$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fb6b2852-aad5-371c-82b8-40bf0eea24aa.roa File: fb6b2852-aad5-371c-82b8-40bf0eea24aa.roa (raw, json) Hash identifier: Ww84pvy9Mn8jiyYoyXOUWxz7fds9K3TCSc8ayebX5Fc= Subject key identifier: EC:A1:70:BC:88:30:C3:41:72:9E:EF:38:D1:C9:E9:BC:97:FB:B8:DC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7501F5B7B8BF218162880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fb6b2852-aad5-371c-82b8-40bf0eea24aa.roa Signing time: Thu 24 Apr 2025 11:08:19 +0000 ROA not before: Thu 24 Apr 2025 11:08:19 +0000 ROA not after: Wed 23 Jul 2025 11:08:19 +0000 asID: 12041 IP address blocks: 65.22.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:50:1f:5b:7b:8b:f2:18:16:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:19 2025 GMT Not After : Jul 23 11:08:19 2025 GMT Subject: CN=fdcbf85f-2f29-4c5e-a073-e5379fa7ca5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:17:e3:fa:34:59:39:ee:55:75:1f:42:39:c4: f2:60:ba:e3:b3:2d:c8:59:79:1a:5a:f4:1d:a5:76: be:a7:be:51:60:cc:6b:38:be:e8:3e:83:42:7f:3c: 56:b7:b7:5f:47:8e:83:a4:43:ba:d8:ef:dd:20:6e: cb:b1:ea:5c:82:d2:08:f2:6b:89:b7:e6:f9:f1:11: 4d:f7:6e:45:5c:01:ee:ba:c3:e2:e8:e6:34:4c:a6: 2c:a6:09:f6:e6:1f:1c:e9:2a:c9:d7:98:fc:ed:ab: 0b:8b:ae:6d:e1:b1:a0:39:dc:a5:66:2d:36:15:d9: 0f:db:33:49:57:23:2a:e3:b6:a2:15:e5:84:02:13: 52:af:39:4f:4d:a9:26:83:89:3b:d2:eb:ed:48:77: a5:7f:4d:e4:b5:a8:f9:4b:bb:2c:34:c8:ac:bf:4a: 86:4a:5f:6b:7c:a9:8c:f3:df:62:0d:88:63:09:ed: 06:52:e5:a8:61:25:22:01:e2:cd:b8:f1:d5:ee:0d: f7:44:e0:95:96:09:7c:9c:86:5c:91:e6:39:7d:5c: ba:fa:10:6d:a4:93:d0:82:25:83:34:01:49:7d:16: 60:45:1c:6e:e6:d8:a7:99:ae:ce:58:f9:f2:5a:b9: b3:af:52:b2:90:0a:1e:a4:45:01:66:36:35:53:55: c4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A1:70:BC:88:30:C3:41:72:9E:EF:38:D1:C9:E9:BC:97:FB:B8:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fb6b2852-aad5-371c-82b8-40bf0eea24aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:a6:3b:41:2e:bf:0c:71:5f:50:d8:5b:4c:7d:8a:e6:b1:8a: da:ab:7d:f9:91:57:41:52:dd:9a:70:b5:6b:6a:dd:84:7d:e4: af:f5:ff:1f:19:80:22:ee:fe:92:9b:81:80:a8:52:62:22:ef: 5f:82:f3:18:cb:51:78:86:ac:c7:ac:86:03:41:8d:30:f0:8c: 22:c6:57:da:b0:a3:fa:4c:73:47:af:c5:00:9b:40:0b:f9:02: 1e:5a:7e:96:8a:87:03:b6:fd:06:c0:3f:20:b5:05:30:a9:be: 3d:1a:4e:08:6f:3a:06:a1:87:fb:10:29:c6:cb:df:bf:db:c9: 5e:08:ec:6a:7a:57:47:c1:c3:3b:52:ad:b8:e9:24:c1:ad:92: a1:9f:c2:0b:f6:f8:8d:a6:b3:2a:8e:f1:c8:eb:06:2d:28:75: 2c:5d:cf:9e:e9:f4:c8:14:c6:78:f9:dc:0e:51:e6:7a:00:ec: 1a:e2:8a:f7:5d:a8:00:a9:13:66:2a:2d:ad:c3:03:94:c8:2e: 8b:5d:f8:09:47:06:33:ad:74:8b:24:e4:ac:db:7d:8b:79:3d: 0e:41:c4:78:19:39:99:69:42:06:67:34:9b:cd:09:c6:fe:d7: d6:a3:03:96:14:69:86:82:2e:a1:9c:de:7f:e2:14:76:3e:a4: 49:b7:bb:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht1AfW3uL8hgWKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgxOVoXDTI1MDcyMzExMDgxOVowLzEtMCsGA1UEAxMk ZmRjYmY4NWYtMmYyOS00YzVlLWEwNzMtZTUzNzlmYTdjYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxfj+jRZOe5VdR9COcTyYLrjsy3IWXkaWvQd pXa+p75RYMxrOL7oPoNCfzxWt7dfR46DpEO62O/dIG7LsepcgtII8muJt+b58RFN 925FXAHuusPi6OY0TKYspgn25h8c6SrJ15j87asLi65t4bGgOdylZi02FdkP2zNJ VyMq47aiFeWEAhNSrzlPTakmg4k70uvtSHelf03ktaj5S7ssNMisv0qGSl9rfKmM 899iDYhjCe0GUuWoYSUiAeLNuPHV7g33ROCVlgl8nIZckeY5fVy6+hBtpJPQgiWD NAFJfRZgRRxu5tinma7OWPnyWrmzr1KykAoepEUBZjY1U1XEwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyhcLyIMMNBcp7vONHJ6byX+7jcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmI2YjI4NTItYWFkNS0z NzFjLTgyYjgtNDBiZjBlZWEyNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWmO0EuvwxxX1DYW0x9iuaxitqrffmRV0FS3ZpwtWtq3YR95K/1/x8Z gCLu/pKbgYCoUmIi71+C8xjLUXiGrMeshgNBjTDwjCLGV9qwo/pMc0evxQCbQAv5 Ah5afpaKhwO2/QbAPyC1BTCpvj0aTghvOgahh/sQKcbL37/byV4I7Gp6V0fBwztS rbjpJMGtkqGfwgv2+I2msyqO8cjrBi0odSxdz57p9MgUxnj53A5R5noA7Briivdd qACpE2YqLa3DA5TILotd+AlHBjOtdIsk5KzbfYt5PQ5BxHgZOZlpQgZnNJvNCcb+ 19ajA5YUaYaCLqGc3n/iFHY+pEm3u3k= -----END CERTIFICATE-----Generated at Tue Apr 29 23:27:53 2025 by rpki-client