$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f89a82a5-b653-387a-b541-66e71900de5b.roa File: f89a82a5-b653-387a-b541-66e71900de5b.roa (raw, json) Hash identifier: qE/PkbEie013H/+5Nr/OJkJxSVFpt8+0uMB+LVrc4M8= Subject key identifier: 4B:BC:75:9D:B1:1C:73:78:8D:37:BA:CF:B5:56:58:2D:E6:D9:68:2D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B826E8A484331F67D9FD20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f89a82a5-b653-387a-b541-66e71900de5b.roa Signing time: Thu 24 Apr 2025 11:10:01 +0000 ROA not before: Thu 24 Apr 2025 11:10:01 +0000 ROA not after: Wed 23 Jul 2025 11:10:01 +0000 asID: 12041 IP address blocks: 65.22.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:26:e8:a4:84:33:1f:67:d9:fd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:01 2025 GMT Not After : Jul 23 11:10:01 2025 GMT Subject: CN=30546274-c0c8-4dd5-9f3f-7def880f0e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:47:5d:33:cb:13:cd:07:25:96:30:3c:b8: 09:69:b1:d1:8c:e5:a5:03:a0:d8:79:56:08:e1:d2: 21:79:e2:97:7c:94:1c:1c:0e:83:4d:c6:ca:5d:0a: 5b:43:4b:ae:01:47:f9:e8:0b:95:9d:23:37:46:59: 5e:7c:3e:61:f5:cf:18:e6:fc:9e:13:c2:4f:1a:2f: a3:0b:35:04:2f:bb:e3:6c:23:84:fd:84:ea:46:ca: 27:e6:c1:68:d1:68:7f:f7:e1:63:41:fc:44:a5:b7: 7f:1b:d5:7c:14:a4:35:3b:c7:a0:e7:e0:74:a5:16: ec:a2:92:8c:2b:24:60:14:41:f1:40:8a:bb:13:b8: 19:79:51:67:e0:92:64:4e:a3:92:32:68:97:f1:e5: e6:14:be:9e:aa:9b:1a:5b:c1:8d:f7:c6:3c:64:aa: 8e:70:e7:97:77:44:cb:da:36:c3:02:a9:a4:a5:f2: dc:fb:cd:4f:90:28:4e:32:9d:6d:e0:70:63:e7:5b: e1:5c:28:d2:88:fd:ba:e3:47:7f:e9:3e:44:41:b9: 98:27:b2:a4:5f:45:72:bb:89:0b:09:db:31:66:d0: 96:e9:60:86:b3:9b:e5:0c:bc:70:22:b3:b0:89:18: fb:5b:b6:18:74:56:d1:85:e4:ae:b8:0e:aa:e1:3d: cf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BC:75:9D:B1:1C:73:78:8D:37:BA:CF:B5:56:58:2D:E6:D9:68:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f89a82a5-b653-387a-b541-66e71900de5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f5:37:36:93:bc:21:87:5e:e2:f7:40:12:d3:fa:45:33:99: 0c:db:03:45:3f:a2:37:92:05:1a:0e:e9:57:17:57:e3:07:f7: c7:00:4d:5e:1a:93:03:44:e8:a8:85:fb:2e:88:5d:78:a9:d4: a3:88:2a:63:b5:52:42:e5:e9:56:93:20:3e:90:d0:41:1b:96: f2:e4:38:97:8d:74:c8:63:f9:f7:00:bd:ed:a7:37:ad:5a:39: ca:8a:99:43:d9:17:46:46:a5:c5:23:fd:50:30:b7:46:1e:1e: 98:91:17:f7:b5:cb:ff:1c:71:21:e6:ba:ee:f1:fe:4b:f1:63: 29:3a:ce:72:3f:3e:28:e5:96:40:c9:cb:e8:59:1a:39:f0:33: 80:00:c9:c0:5b:17:a8:79:bd:ef:54:97:91:14:2c:46:95:95: 7b:42:b2:8e:80:db:5e:1b:3f:eb:70:28:39:a8:52:1d:ba:76: 92:0b:8c:7b:79:07:20:3e:1f:22:9a:4a:ba:35:ca:a9:03:c2: ef:b4:db:3d:cd:af:a1:94:8b:e9:36:53:ba:ff:b1:85:5e:52: 74:2a:14:d8:77:47:00:2e:0a:02:b7:f1:4a:49:a4:55:f2:ca: f0:03:1f:8c:9c:22:1f:fd:5e:3b:b9:12:76:35:19:fc:4e:f4: 13:75:dd:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuCbopIQzH2fZ/SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAwMVoXDTI1MDcyMzExMTAwMVowLzEtMCsGA1UEAxMk MzA1NDYyNzQtYzBjOC00ZGQ1LTlmM2YtN2RlZjg4MGYwZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2NHXTPLE80HJZYwPLgJabHRjOWlA6DYeVYI 4dIheeKXfJQcHA6DTcbKXQpbQ0uuAUf56AuVnSM3RllefD5h9c8Y5vyeE8JPGi+j CzUEL7vjbCOE/YTqRson5sFo0Wh/9+FjQfxEpbd/G9V8FKQ1O8eg5+B0pRbsopKM KyRgFEHxQIq7E7gZeVFn4JJkTqOSMmiX8eXmFL6eqpsaW8GN98Y8ZKqOcOeXd0TL 2jbDAqmkpfLc+81PkChOMp1t4HBj51vhXCjSiP2640d/6T5EQbmYJ7KkX0Vyu4kL CdsxZtCW6WCGs5vlDLxwIrOwiRj7W7YYdFbRheSuuA6q4T3PzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu8dZ2xHHN4jTe6z7VWWC3m2WgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjg5YTgyYTUtYjY1My0z ODdhLWI1NDEtNjZlNzE5MDBkZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH1NzaTvCGHXuL3QBLT+kUzmQzbA0U/ojeSBRoO6VcXV+MH98cATV4a kwNE6KiF+y6IXXip1KOIKmO1UkLl6VaTID6Q0EEblvLkOJeNdMhj+fcAve2nN61a OcqKmUPZF0ZGpcUj/VAwt0YeHpiRF/e1y/8ccSHmuu7x/kvxYyk6znI/PijllkDJ y+hZGjnwM4AAycBbF6h5ve9Ul5EULEaVlXtCso6A214bP+twKDmoUh26dpILjHt5 ByA+HyKaSro1yqkDwu+02z3Nr6GUi+k2U7r/sYVeUnQqFNh3RwAuCgK38UpJpFXy yvADH4ycIh/9Xju5EnY1GfxO9BN13Tc= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:31 2025 by rpki-client