$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8f30434-cd44-39b5-9767-fd50db071a96.roa File: f8f30434-cd44-39b5-9767-fd50db071a96.roa (raw, json) Hash identifier: XcfLU81C74LIj0i0Zpr6/1z8IvPSuNm9bqDBRzCuZIQ= Subject key identifier: 47:29:24:AB:78:93:CA:79:CE:81:74:93:82:A1:72:C2:B1:23:CE:24 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A212014B17CE2F623D175540 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8f30434-cd44-39b5-9767-fd50db071a96.roa Signing time: Thu 24 Apr 2025 14:11:03 +0000 ROA not before: Thu 24 Apr 2025 14:11:03 +0000 ROA not after: Wed 23 Jul 2025 14:11:03 +0000 asID: 207266 IP address blocks: 65.22.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:01:4b:17:ce:2f:62:3d:17:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:11:03 2025 GMT Not After : Jul 23 14:11:03 2025 GMT Subject: CN=d67b9a18-6c48-466b-b317-00abc78f1941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3e:c6:15:ef:ac:15:60:ed:63:7a:f8:22:97: 2d:88:52:e9:5c:5a:59:ff:38:19:61:a1:fd:35:d9: 0b:cb:8c:19:6b:b3:e1:4e:a1:2d:36:3b:6f:37:55: 18:fe:54:51:b0:18:4a:54:5a:c9:ac:b7:0b:45:81: 1a:17:aa:98:b9:47:bb:63:cd:59:68:2b:32:76:de: d1:6c:2d:e1:fc:be:05:73:86:67:50:31:2b:d3:db: 9b:71:ca:20:11:9a:75:9a:ea:91:ce:80:c6:6d:a1: f8:36:d3:64:b0:d4:d7:bd:a3:41:7f:71:da:59:82: 81:d6:fa:fe:16:33:a0:a0:17:10:ae:f8:35:1f:13: e2:54:55:bf:98:82:d0:d9:27:db:88:71:83:b8:7e: 30:b7:09:ae:66:08:c2:0c:e1:43:e1:4d:e0:fa:36: 13:0a:39:e2:77:32:58:a0:75:10:5c:4b:7a:69:70: b0:df:ec:4c:cf:95:05:1f:58:40:da:0d:2e:45:71: 4c:1b:f2:57:85:90:9c:72:17:6d:9f:82:96:59:19: a4:fe:cd:70:18:26:ff:da:c8:70:77:c5:45:f3:01: fb:bc:31:b8:2a:60:a7:cc:a5:9d:7a:b4:e2:8f:b5: 07:44:b0:f5:6d:e0:7f:9d:31:3d:b5:04:4c:c9:cc: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:29:24:AB:78:93:CA:79:CE:81:74:93:82:A1:72:C2:B1:23:CE:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8f30434-cd44-39b5-9767-fd50db071a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ee:7c:e3:6f:51:74:b4:7f:74:cd:66:3c:9a:a9:8c:68:e4: 65:ef:0c:4a:89:a0:87:99:f9:d1:e8:2b:19:77:53:e7:01:fc: 2c:18:1a:1f:f6:30:4f:32:88:3c:33:e4:e7:f3:f1:cf:74:6b: 83:46:15:70:e2:3e:a8:cc:19:3c:3f:fe:d9:c2:21:15:4f:23: 41:b5:d6:50:22:f7:b7:43:a9:69:ad:70:99:ae:15:07:50:f6: 6f:fb:ee:e8:ba:74:16:11:90:66:6d:d5:54:df:f5:46:3b:cc: b1:56:c9:74:cb:ed:b9:86:d0:2a:56:fc:77:7d:a7:43:51:78: f2:df:b0:3a:0b:7c:90:27:c6:47:d6:88:d3:89:2f:fa:16:29: 5b:3d:fd:82:2b:a9:96:40:b9:ac:40:ce:b6:60:03:f4:f2:bd: 93:c0:39:af:bd:43:13:36:e6:c3:39:e4:5d:42:9d:fc:7f:56: e8:be:13:25:91:42:07:f1:8a:43:9e:85:cf:64:74:2d:5b:11: 26:c4:30:20:c0:40:04:29:e0:2e:38:c9:5d:48:b7:c4:4c:eb: c4:64:95:97:6c:72:53:14:ce:d0:35:d0:36:a5:c5:1f:e7:76: c3:1a:a4:28:29:5b:4f:d0:e9:6b:2f:50:c2:01:cb:14:5c:7e: 45:a0:6e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEgFLF84vYj0XVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTEwM1oXDTI1MDcyMzE0MTEwM1owLzEtMCsGA1UEAxMk ZDY3YjlhMTgtNmM0OC00NjZiLWIzMTctMDBhYmM3OGYxOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT7GFe+sFWDtY3r4IpctiFLpXFpZ/zgZYaH9 NdkLy4wZa7PhTqEtNjtvN1UY/lRRsBhKVFrJrLcLRYEaF6qYuUe7Y81ZaCsydt7R bC3h/L4Fc4ZnUDEr09ubccogEZp1muqRzoDGbaH4NtNksNTXvaNBf3HaWYKB1vr+ FjOgoBcQrvg1HxPiVFW/mILQ2SfbiHGDuH4wtwmuZgjCDOFD4U3g+jYTCjnidzJY oHUQXEt6aXCw3+xMz5UFH1hA2g0uRXFMG/JXhZCcchdtn4KWWRmk/s1wGCb/2shw d8VF8wH7vDG4KmCnzKWderTij7UHRLD1beB/nTE9tQRMycyMZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcpJKt4k8p5zoF0k4KhcsKxI84kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjhmMzA0MzQtY2Q0NC0z OWI1LTk3NjctZmQ1MGRiMDcxYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRavMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATufONvUXS0f3TNZjyaqYxo5GXvDEqJoIeZ+dHoKxl3U+cB/CwYGh/2 ME8yiDwz5Ofz8c90a4NGFXDiPqjMGTw//tnCIRVPI0G11lAi97dDqWmtcJmuFQdQ 9m/77ui6dBYRkGZt1VTf9UY7zLFWyXTL7bmG0CpW/Hd9p0NRePLfsDoLfJAnxkfW iNOJL/oWKVs9/YIrqZZAuaxAzrZgA/TyvZPAOa+9QxM25sM55F1Cnfx/Vui+EyWR QgfxikOehc9kdC1bESbEMCDAQAQp4C44yV1It8RM68RklZdsclMUztA10DalxR/n dsMapCgpW0/Q6WsvUMIByxRcfkWgbow= -----END CERTIFICATE-----Generated at Wed Apr 30 01:37:53 2025 by rpki-client