$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8b75b56-4fa1-33ed-80be-359971cece0a.roa File: f8b75b56-4fa1-33ed-80be-359971cece0a.roa (raw, json) Hash identifier: JNQpw3D+/3JACl513aR+prbvL9W8mm3Kc1U5pHJ2tYY= Subject key identifier: 5F:5D:88:02:C6:48:BC:F0:D5:78:09:04:6D:35:00:03:32:04:89:D2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7A8CD750C530BB7983140 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8b75b56-4fa1-33ed-80be-359971cece0a.roa Signing time: Thu 24 Apr 2025 11:09:01 +0000 ROA not before: Thu 24 Apr 2025 11:09:01 +0000 ROA not after: Wed 23 Jul 2025 11:09:01 +0000 asID: 12041 IP address blocks: 65.22.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:a8:cd:75:0c:53:0b:b7:98:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:01 2025 GMT Not After : Jul 23 11:09:01 2025 GMT Subject: CN=d978f1c8-09b9-43e9-ae85-600e48d21558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:0e:16:22:12:3b:17:e9:82:51:e7:6e:6d: 09:ef:d3:16:79:ac:2a:c8:20:6f:07:6e:45:09:ed: 48:20:c2:0a:6c:49:fe:8c:56:8a:ab:9d:56:fb:c5: a3:8d:fc:7e:7f:36:d5:93:cd:7a:69:5b:e0:ca:45: 24:c6:0f:eb:72:3f:ac:3c:46:66:60:8c:42:73:01: b2:2c:97:8e:f5:2f:f1:d7:57:79:d6:64:0f:d9:b1: 0c:4f:69:70:2b:ab:97:fc:21:9d:d3:7b:51:21:a9: e2:1a:44:54:f6:3b:2c:60:80:40:7e:17:72:3b:af: a9:4f:c5:95:91:aa:39:0a:d2:aa:52:96:57:0d:b6: 01:32:60:e2:64:d5:6a:15:51:fb:5e:f7:ae:a6:c2: 1c:fd:7a:1f:eb:56:0a:48:1e:39:5f:2a:25:c2:fd: 79:d8:e1:6b:71:f0:e5:38:0e:1b:01:a0:c1:bf:51: b7:51:b7:59:b5:ba:af:87:86:2e:74:6b:9c:a4:55: a8:a3:6b:9f:5d:07:46:8f:65:f8:f9:24:2c:29:26: e0:c1:1a:06:93:d0:eb:aa:d8:b3:69:ba:37:ad:97: 47:84:ec:6c:03:7a:d3:42:3a:5b:32:7e:e5:6c:25: 91:c4:25:88:3e:05:f2:3e:bb:da:32:56:a8:29:8e: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5D:88:02:C6:48:BC:F0:D5:78:09:04:6D:35:00:03:32:04:89:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8b75b56-4fa1-33ed-80be-359971cece0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f6:04:4d:38:ac:7b:b5:20:b6:20:34:b9:77:e1:63:40:2c: 22:9c:bf:eb:4b:2e:e8:3d:8f:01:6d:84:f7:40:6f:87:d7:49: ae:2b:ff:02:7e:9d:ac:a0:ca:98:f0:b7:08:6c:df:fa:45:f0: 54:ec:61:0b:10:08:f1:78:b2:e3:93:65:b2:36:e2:d4:c6:05: 13:5b:f3:1e:f9:b2:46:84:aa:4a:09:c4:e9:a6:fa:6e:0a:69: fc:90:5a:02:75:71:78:5b:3f:a2:24:2d:ab:dc:f8:12:86:fe: b7:aa:e5:78:7d:32:40:f4:f2:e1:41:8e:da:b7:41:08:39:ef: 98:bb:8c:b2:ee:ba:ff:ab:f2:38:93:3e:78:5d:19:ed:74:60: 03:bf:1d:0a:79:6d:f4:21:fc:37:0b:f8:9b:19:92:f0:d6:f3: ca:1d:42:f7:12:d8:6e:2b:21:9d:79:0e:3a:a9:5d:02:82:69: a4:58:49:30:a3:88:34:4d:58:b3:34:4d:07:3c:c1:ca:c4:05: ce:c3:61:6a:ee:10:23:ea:c2:51:e2:d7:70:91:ce:dc:29:f9: 06:cb:a1:fa:4a:ed:a0:8b:f9:f0:ee:06:6c:a3:11:62:db:fa: e2:5b:23:7f:e4:76:ac:c4:0a:7c:c3:44:aa:66:fc:b6:fa:c6: 59:81:62:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht6jNdQxTC7eYMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkwMVoXDTI1MDcyMzExMDkwMVowLzEtMCsGA1UEAxMk ZDk3OGYxYzgtMDliOS00M2U5LWFlODUtNjAwZTQ4ZDIxNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8IOFiISOxfpglHnbm0J79MWeawqyCBvB25F Ce1IIMIKbEn+jFaKq51W+8Wjjfx+fzbVk816aVvgykUkxg/rcj+sPEZmYIxCcwGy LJeO9S/x11d51mQP2bEMT2lwK6uX/CGd03tRIaniGkRU9jssYIBAfhdyO6+pT8WV kao5CtKqUpZXDbYBMmDiZNVqFVH7XveupsIc/Xof61YKSB45Xyolwv152OFrcfDl OA4bAaDBv1G3UbdZtbqvh4YudGucpFWoo2ufXQdGj2X4+SQsKSbgwRoGk9Drqtiz abo3rZdHhOxsA3rTQjpbMn7lbCWRxCWIPgXyPrvaMlaoKY4XhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9diALGSLzw1XgJBG01AAMyBInSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjhiNzViNTYtNGZhMS0z M2VkLTgwYmUtMzU5OTcxY2VjZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKL2BE04rHu1ILYgNLl34WNALCKcv+tLLug9jwFthPdAb4fXSa4r/wJ+ naygypjwtwhs3/pF8FTsYQsQCPF4suOTZbI24tTGBRNb8x75skaEqkoJxOmm+m4K afyQWgJ1cXhbP6IkLavc+BKG/req5Xh9MkD08uFBjtq3QQg575i7jLLuuv+r8jiT PnhdGe10YAO/HQp5bfQh/DcL+JsZkvDW88odQvcS2G4rIZ15DjqpXQKCaaRYSTCj iDRNWLM0TQc8wcrEBc7DYWruECPqwlHi13CRztwp+QbLofpK7aCL+fDuBmyjEWLb +uJbI3/kdqzECnzDRKpm/Lb6xlmBYno= -----END CERTIFICATE-----Generated at Tue Apr 29 17:48:20 2025 by rpki-client