$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7853a56-d149-3813-830d-1895313d7aeb.roa File: f7853a56-d149-3813-830d-1895313d7aeb.roa (raw, json) Hash identifier: TH2NlVmx8zTYtNqFGGVoiTdaAXAJnIBJFuSytDemlV0= Subject key identifier: 15:36:CD:86:3F:A2:3B:34:F3:57:BE:1C:DA:16:2B:FD:63:E3:4C:48 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B445E79156B7E638373440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7853a56-d149-3813-830d-1895313d7aeb.roa Signing time: Thu 24 Apr 2025 11:02:12 +0000 ROA not before: Thu 24 Apr 2025 11:02:12 +0000 ROA not after: Wed 23 Jul 2025 11:02:12 +0000 asID: 12041 IP address blocks: 65.22.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:45:e7:91:56:b7:e6:38:37:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:02:12 2025 GMT Not After : Jul 23 11:02:12 2025 GMT Subject: CN=06c3fe70-dded-4cb5-9422-f7463c3310cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:84:1e:6a:96:8f:41:c3:d0:7f:fd:19:56: 71:6a:aa:25:04:77:5d:ca:92:bb:f1:c7:71:00:1d: 5d:97:d0:5a:04:2c:85:c3:c7:e0:8f:d7:79:47:94: 2d:14:4f:48:80:04:d2:fe:31:a9:e2:3e:90:65:55: 42:87:e0:a3:f8:d9:93:a3:d8:a4:ee:38:33:fd:54: 8c:6e:4f:11:5e:71:cf:57:03:60:96:01:7c:89:59: b4:f9:e7:f7:74:f9:24:b4:21:f0:91:90:7b:68:aa: aa:2c:92:da:f4:04:25:7e:b8:e4:19:7f:88:81:58: d6:1d:24:d2:bc:60:10:08:58:4a:06:b5:89:ac:f1: ab:88:fc:62:bd:5f:1f:86:04:64:9d:64:4e:e6:0e: 4f:c6:41:eb:58:d2:ac:fe:da:7d:13:03:b8:2a:8b: 2a:90:9b:1e:da:cf:0d:0a:3d:24:8e:e8:1d:4e:8a: 8c:c0:1a:09:57:64:09:f6:be:68:ae:17:d5:75:21: af:59:11:b6:d9:50:c3:aa:b9:d9:58:99:61:bd:98: 60:bb:95:5c:2b:3e:21:65:6b:8e:21:4c:81:7a:2c: e6:c5:26:bc:9a:30:89:da:64:70:f4:36:5d:95:fd: b4:9f:09:bb:62:9c:f6:90:4c:7b:36:34:53:38:87: d6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:36:CD:86:3F:A2:3B:34:F3:57:BE:1C:DA:16:2B:FD:63:E3:4C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7853a56-d149-3813-830d-1895313d7aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:46:f1:d0:92:33:62:a1:20:d9:f5:ac:bc:64:84:19:04:5d: 18:9a:1e:64:89:b9:c2:7b:36:b4:b0:a4:0c:f5:a8:84:55:e9: 5a:d6:cc:d8:34:3c:07:d3:48:8b:2e:dd:7f:ac:1b:c7:c4:73: 02:61:40:f2:fb:c9:56:a3:37:00:13:ed:dc:ac:33:a4:af:4c: 20:86:4c:8e:0e:db:a4:09:41:f6:d9:98:0b:fa:bb:11:d0:11: 65:63:0a:41:b8:be:2f:42:50:21:7b:4b:fa:67:55:90:25:9e: 5d:bc:0c:58:73:04:7a:69:d2:55:87:a0:35:b2:8b:a1:15:4a: 9f:98:a0:78:4c:6b:18:9d:b8:0c:4e:56:3c:59:02:dc:e2:50: 15:4a:97:64:34:87:77:ef:4d:85:b5:bd:79:13:ba:92:34:a2: 8e:4b:2f:50:d9:04:0b:ce:4b:c4:52:19:fc:99:d7:01:4b:e2: 88:c6:a2:36:99:4a:eb:53:c1:a3:11:87:b6:9f:91:81:30:4b: 2e:cf:51:6a:d1:7d:38:68:d7:f2:c6:13:1b:8c:b2:90:80:b1: 29:a4:06:dc:74:d3:69:41:88:08:d9:85:80:29:04:b8:3a:db: cc:af:95:29:53:d8:28:bc:29:a3:f6:b5:d7:1d:0d:b7:97:2f: d3:0a:5c:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtEXnkVa35jg3NEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDIxMloXDTI1MDcyMzExMDIxMlowLzEtMCsGA1UEAxMk MDZjM2ZlNzAtZGRlZC00Y2I1LTk0MjItZjc0NjNjMzMxMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9uEHmqWj0HD0H/9GVZxaqolBHddypK78cdx AB1dl9BaBCyFw8fgj9d5R5QtFE9IgATS/jGp4j6QZVVCh+Cj+NmTo9ik7jgz/VSM bk8RXnHPVwNglgF8iVm0+ef3dPkktCHwkZB7aKqqLJLa9AQlfrjkGX+IgVjWHSTS vGAQCFhKBrWJrPGriPxivV8fhgRknWRO5g5PxkHrWNKs/tp9EwO4KosqkJse2s8N Cj0kjugdToqMwBoJV2QJ9r5orhfVdSGvWRG22VDDqrnZWJlhvZhgu5VcKz4hZWuO IUyBeizmxSa8mjCJ2mRw9DZdlf20nwm7Ypz2kEx7NjRTOIfWRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU2zYY/ojs081e+HNoWK/1j40xIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjc4NTNhNTYtZDE0OS0z ODEzLTgzMGQtMTg5NTMxM2Q3YWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBG8dCSM2KhINn1rLxkhBkEXRiaHmSJucJ7NrSwpAz1qIRV6VrWzNg0 PAfTSIsu3X+sG8fEcwJhQPL7yVajNwAT7dysM6SvTCCGTI4O26QJQfbZmAv6uxHQ EWVjCkG4vi9CUCF7S/pnVZAlnl28DFhzBHpp0lWHoDWyi6EVSp+YoHhMaxiduAxO VjxZAtziUBVKl2Q0h3fvTYW1vXkTupI0oo5LL1DZBAvOS8RSGfyZ1wFL4ojGojaZ SutTwaMRh7afkYEwSy7PUWrRfTho1/LGExuMspCAsSmkBtx002lBiAjZhYApBLg6 28yvlSlT2Ci8KaP2tdcdDbeXL9MKXE8= -----END CERTIFICATE-----Generated at Tue Apr 29 19:21:20 2025 by rpki-client