$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fac1d366-bdc7-3878-91f3-f21d7540ae5d.roa File: fac1d366-bdc7-3878-91f3-f21d7540ae5d.roa (raw, json) Hash identifier: a1MUWoZsr9lFjjxmUYtF5tsl1QsqYwcHxQblHbJUu4g= Subject key identifier: A4:8D:A5:B0:82:2B:08:C7:E1:01:63:BC:97:6F:A8:72:2A:87:7E:4A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B44BEC34B3DE8C7CBE65E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fac1d366-bdc7-3878-91f3-f21d7540ae5d.roa Signing time: Thu 24 Apr 2025 11:02:15 +0000 ROA not before: Thu 24 Apr 2025 11:02:15 +0000 ROA not after: Wed 23 Jul 2025 11:02:15 +0000 asID: 12041 IP address blocks: 65.22.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:4b:ec:34:b3:de:8c:7c:be:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:02:15 2025 GMT Not After : Jul 23 11:02:15 2025 GMT Subject: CN=6f8b6814-3248-4e0d-b990-8b4f1a66c575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:94:a5:38:49:f3:65:0c:60:93:86:7a:a2: d2:59:ef:4f:36:f1:87:37:93:aa:ff:d4:0c:44:9b: cb:f3:66:e2:60:d6:6d:6e:91:ba:71:c6:33:19:2c: 56:d9:66:d9:a0:6d:8c:0f:1b:e9:b1:b5:74:8e:de: 4e:de:5d:7a:9b:5d:39:6b:4e:3a:7c:98:0c:89:7e: 5b:bd:77:61:53:e5:de:3e:15:4f:da:43:c2:cd:08: 81:f9:b3:4d:d1:ff:89:60:0d:56:46:9b:55:4f:2d: c6:f0:c1:e8:7d:94:5a:66:34:89:37:98:05:79:88: a1:93:a0:4e:31:81:c4:75:7a:80:56:8e:4d:96:98: 7f:67:61:64:9e:fc:92:f4:4b:b9:a8:e5:db:56:a5: 5b:6e:1a:9d:18:67:52:07:a4:d6:7f:9d:4f:81:cb: c4:f4:8b:d1:a7:a5:c0:7d:92:c9:d6:49:42:f9:1a: f5:87:ef:d7:c6:c3:6c:7c:72:52:b3:5a:09:7e:a2: 18:32:80:81:38:10:1f:29:26:12:f0:26:27:07:48: ab:83:eb:cc:e0:dd:09:91:54:bd:5b:90:cf:77:21: 9c:c3:a4:78:36:5f:7d:50:99:f0:67:6c:e9:2d:56: 39:be:79:62:db:6d:2d:c7:73:6e:ea:67:6a:fb:f5: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8D:A5:B0:82:2B:08:C7:E1:01:63:BC:97:6F:A8:72:2A:87:7E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fac1d366-bdc7-3878-91f3-f21d7540ae5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e3:af:7f:42:25:55:6b:47:3e:aa:2d:18:b8:83:9c:a0:33: 03:b4:59:68:d5:6a:e2:e3:3e:14:90:88:25:4d:a0:c4:b1:0f: 71:92:cc:48:50:6b:00:2f:2d:fb:84:19:13:f4:5e:fd:19:b5: 32:3a:58:41:aa:8f:52:46:88:a8:8f:d9:43:26:47:19:75:08: 31:3f:97:f7:20:8e:17:44:60:dd:64:f8:bd:38:52:c0:a4:81: aa:33:06:1f:1f:e8:ac:d2:96:4f:5c:91:3c:1d:31:9c:65:b4: 7a:6b:ad:10:a1:8f:31:50:d6:29:00:e8:75:e0:70:00:e7:8e: b4:40:44:d8:c8:ed:7f:4c:b4:d8:b0:17:b2:5d:c3:5f:64:32: 97:2c:1f:6e:89:9e:35:f4:6b:ab:9e:e0:1b:b0:ba:16:c6:4f: 67:b0:c4:75:56:bf:62:aa:4f:89:d3:25:1d:f1:b9:80:b1:88: 65:84:46:3a:0c:ae:f5:05:82:1b:fd:2e:85:6b:8e:26:0a:0f: 7c:7a:78:79:5e:b9:47:18:d3:40:d6:61:3b:52:87:2a:51:40: 31:86:4b:46:c8:5f:19:45:0d:7f:8c:13:3f:a4:19:6c:8e:e0: 8a:6d:00:8e:0c:cb:11:d7:65:5d:62:c8:ee:37:d7:4d:fd:53: 57:6d:36:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtEvsNLPejHy+ZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDIxNVoXDTI1MDcyMzExMDIxNVowLzEtMCsGA1UEAxMk NmY4YjY4MTQtMzI0OC00ZTBkLWI5OTAtOGI0ZjFhNjZjNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHOUpThJ82UMYJOGeqLSWe9PNvGHN5Oq/9QM RJvL82biYNZtbpG6ccYzGSxW2WbZoG2MDxvpsbV0jt5O3l16m105a046fJgMiX5b vXdhU+XePhVP2kPCzQiB+bNN0f+JYA1WRptVTy3G8MHofZRaZjSJN5gFeYihk6BO MYHEdXqAVo5Nlph/Z2FknvyS9Eu5qOXbVqVbbhqdGGdSB6TWf51PgcvE9IvRp6XA fZLJ1klC+Rr1h+/XxsNsfHJSs1oJfqIYMoCBOBAfKSYS8CYnB0irg+vM4N0JkVS9 W5DPdyGcw6R4Nl99UJnwZ2zpLVY5vnli220tx3Nu6mdq+/W7NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSNpbCCKwjH4QFjvJdvqHIqh35KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmFjMWQzNjYtYmRjNy0z ODc4LTkxZjMtZjIxZDc1NDBhZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7jr39CJVVrRz6qLRi4g5ygMwO0WWjVauLjPhSQiCVNoMSxD3GSzEhQ awAvLfuEGRP0Xv0ZtTI6WEGqj1JGiKiP2UMmRxl1CDE/l/cgjhdEYN1k+L04UsCk gaozBh8f6KzSlk9ckTwdMZxltHprrRChjzFQ1ikA6HXgcADnjrRARNjI7X9MtNiw F7Jdw19kMpcsH26JnjX0a6ue4BuwuhbGT2ewxHVWv2KqT4nTJR3xuYCxiGWERjoM rvUFghv9LoVrjiYKD3x6eHleuUcY00DWYTtShypRQDGGS0bIXxlFDX+MEz+kGWyO 4IptAI4MyxHXZV1iyO431039U1dtNiA= -----END CERTIFICATE-----Generated at Wed Apr 30 03:49:28 2025 by rpki-client