8:d5: fe:ad:ba:05:95:0e:1e:78:d4:bb:f3:a3:95:8e:12:0f:3b:66: c9:54:45:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEijQXKaY+vblVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTEyMloXDTI1MDcyMzE0MTEyMlowLzEtMCsGA1UEAxMk Y2EyOTU4YTgtODkyZC00ZWRhLThjYjUtODUyMDljNzFlMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC+FOFHY1gS7PHdDMPBYym3lvUtmOtiYja10 /A0iIX8J2Y5+9/CflufDvRPHCsZ+YPfCcCn8dJNA7sunUBZGW9OlbhQYvSgZIA/v l9qmekPbiq5fNyQJZklBhhL0oHj9MK+YIBD43O9t8LkxeUgAdVqZGf6OX5zBJRI5 4wdLOQ8XUcV2Dj8CG7uYkW/jq6ANQpdFDBG0DW0ziHBb2dDkZ+2QSRdXXNlwfngN 7lOyt/VdQxVcIlNPj/FONx1ZVKQbJeZ/H/N5cDwY1ul914w+yJZHZ1jLmbOHda5D 46bPU6kc/L5M4RXS1KZuaS52qnUP9OzSyHw4DV337eTykTgGKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNSHg+Og38HVdYYFnX3ummCoJ2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjU2MTE1MjEtM2ExNy0z ZmVhLWJmZGMtZTE0Nzc4MDkyOGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ+1xPOSOaiIOhTNPUNGMT4WHA+dU2qneMvgiB9tTIcsf4CxOyLGLCn qIjitfsXXPTBgHJPtban5p7XL9V7CU0ZIYDG0tuu2fFN1F+fQPAvxiTM043fIx0q sb5GlcCmvmbvMDe3aCDP6R7Kg7OAYh3177vLVkqOdfRv6EiWW/nqy57JOgPZhSUb fYuLlu1YCc+dKN92dKRkbprA61Ns8cL0/KYIYFMmhQVvsZK40NhNhDNH8UDX1q88 FcxZ/25SpM3t/nXW8A/vUR2u+zRAY2MRSh4KG7+aXlsn4BVJAVAnI7HPEqH04JDo 1f6tugWVDh541Lvzo5WOEg87ZslURew= -----END CERTIFICATE-----Generated at Wed Apr 30 01:37:16 2025 by rpki-client