$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa File: 298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa (raw, json) Hash identifier: /VjfBA9xyPwvksOrJpgUgZdUu3NcvMUq272da1cCvpU= Subject key identifier: 3D:54:6D:A9:D3:19:BD:CF:A9:BC:C4:65:4D:D0:77:D9:C7:48:A2:A0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7351AA75425E67ADE1B66 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa Signing time: Thu 24 Apr 2025 11:08:07 +0000 ROA not before: Thu 24 Apr 2025 11:08:07 +0000 ROA not after: Wed 23 Jul 2025 11:08:07 +0000 asID: 12041 IP address blocks: 65.22.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:35:1a:a7:54:25:e6:7a:de:1b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:07 2025 GMT Not After : Jul 23 11:08:07 2025 GMT Subject: CN=c2d4ad8c-062a-4735-ac36-b51620c7be54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:8b:6e:cb:21:98:9e:ec:18:ba:af:aa:ad: f7:e7:c4:78:58:e5:20:22:e6:d9:53:ca:26:41:31: 19:54:3a:0e:ba:52:9b:be:ee:3c:a0:98:e8:6f:81: 12:03:1f:df:11:cc:fe:ad:a5:6d:61:02:e7:a0:93: d9:37:d3:78:2d:07:50:3e:d3:37:a5:9d:31:33:aa: 69:b7:44:8e:e1:d3:9f:db:68:7a:0f:43:0e:d9:fe: 25:32:65:20:88:90:b8:12:7a:08:b8:08:da:c7:90: ac:62:47:d5:49:0c:98:44:6f:a7:2a:19:01:7c:19: b7:83:f9:e0:88:67:76:e5:0c:a4:7e:cd:43:de:9e: ce:fc:10:b1:58:7b:4f:ba:66:b9:7f:4c:f3:b8:f9: be:43:06:72:02:c8:05:fb:27:46:91:2f:26:fb:e8: be:f4:a7:cc:d6:f7:e7:9d:96:46:84:89:7c:6e:ad: fb:9b:cb:21:b9:37:e9:bb:10:60:0f:06:b3:6b:4c: 05:21:a9:41:1c:b9:1d:e0:e2:ac:70:e9:02:e2:db: b6:3c:c0:e3:2b:77:97:ad:e5:34:e3:68:64:a4:00: d9:ca:74:f3:b2:b3:70:ca:73:70:ec:eb:67:ee:56: 75:fd:b0:8f:05:ef:98:37:38:58:0f:df:55:75:a3: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:54:6D:A9:D3:19:BD:CF:A9:BC:C4:65:4D:D0:77:D9:C7:48:A2:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:c6:7d:18:97:ca:f3:11:38:90:80:1f:a9:36:67:e0:c3:66: 4c:49:42:43:0b:48:21:3e:e1:df:6d:ee:63:98:f6:8f:30:6b: f4:76:5d:89:13:37:0e:f0:d0:fd:91:27:12:e0:43:8a:15:ee: 72:27:d9:de:ff:a1:08:97:34:3b:73:bd:85:4a:e4:76:2a:17: f8:eb:95:31:5c:4f:20:12:40:ae:f0:a1:82:38:58:15:1f:93: 9c:fc:c4:33:d0:23:45:c1:dd:63:9e:a7:09:f2:bb:24:e9:4f: 4c:98:a1:0b:a2:38:35:01:0d:99:7d:a9:4c:c0:95:ab:f0:d3: fc:e2:74:d3:6c:a4:f0:b0:c0:36:9e:85:ff:55:3f:3d:5a:99: f5:6a:e9:18:aa:4a:40:74:79:f9:23:67:d2:63:8d:b4:47:32: 95:3f:79:a9:67:9e:21:f0:89:b9:30:37:ec:61:c8:f8:16:bb: a0:ec:df:1e:4b:64:b9:2d:0f:0c:91:56:a2:1e:2f:f9:37:23: 6c:db:e3:d9:83:22:6f:18:bd:e7:4b:86:7b:a0:c2:5a:12:d4: 9e:48:40:21:56:ec:bd:9f:41:b6:a9:df:ff:a5:da:81:10:a4: 45:25:00:cd:86:b4:7e:e0:21:82:22:01:d7:53:8e:2c:13:c8: ea:ec:91:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtzUap1Ql5nreG2YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgwN1oXDTI1MDcyMzExMDgwN1owLzEtMCsGA1UEAxMk YzJkNGFkOGMtMDYyYS00NzM1LWFjMzYtYjUxNjIwYzdiZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw++LbsshmJ7sGLqvqq3358R4WOUgIubZU8om QTEZVDoOulKbvu48oJjob4ESAx/fEcz+raVtYQLnoJPZN9N4LQdQPtM3pZ0xM6pp t0SO4dOf22h6D0MO2f4lMmUgiJC4EnoIuAjax5CsYkfVSQyYRG+nKhkBfBm3g/ng iGd25Qykfs1D3p7O/BCxWHtPuma5f0zzuPm+QwZyAsgF+ydGkS8m++i+9KfM1vfn nZZGhIl8bq37m8shuTfpuxBgDwaza0wFIalBHLkd4OKscOkC4tu2PMDjK3eXreU0 42hkpADZynTzsrNwynNw7Otn7lZ1/bCPBe+YNzhYD99VdaObVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1UbanTGb3PqbzEZU3Qd9nHSKKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjk4NDkwZWEtMTU5Ni0z ZWUzLTllZDItOWQ5NmM4ZGRkYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfGfRiXyvMROJCAH6k2Z+DDZkxJQkMLSCE+4d9t7mOY9o8wa/R2XYkT Nw7w0P2RJxLgQ4oV7nIn2d7/oQiXNDtzvYVK5HYqF/jrlTFcTyASQK7woYI4WBUf k5z8xDPQI0XB3WOepwnyuyTpT0yYoQuiODUBDZl9qUzAlavw0/zidNNspPCwwDae hf9VPz1amfVq6RiqSkB0efkjZ9JjjbRHMpU/ealnniHwibkwN+xhyPgWu6Ds3x5L ZLktDwyRVqIeL/k3I2zb49mDIm8YvedLhnugwloS1J5IQCFW7L2fQbap3/+l2oEQ pEUlAM2GtH7gIYIiAddTjiwTyOrskVI= -----END CERTIFICATE-----Generated at Sun May 11 00:46:34 2025 by rpki-client