$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/22ec627c-aa84-3540-acff-80f50e93a6a0.roa File: 22ec627c-aa84-3540-acff-80f50e93a6a0.roa (raw, json) Hash identifier: 5zNQ3Oz0QjMFLQ0s5p0nwGECqTgwGZf1SaRikLLIkmU= Subject key identifier: F6:83:96:28:62:4D:ED:32:BA:63:57:49:9F:99:A0:45:7D:FC:72:42 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A21244EC34809DECE9ED8480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/22ec627c-aa84-3540-acff-80f50e93a6a0.roa Signing time: Thu 24 Apr 2025 14:11:35 +0000 ROA not before: Thu 24 Apr 2025 14:11:35 +0000 ROA not after: Wed 23 Jul 2025 14:11:35 +0000 asID: 207266 IP address blocks: 65.22.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:44:ec:34:80:9d:ec:e9:ed:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:11:35 2025 GMT Not After : Jul 23 14:11:35 2025 GMT Subject: CN=276a442a-ca6a-411e-bff1-9d00a1f68f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:82:3e:80:cd:f5:af:fc:10:b4:0f:15:6c: 09:bf:d2:bc:2c:ba:04:df:f5:c3:b1:21:03:3f:1b: 0e:7b:cf:90:ba:b8:9d:1b:bb:74:da:47:68:4c:b9: a3:d0:2e:9d:c5:6a:d1:a5:62:db:62:2c:e9:ad:c6: 8f:6e:e0:89:4f:a5:f2:40:df:67:f2:01:fa:31:28: 0f:3a:eb:1a:21:fe:6b:97:df:d2:a1:cc:d6:5e:2d: 46:fa:89:de:81:e5:89:da:7d:67:45:33:27:67:f8: e5:82:a4:78:b6:fc:65:cc:19:79:03:f2:92:22:cd: 92:f6:51:44:84:5a:20:6e:a0:50:f8:77:25:81:b1: c0:c4:9e:9d:be:3d:f6:00:18:05:7b:f0:96:b6:b1: 46:2a:31:c6:7e:03:5f:ed:e9:1f:6f:96:45:06:bb: 48:29:78:55:94:85:35:54:00:20:b1:92:97:29:6d: 0a:2e:88:96:7f:36:20:31:8b:96:0c:56:17:df:a7: f2:8d:7e:2e:08:1a:f8:75:23:ae:61:88:b0:4f:a1: a0:6e:b3:e4:b4:06:03:3a:bb:f6:81:34:0a:4b:d8: 29:6e:6a:ac:cd:e1:f9:e1:8a:45:b6:2e:8d:72:08: 32:41:cb:16:07:e2:96:4e:3e:6a:1e:43:70:ad:33: c1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:83:96:28:62:4D:ED:32:BA:63:57:49:9F:99:A0:45:7D:FC:72:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/22ec627c-aa84-3540-acff-80f50e93a6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b8:62:ab:06:53:3a:19:d2:8a:61:d9:12:83:0f:04:46:13: 96:b0:37:1d:89:50:d1:0f:35:b8:05:e7:5c:d5:ce:db:b5:b0: 51:67:b6:a5:89:7f:96:43:db:9a:47:4b:3c:46:2f:39:70:1f: f1:4c:9b:c2:0d:48:90:70:23:46:7a:0b:18:3e:65:7d:85:fa: 63:4b:46:ab:a2:9d:49:e7:52:78:c3:cd:9e:9a:fe:3e:49:40: a9:53:17:26:79:61:3d:e7:d8:2a:95:7a:c9:a1:66:6a:63:42: 5d:70:4f:9f:67:a5:08:ee:2e:7f:ba:64:d9:b0:34:43:bb:2d: bb:22:dc:fc:01:a0:18:db:66:af:63:3a:21:78:b9:fe:0a:5b: fb:88:25:52:bc:11:0b:32:58:a2:a8:38:5b:d4:86:7b:a2:f8: 6a:4e:7d:b0:20:d1:3a:bc:be:42:cd:cd:44:f4:23:d4:a8:e8: ab:46:49:e5:6c:09:91:22:99:9f:1f:31:16:7e:46:c9:1f:2b: f3:8a:c3:21:dd:8c:e5:0b:e4:7d:f0:99:9b:44:be:27:f0:15: 48:a0:5d:61:0d:5f:41:06:84:8f:9f:24:be:b5:ce:26:0e:b0: 7d:64:7b:93:ee:1b:bf:3d:4b:66:ba:60:50:5e:dd:00:b3:7a: e7:4c:f7:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEkTsNICd7OnthIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTEzNVoXDTI1MDcyMzE0MTEzNVowLzEtMCsGA1UEAxMk Mjc2YTQ0MmEtY2E2YS00MTFlLWJmZjEtOWQwMGExZjY4ZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo+CPoDN9a/8ELQPFWwJv9K8LLoE3/XDsSED PxsOe8+QuridG7t02kdoTLmj0C6dxWrRpWLbYizprcaPbuCJT6XyQN9n8gH6MSgP OusaIf5rl9/SoczWXi1G+onegeWJ2n1nRTMnZ/jlgqR4tvxlzBl5A/KSIs2S9lFE hFogbqBQ+HclgbHAxJ6dvj32ABgFe/CWtrFGKjHGfgNf7ekfb5ZFBrtIKXhVlIU1 VAAgsZKXKW0KLoiWfzYgMYuWDFYX36fyjX4uCBr4dSOuYYiwT6GgbrPktAYDOrv2 gTQKS9gpbmqszeH54YpFti6NcggyQcsWB+KWTj5qHkNwrTPB/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaDlihiTe0yumNXSZ+ZoEV9/HJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjJlYzYyN2MtYWE4NC0z NTQwLWFjZmYtODBmNTBlOTNhNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe4YqsGUzoZ0oph2RKDDwRGE5awNx2JUNEPNbgF51zVztu1sFFntqWJ f5ZD25pHSzxGLzlwH/FMm8INSJBwI0Z6Cxg+ZX2F+mNLRquinUnnUnjDzZ6a/j5J QKlTFyZ5YT3n2CqVesmhZmpjQl1wT59npQjuLn+6ZNmwNEO7Lbsi3PwBoBjbZq9j OiF4uf4KW/uIJVK8EQsyWKKoOFvUhnui+GpOfbAg0Tq8vkLNzUT0I9So6KtGSeVs CZEimZ8fMRZ+RskfK/OKwyHdjOUL5H3wmZtEvifwFUigXWENX0EGhI+fJL61ziYO sH1ke5PuG789S2a6YFBe3QCzeudM96Y= -----END CERTIFICATE-----Generated at Fri May 9 13:31:26 2025 by rpki-client