$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0050cfd8-f980-32ec-8954-b2d0be224a87.roa File: 0050cfd8-f980-32ec-8954-b2d0be224a87.roa (raw, json) Hash identifier: lSTwlguCiKUab6gXhpv4gyohqrAeTYYWNLT80/5w/5Q= Subject key identifier: B0:47:1B:CF:34:CD:81:8C:38:B1:56:CC:E5:47:3B:30:12:CB:62:FE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A21184316727D7CE9F834700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0050cfd8-f980-32ec-8954-b2d0be224a87.roa Signing time: Thu 24 Apr 2025 14:10:04 +0000 ROA not before: Thu 24 Apr 2025 14:10:04 +0000 ROA not after: Wed 23 Jul 2025 14:10:04 +0000 asID: 207266 IP address blocks: 65.22.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:84:31:67:27:d7:ce:9f:83:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:10:04 2025 GMT Not After : Jul 23 14:10:04 2025 GMT Subject: CN=a9346ce4-fe7c-4d5b-ab73-46ac878ce7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:53:1c:45:c4:31:1e:16:62:f3:42:4b:1e:2c: 99:76:c6:0f:0b:4e:1d:42:2f:d2:0f:46:e0:df:fa: 72:17:9d:62:a8:e5:16:e4:96:76:23:bf:c0:2a:b4: a8:7e:a5:b3:d0:8c:c8:0a:31:b9:45:e5:79:31:a8: 02:7f:52:6d:d3:f5:c1:8f:a8:67:95:2c:c1:0e:a6: 3a:20:c9:a0:6b:16:47:36:a8:e2:8c:87:aa:1d:8b: 73:d5:9b:49:da:f7:18:d2:e2:ac:b1:d3:e4:77:74: ee:a0:80:54:69:a6:b4:86:5f:61:28:ed:f1:67:3f: 67:9b:9f:18:3b:36:96:1c:b1:da:bc:03:58:75:d1: 8d:cf:c6:0a:84:d6:d3:77:f5:84:e0:72:f0:8d:45: f0:73:f4:7a:3a:81:ff:03:eb:3d:ef:7c:07:df:43: 03:73:9b:e0:8f:88:a0:6f:32:67:7a:d8:5d:fa:d1: c6:ef:2a:fe:c4:7a:a4:f7:b8:56:ff:87:b8:11:4e: 97:4a:94:56:79:d5:c4:88:93:12:1c:b6:cc:1d:b2: 37:33:14:81:e3:c1:ec:00:b4:f2:0d:ee:1d:b3:23: a4:fb:be:7b:17:c1:b4:56:50:94:f4:b5:b2:34:1a: 7a:0e:e9:bd:20:ee:0d:d8:27:b5:c7:6b:b6:06:08: 41:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:47:1B:CF:34:CD:81:8C:38:B1:56:CC:E5:47:3B:30:12:CB:62:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0050cfd8-f980-32ec-8954-b2d0be224a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:96:49:7f:50:51:a5:b3:dd:8f:2b:5c:bf:db:4e:e5:d3:2a: 2d:8c:d4:bd:f7:00:c3:b2:7a:52:a0:ae:8e:14:d9:26:cd:0a: 04:b0:b6:ac:56:38:7f:40:2e:a9:db:58:27:e1:61:c9:12:84: ce:2d:51:c2:12:4a:15:e0:39:d4:b1:e0:0e:ef:fb:72:6a:0f: 60:4b:59:ef:10:c9:ad:a3:7b:8a:63:d5:49:27:74:f7:9b:b7: b8:2b:d3:c9:a2:44:7c:18:64:33:40:51:89:9d:50:3f:cc:bc: 18:e9:6a:c8:d2:f2:8e:d0:be:3a:ca:c0:55:d2:1d:7a:9d:14: a2:9a:79:56:e9:92:f3:ef:34:9e:47:7c:40:b3:79:25:80:ed: 42:41:e5:3e:e5:7e:bd:12:e7:b9:9e:4d:ab:66:e1:ba:f4:07: 6c:81:22:78:70:36:92:6f:fc:5c:dd:c6:2a:0b:6b:60:8d:9e: e6:bb:44:c2:62:6e:94:3f:ff:45:e1:b5:b5:7a:27:4a:ab:d6: e4:44:36:72:6f:b8:95:d5:55:3d:9c:eb:d5:1c:19:bc:4a:68: bb:8e:dc:cb:10:99:56:bf:6e:47:db:99:62:99:89:41:ca:8f: c0:9e:c4:dc:5e:18:05:d3:ca:1c:d4:dc:ce:23:a3:6c:b0:ff: 6e:fc:66:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEYQxZyfXzp+DRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTAwNFoXDTI1MDcyMzE0MTAwNFowLzEtMCsGA1UEAxMk YTkzNDZjZTQtZmU3Yy00ZDViLWFiNzMtNDZhYzg3OGNlN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31McRcQxHhZi80JLHiyZdsYPC04dQi/SD0bg 3/pyF51iqOUW5JZ2I7/AKrSofqWz0IzICjG5ReV5MagCf1Jt0/XBj6hnlSzBDqY6 IMmgaxZHNqjijIeqHYtz1ZtJ2vcY0uKssdPkd3TuoIBUaaa0hl9hKO3xZz9nm58Y OzaWHLHavANYddGNz8YKhNbTd/WE4HLwjUXwc/R6OoH/A+s973wH30MDc5vgj4ig bzJnethd+tHG7yr+xHqk97hW/4e4EU6XSpRWedXEiJMSHLbMHbI3MxSB48HsALTy De4dsyOk+757F8G0VlCU9LWyNBp6Dum9IO4N2Ce1x2u2BghBuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBHG880zYGMOLFWzOVHOzASy2L+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDA1MGNmZDgtZjk4MC0z MmVjLTg5NTQtYjJkMGJlMjI0YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaWSX9QUaWz3Y8rXL/bTuXTKi2M1L33AMOyelKgro4U2SbNCgSwtqxW OH9ALqnbWCfhYckShM4tUcISShXgOdSx4A7v+3JqD2BLWe8Qya2je4pj1UkndPeb t7gr08miRHwYZDNAUYmdUD/MvBjpasjS8o7QvjrKwFXSHXqdFKKaeVbpkvPvNJ5H fECzeSWA7UJB5T7lfr0S57meTatm4br0B2yBInhwNpJv/FzdxioLa2CNnua7RMJi bpQ//0XhtbV6J0qr1uRENnJvuJXVVT2c69UcGbxKaLuO3MsQmVa/bkfbmWKZiUHK j8CexNxeGAXTyhzU3M4jo2yw/278ZqI= -----END CERTIFICATE-----Generated at Sat May 10 19:07:52 2025 by rpki-client