$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa File: f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa (raw, json) Hash identifier: SeuFZV0TqgYsia0aduwH/p+oo+l4pRCjtWpZVq8ZbV4= Subject key identifier: 16:FE:9F:5F:26:C9:1C:E4:72:2A:55:1E:18:C6:6D:C9:B0:43:41:E4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7C34EF207F7FB3F024680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa Signing time: Thu 24 Apr 2025 11:09:14 +0000 ROA not before: Thu 24 Apr 2025 11:09:14 +0000 ROA not after: Wed 23 Jul 2025 11:09:14 +0000 asID: 12041 IP address blocks: 65.22.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:c3:4e:f2:07:f7:fb:3f:02:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:14 2025 GMT Not After : Jul 23 11:09:14 2025 GMT Subject: CN=556d6964-44a3-4bb4-9f5d-113ce5df5054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:fd:93:6d:ba:df:d3:db:4d:4e:05:32:b4: cd:77:07:53:f6:5a:89:86:61:56:1b:68:c5:3b:37: 54:4b:a8:8a:4b:6d:c8:3e:1b:b7:53:83:e9:2c:dc: f6:06:c0:a9:fa:7a:fd:2a:3a:1c:73:69:df:6a:6a: ff:df:2c:71:38:77:71:a9:00:c2:f4:07:86:62:e8: f3:33:b5:2f:19:c3:c5:dc:3c:02:af:11:94:3e:8c: bb:1a:71:c1:21:38:10:d6:b9:cb:39:58:26:c6:e2: 3d:53:40:be:2e:34:6d:07:5e:c3:02:cc:a5:9e:69: 46:b7:be:f4:bf:04:9c:6d:da:da:7d:d6:e0:9a:15: eb:74:ff:3d:da:34:c7:52:eb:b0:a2:31:f4:e0:67: ce:8f:70:2a:72:ff:0d:1c:fc:97:a8:5a:45:34:59: 49:4c:06:6b:35:34:00:c8:17:59:2c:64:31:aa:21: 36:91:f1:cd:a6:c5:1d:f0:de:c4:10:f6:35:03:54: 5a:8d:26:38:09:0e:f6:46:86:2d:09:a1:57:52:c4: ee:50:81:b2:6b:20:ca:fb:66:80:58:08:2e:df:3b: 44:d1:3f:70:2e:a5:02:2a:16:57:76:67:73:de:e5: ed:66:22:e0:48:31:05:dd:46:a1:3c:46:dd:85:dd: 4f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FE:9F:5F:26:C9:1C:E4:72:2A:55:1E:18:C6:6D:C9:B0:43:41:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:58:41:c8:76:2d:ee:92:50:09:05:4e:e1:6d:45:15:b1:35: a6:eb:4a:da:30:ff:26:d4:65:e3:9d:00:27:a9:f7:6f:51:02: a9:06:25:0a:c5:22:90:57:f3:3b:30:ba:fb:0f:f5:a6:ab:fb: 61:19:a6:f3:4e:3f:f0:84:3a:46:48:54:f7:b1:32:a8:27:0d: e5:38:c4:99:30:8a:55:b1:33:58:e5:45:a0:eb:32:78:08:40: a5:81:08:c1:d3:a1:68:f1:e4:af:d5:29:06:1d:60:b1:6c:ca: 83:1f:b5:81:d0:5f:14:bf:28:b6:18:b9:75:c3:33:14:0b:ad: d3:d1:8c:a8:6e:96:ee:14:75:23:7a:ba:fe:02:6e:82:10:f7: 24:11:5d:17:b4:64:6d:f1:a4:c5:fe:0d:8e:ff:3a:b8:4d:38: df:d4:29:37:22:3c:f7:db:00:bd:8c:60:7f:ee:ea:94:10:10: 90:2c:5b:ad:0b:13:00:10:93:28:5e:2b:64:69:bb:71:db:af: 49:34:6f:c3:c0:05:45:1e:3e:93:5c:4a:f6:50:3e:e2:80:dd: 80:40:7a:d1:5a:09:03:ec:44:0e:ac:a3:57:77:59:f0:87:94: bd:e7:e2:26:ef:24:40:50:0a:2e:91:37:f4:7b:e6:25:d8:1d: 3b:84:d8:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht8NO8gf3+z8CRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkxNFoXDTI1MDcyMzExMDkxNFowLzEtMCsGA1UEAxMk NTU2ZDY5NjQtNDRhMy00YmI0LTlmNWQtMTEzY2U1ZGY1MDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQX9k22639PbTU4FMrTNdwdT9lqJhmFWG2jF OzdUS6iKS23IPhu3U4PpLNz2BsCp+nr9Kjocc2nfamr/3yxxOHdxqQDC9AeGYujz M7UvGcPF3DwCrxGUPoy7GnHBITgQ1rnLOVgmxuI9U0C+LjRtB17DAsylnmlGt770 vwScbdrafdbgmhXrdP892jTHUuuwojH04GfOj3Aqcv8NHPyXqFpFNFlJTAZrNTQA yBdZLGQxqiE2kfHNpsUd8N7EEPY1A1RajSY4CQ72RoYtCaFXUsTuUIGyayDK+2aA WAgu3ztE0T9wLqUCKhZXdmdz3uXtZiLgSDEF3UahPEbdhd1P2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb+n18myRzkcipVHhjGbcmwQ0HkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjc0Y2YyMTctMWUyNy0z Yzg4LWE2ZDItZjc0M2I3YmJmZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpYQch2Le6SUAkFTuFtRRWxNabrStow/ybUZeOdACep929RAqkGJQrF IpBX8zswuvsP9aar+2EZpvNOP/CEOkZIVPexMqgnDeU4xJkwilWxM1jlRaDrMngI QKWBCMHToWjx5K/VKQYdYLFsyoMftYHQXxS/KLYYuXXDMxQLrdPRjKhulu4UdSN6 uv4CboIQ9yQRXRe0ZG3xpMX+DY7/OrhNON/UKTciPPfbAL2MYH/u6pQQEJAsW60L EwAQkyheK2Rpu3Hbr0k0b8PABUUePpNcSvZQPuKA3YBAetFaCQPsRA6so1d3WfCH lL3n4ibvJEBQCi6RN/R75iXYHTuE2Mg= -----END CERTIFICATE-----Generated at Tue Apr 29 12:51:10 2025 by rpki-client