$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2b561737-1a46-337b-962b-a00d1d1293b3.roa File: 2b561737-1a46-337b-962b-a00d1d1293b3.roa (raw, json) Hash identifier: uiNd84BytY/GoLNEYPJ3SR/E9vNV1fdUqEjA/Q/MT+s= Subject key identifier: 18:45:3B:6C:3B:B0:65:38:7C:4B:26:C1:6C:2D:A0:56:2C:6E:F8:18 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7E621CC45CA6D04F79880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2b561737-1a46-337b-962b-a00d1d1293b3.roa Signing time: Thu 24 Apr 2025 11:09:30 +0000 ROA not before: Thu 24 Apr 2025 11:09:30 +0000 ROA not after: Wed 23 Jul 2025 11:09:30 +0000 asID: 12041 IP address blocks: 65.22.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:e6:21:cc:45:ca:6d:04:f7:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:30 2025 GMT Not After : Jul 23 11:09:30 2025 GMT Subject: CN=bab22d18-4510-4da1-a63d-5b886564d4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:b2:98:ee:ec:59:2e:8f:22:28:3e:da:12: 37:fe:a5:0d:f0:13:dd:bb:89:9e:94:47:9a:27:ff: 6a:85:db:ed:3d:49:66:6b:25:ef:b6:92:04:30:9d: 4e:8c:34:17:fc:a8:fc:34:b7:9e:bf:c8:25:a3:b9: ab:9a:72:73:2d:03:7c:a7:05:ef:90:ad:d3:ef:c7: 00:a7:fb:ae:c1:5a:23:6d:f4:9c:d4:80:ed:3a:15: a7:02:0c:91:39:b5:a5:52:7e:bb:68:03:f8:dc:c3: bb:14:58:93:7b:7a:ed:6b:3f:92:90:f1:a2:70:b9: 9b:32:bf:7e:21:89:93:91:ab:12:e9:a4:b7:b4:a2: 0b:e8:51:28:d0:77:f0:31:65:a7:b4:bf:ef:aa:60: b2:99:c0:bf:d8:ad:f2:6f:6e:2a:1f:44:49:db:e9: 08:c3:ac:c2:ac:73:ac:8c:2e:3d:5a:29:b9:8f:ab: 84:a9:18:4a:cd:aa:58:1c:a2:b5:c5:bd:e7:4e:60: 7c:66:86:5b:2b:f2:f7:45:2c:3c:0a:34:87:d1:f6: 92:39:f9:72:e9:b1:65:27:68:8c:d2:28:1e:98:56: 08:a6:c4:bd:44:fc:9a:47:cb:26:4b:af:56:ea:1a: ee:e3:39:30:6e:9a:f9:84:7e:ad:f2:27:5b:74:d4: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:45:3B:6C:3B:B0:65:38:7C:4B:26:C1:6C:2D:A0:56:2C:6E:F8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2b561737-1a46-337b-962b-a00d1d1293b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:64:cd:6a:83:95:a5:80:51:06:ec:cc:9e:2f:69:e1:a4:67: 25:2f:d3:12:97:44:20:91:e7:41:83:7d:b3:5e:4c:d7:65:b0: 12:11:f9:ea:33:da:10:7b:24:15:4b:9e:c4:12:d5:6d:a2:51: f5:77:ac:cf:a0:91:9e:79:34:17:d6:67:54:9d:24:51:78:f8: 40:26:20:4d:d2:a2:19:f1:3f:87:04:68:15:c6:a0:ae:8f:b7: 39:5b:7a:c1:cf:c4:e8:f6:e7:7b:26:b9:69:fd:d4:27:73:36: 9b:d6:53:a3:27:c9:f9:c5:72:ad:ff:69:39:65:05:ea:88:2f: a7:50:1f:2f:f8:5b:3f:4c:1d:57:da:ec:3a:87:f1:d6:a9:85: 20:8b:86:2e:45:32:9b:c0:0b:26:ae:f2:9d:a3:f7:76:2b:6b: f9:ed:6b:44:26:b3:fd:68:c9:88:6e:20:7e:a4:93:5f:cf:f3: 93:1a:3b:1f:c0:0d:9b:ba:9d:54:ae:af:df:40:f2:4a:f2:4c: 4e:da:ea:c5:10:9d:bb:82:8e:03:d0:70:60:fc:b3:6c:39:a3: a2:03:c8:dc:65:f5:fc:c0:a4:d4:02:5d:2f:1e:41:85:6b:ae: 91:46:de:1e:cf:6b:a5:14:db:a2:91:98:ae:ba:86:c9:39:12: bb:28:77:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht+YhzEXKbQT3mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkzMFoXDTI1MDcyMzExMDkzMFowLzEtMCsGA1UEAxMk YmFiMjJkMTgtNDUxMC00ZGExLWE2M2QtNWI4ODY1NjRkNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeOymO7sWS6PIig+2hI3/qUN8BPdu4melEea J/9qhdvtPUlmayXvtpIEMJ1OjDQX/Kj8NLeev8glo7mrmnJzLQN8pwXvkK3T78cA p/uuwVojbfSc1IDtOhWnAgyRObWlUn67aAP43MO7FFiTe3rtaz+SkPGicLmbMr9+ IYmTkasS6aS3tKIL6FEo0HfwMWWntL/vqmCymcC/2K3yb24qH0RJ2+kIw6zCrHOs jC49Wim5j6uEqRhKzapYHKK1xb3nTmB8ZoZbK/L3RSw8CjSH0faSOfly6bFlJ2iM 0igemFYIpsS9RPyaR8smS69W6hru4zkwbpr5hH6t8idbdNSeyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhFO2w7sGU4fEsmwWwtoFYsbvgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmI1NjE3MzctMWE0Ni0z MzdiLTk2MmItYTAwZDFkMTI5M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRapMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZkzWqDlaWAUQbszJ4vaeGkZyUv0xKXRCCR50GDfbNeTNdlsBIR+eoz 2hB7JBVLnsQS1W2iUfV3rM+gkZ55NBfWZ1SdJFF4+EAmIE3SohnxP4cEaBXGoK6P tzlbesHPxOj253smuWn91CdzNpvWU6MnyfnFcq3/aTllBeqIL6dQHy/4Wz9MHVfa 7DqH8daphSCLhi5FMpvACyau8p2j93Yra/nta0Qms/1oyYhuIH6kk1/P85MaOx/A DZu6nVSur99A8kryTE7a6sUQnbuCjgPQcGD8s2w5o6IDyNxl9fzApNQCXS8eQYVr rpFG3h7Pa6UU26KRmK66hsk5Ersod0A= -----END CERTIFICATE-----Generated at Thu May 8 18:59:53 2025 by rpki-client