$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8385893-75f0-3723-b7a0-d599df26431d.roa File: f8385893-75f0-3723-b7a0-d599df26431d.roa (raw, json) Hash identifier: TXfjMpRzJfqNw6PiaRgMo95DqTe1nCqO3f4xOA1uLNc= Subject key identifier: 2D:EA:C1:C2:3E:5D:E3:27:75:A0:90:3A:46:80:C8:D7:13:6D:C0:EB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B79B7E5E8ADA48E9245080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8385893-75f0-3723-b7a0-d599df26431d.roa Signing time: Thu 24 Apr 2025 11:08:55 +0000 ROA not before: Thu 24 Apr 2025 11:08:55 +0000 ROA not after: Wed 23 Jul 2025 11:08:55 +0000 asID: 12041 IP address blocks: 65.22.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:9b:7e:5e:8a:da:48:e9:24:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:55 2025 GMT Not After : Jul 23 11:08:55 2025 GMT Subject: CN=702da43b-8a73-4605-beb0-dbf7b25f3d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ed:66:1d:33:09:a1:25:9e:cf:5a:e7:9d:97: 77:6c:62:e6:05:bc:8c:5d:5d:e2:b3:e2:0b:6a:d8: c1:fa:0f:27:94:22:3e:35:e8:81:c2:54:bb:81:80: 67:c1:b7:b6:61:11:81:7c:2b:7d:53:fa:47:0e:b4: 7c:a4:62:2e:78:e2:0f:57:6a:34:c2:f7:31:53:04: 82:93:e6:56:ec:f4:9b:37:b5:92:bd:d9:16:91:a0: be:30:8e:ba:4f:d9:d4:df:ba:c2:d9:29:4d:a5:99: bd:8b:f3:9a:50:99:51:9d:05:a9:16:d2:87:9f:f5: a0:99:89:53:fd:d2:62:b7:a2:5a:e5:31:e7:1c:6e: 38:f6:0e:ee:ab:8b:36:fc:26:e2:4d:4b:db:b8:95: 2a:b4:ee:df:fd:68:9f:fc:47:01:c1:3d:c6:a7:78: 7c:d0:c5:67:6e:e0:67:b3:bb:f1:0c:a2:81:5b:53: b2:70:68:80:f4:8c:68:25:30:8a:dd:30:2c:ac:0f: 04:26:5f:4a:bb:af:81:23:cb:7d:39:fa:92:a2:2b: 6f:d1:f0:3d:f5:e8:56:e2:b1:b6:be:00:01:be:f7: 6a:97:02:ae:7c:ea:45:b0:e0:7b:b5:3b:b7:37:c5: 16:87:1e:3a:02:ea:04:ae:2f:43:e1:64:45:88:09: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EA:C1:C2:3E:5D:E3:27:75:A0:90:3A:46:80:C8:D7:13:6D:C0:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8385893-75f0-3723-b7a0-d599df26431d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:70:3d:8e:99:bb:8f:9e:19:c4:92:49:16:be:b9:d7:5b:81: 5f:60:c2:ab:12:cc:55:37:37:e8:43:1d:76:0d:72:61:eb:d7: ce:4e:94:b7:f9:50:38:07:fb:03:d1:b0:95:8e:bc:c5:b3:dc: bf:2e:1b:c8:2c:47:b2:0f:a7:9c:82:7b:94:28:88:c5:94:69: ad:8e:af:2a:ba:69:16:32:55:b6:a7:b5:0a:54:30:af:f7:14: 1a:ce:e7:a7:ab:e4:cf:57:11:9f:db:18:8a:06:f5:4b:8e:d7: 8d:97:57:e4:79:1e:f3:74:c8:37:47:8a:12:f4:33:c5:17:25: 78:31:6b:6b:5a:2f:a5:71:ce:33:61:a3:32:df:26:8f:68:cb: 47:8e:e2:55:95:18:36:23:8f:16:1b:1b:97:c5:ca:0b:b3:a3: b9:75:7c:77:13:cf:18:a6:af:95:62:4c:a6:dd:89:5d:ab:cc: b9:ad:e4:98:43:e7:8b:98:2e:3e:a1:f9:d4:e5:d6:e1:cb:17: 69:3f:b5:ed:cb:f0:2c:8d:fa:52:64:a8:80:ea:8e:b8:f5:17: 97:7f:10:de:f6:bd:01:94:70:95:b6:3f:45:46:11:c7:a9:cf: 37:b3:de:74:12:73:8a:42:29:3f:66:6a:27:91:67:34:07:f5: 01:9e:41:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht5t+XoraSOkkUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1NVoXDTI1MDcyMzExMDg1NVowLzEtMCsGA1UEAxMk NzAyZGE0M2ItOGE3My00NjA1LWJlYjAtZGJmN2IyNWYzZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge1mHTMJoSWez1rnnZd3bGLmBbyMXV3is+IL atjB+g8nlCI+NeiBwlS7gYBnwbe2YRGBfCt9U/pHDrR8pGIueOIPV2o0wvcxUwSC k+ZW7PSbN7WSvdkWkaC+MI66T9nU37rC2SlNpZm9i/OaUJlRnQWpFtKHn/WgmYlT /dJit6Ja5THnHG449g7uq4s2/CbiTUvbuJUqtO7f/Wif/EcBwT3Gp3h80MVnbuBn s7vxDKKBW1OycGiA9IxoJTCK3TAsrA8EJl9Ku6+BI8t9OfqSoitv0fA99ehW4rG2 vgABvvdqlwKufOpFsOB7tTu3N8UWhx46AuoEri9D4WRFiAk43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3qwcI+XeMndaCQOkaAyNcTbcDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjgzODU4OTMtNzVmMC0z NzIzLWI3YTAtZDU5OWRmMjY0MzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1wPY6Zu4+eGcSSSRa+uddbgV9gwqsSzFU3N+hDHXYNcmHr185OlLf5 UDgH+wPRsJWOvMWz3L8uG8gsR7IPp5yCe5QoiMWUaa2Oryq6aRYyVbantQpUMK/3 FBrO56er5M9XEZ/bGIoG9UuO142XV+R5HvN0yDdHihL0M8UXJXgxa2taL6VxzjNh ozLfJo9oy0eO4lWVGDYjjxYbG5fFyguzo7l1fHcTzximr5ViTKbdiV2rzLmt5JhD 54uYLj6h+dTl1uHLF2k/te3L8CyN+lJkqIDqjrj1F5d/EN72vQGUcJW2P0VGEcep zzez3nQSc4pCKT9maieRZzQH9QGeQXI= -----END CERTIFICATE-----Generated at Tue Apr 29 18:45:55 2025 by rpki-client