$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e86931b-7a0d-31da-92ae-ce1cfcf1dd17.roa File: 2e86931b-7a0d-31da-92ae-ce1cfcf1dd17.roa (raw, json) Hash identifier: CbrEfBygYNctin2V3c5Low2Q69dCm9puQMgh1gGr1FQ= Subject key identifier: C1:7B:9B:AA:A9:7E:59:4D:AE:E1:F0:47:E1:FC:AD:31:8A:08:1E:36 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849C309B042A408CD1327540104 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e86931b-7a0d-31da-92ae-ce1cfcf1dd17.roa Signing time: Tue 06 May 2025 09:35:58 +0000 ROA not before: Tue 06 May 2025 09:35:58 +0000 ROA not after: Mon 04 Aug 2025 09:35:58 +0000 asID: 12041 IP address blocks: 65.22.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:09:b0:42:a4:08:cd:13:27:54:01:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 6 09:35:58 2025 GMT Not After : Aug 4 09:35:58 2025 GMT Subject: CN=75f6538c-8019-4075-b8fc-2280784ac824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:99:86:eb:51:34:9d:9c:5c:35:4c:de:01:be: 88:9b:b8:ab:4f:e4:cc:21:86:08:99:6c:49:31:d2: 55:33:83:11:f3:e5:37:74:6c:70:f4:b1:8c:66:37: 0a:db:21:8c:13:3c:d3:21:2d:0b:8b:d3:7e:e1:be: 92:61:28:65:ac:35:88:c2:c8:97:56:47:c4:96:49: 07:e6:c2:fb:b2:4e:25:52:8e:ea:aa:bb:28:fd:c4: 34:6b:9a:9b:01:2b:3d:80:a9:da:13:98:37:c5:22: 49:70:4f:d6:8d:47:06:32:ad:f6:9d:6a:c4:75:6a: f6:a0:a1:bb:5b:56:25:66:53:1e:55:43:c9:db:8a: fe:a3:b6:8b:82:35:d7:31:57:e0:99:29:db:b5:e7: 62:67:92:e0:a9:bc:0a:af:f8:51:e7:db:c4:74:3a: 9e:70:e5:1f:95:b9:82:48:88:68:f9:33:0a:ca:3c: 15:a9:d6:0b:a0:d6:8b:be:cc:cc:38:07:86:fa:f0: b1:47:50:44:f9:b8:72:ca:ed:12:2a:9c:97:74:2b: 47:41:ac:7d:4f:ad:d9:17:11:05:e1:47:c4:eb:30: 47:f6:85:51:2a:63:ed:46:7d:a4:6d:b3:ee:f1:44: 52:1f:44:a1:09:a6:9c:22:70:68:ac:53:3e:fe:67: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7B:9B:AA:A9:7E:59:4D:AE:E1:F0:47:E1:FC:AD:31:8A:08:1E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e86931b-7a0d-31da-92ae-ce1cfcf1dd17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:02:1d:ad:35:ed:48:b9:d0:f5:9c:dd:86:ba:ed:a8:17:d3: 8e:db:9d:da:14:f0:36:5f:ed:00:cf:07:f7:f4:a9:d0:52:f7: 57:c7:ae:c0:05:24:e7:65:80:be:b2:3c:a2:2f:26:6f:7a:2a: 3b:dc:66:a2:71:6e:de:1d:14:a6:a9:9e:dd:bd:57:37:1c:23: 9e:de:1e:b4:65:32:55:66:20:43:2c:7a:c0:b1:ec:93:2b:ff: ff:5c:1d:d5:2c:39:95:21:2b:f3:66:8d:ac:5d:84:c5:3b:39: 2b:0e:8e:93:a6:1e:ba:83:31:f1:3d:3e:0c:29:cb:40:fa:a8: 28:e3:52:24:4c:c4:5c:78:d4:fa:cb:13:bb:69:83:7d:5e:2b: 2d:cb:6e:91:06:c1:ab:c7:ab:7d:61:93:5b:9c:23:15:26:ae: cd:81:cb:ed:71:44:cf:e9:d2:80:3c:15:fd:77:ce:58:3b:9f: 06:62:16:45:ef:b5:57:ea:03:f3:4a:df:55:1d:71:56:7b:54: de:91:9c:f3:22:69:82:69:ce:9f:c0:65:4b:b9:ce:da:5f:d6: c7:db:6a:53:a4:29:8b:5e:02:45:46:fa:1e:7d:5c:7f:a2:35: d9:e2:29:e4:7b:e3:c7:43:94:b3:34:c5:8d:c9:c7:d0:f3:d2: fa:ed:fe:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDCbBCpAjNEydUAQQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDUwNjA5MzU1OFoXDTI1MDgwNDA5MzU1OFowLzEtMCsGA1UEAxMk NzVmNjUzOGMtODAxOS00MDc1LWI4ZmMtMjI4MDc4NGFjODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpmG61E0nZxcNUzeAb6Im7irT+TMIYYImWxJ MdJVM4MR8+U3dGxw9LGMZjcK2yGMEzzTIS0Li9N+4b6SYShlrDWIwsiXVkfElkkH 5sL7sk4lUo7qqrso/cQ0a5qbASs9gKnaE5g3xSJJcE/WjUcGMq32nWrEdWr2oKG7 W1YlZlMeVUPJ24r+o7aLgjXXMVfgmSnbtediZ5LgqbwKr/hR59vEdDqecOUflbmC SIho+TMKyjwVqdYLoNaLvszMOAeG+vCxR1BE+bhyyu0SKpyXdCtHQax9T63ZFxEF 4UfE6zBH9oVRKmPtRn2kbbPu8URSH0ShCaacInBorFM+/mfIRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF7m6qpfllNruHwR+H8rTGKCB42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmU4NjkzMWItN2EwZC0z MWRhLTkyYWUtY2UxY2ZjZjFkZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0CHa017Ui50PWc3Ya67agX047bndoU8DZf7QDPB/f0qdBS91fHrsAF JOdlgL6yPKIvJm96KjvcZqJxbt4dFKapnt29VzccI57eHrRlMlVmIEMsesCx7JMr //9cHdUsOZUhK/NmjaxdhMU7OSsOjpOmHrqDMfE9Pgwpy0D6qCjjUiRMxFx41PrL E7tpg31eKy3LbpEGwavHq31hk1ucIxUmrs2By+1xRM/p0oA8Ff13zlg7nwZiFkXv tVfqA/NK31UdcVZ7VN6RnPMiaYJpzp/AZUu5ztpf1sfbalOkKYteAkVG+h59XH+i NdniKeR748dDlLM0xY3Jx9Dz0vrt/tc= -----END CERTIFICATE-----Generated at Sat May 10 19:17:14 2025 by rpki-client