$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa File: 31d6b714-fc08-30e0-80b0-f05d486bd52a.roa (raw, json) Hash identifier: 17EUdlSyh7Ee35/trnvv5YmeYTtq6ACzwubg5WYSaEs= Subject key identifier: 04:68:57:35:05:21:9A:FC:F1:9B:CF:8F:D9:5A:D5:84:7C:A9:C4:29 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7B131D07FB6A4A6EBF080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa Signing time: Thu 24 Apr 2025 11:09:05 +0000 ROA not before: Thu 24 Apr 2025 11:09:05 +0000 ROA not after: Wed 23 Jul 2025 11:09:05 +0000 asID: 12041 IP address blocks: 65.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:b1:31:d0:7f:b6:a4:a6:eb:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:05 2025 GMT Not After : Jul 23 11:09:05 2025 GMT Subject: CN=29725629-aa6e-49f0-a651-4e5511cb335e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:e1:de:23:de:dd:e2:dd:ac:9b:a3:4a:ca: ab:11:d5:0e:a5:19:ad:3f:31:4c:e6:7a:28:65:82: 95:02:2d:77:d7:10:74:ab:0a:84:0e:4a:8e:27:88: 72:45:1d:22:d1:43:c3:56:6a:f0:dd:d1:b6:cf:4e: c4:6e:6f:a6:a6:ef:fa:d4:2d:35:75:66:4b:68:85: a7:0b:78:d9:be:49:30:7a:e2:3f:8d:a8:ab:2e:b7: c2:f1:d8:36:ff:22:1a:39:9e:b0:a5:94:32:33:43: 96:32:17:5c:5a:53:09:7f:3d:54:e7:7e:d5:cf:d7: bf:77:3e:f5:9d:89:97:98:6b:b5:60:22:8f:60:d2: a9:88:0e:a7:29:dc:64:90:8a:83:58:16:35:0c:53: 42:30:eb:06:be:44:d7:d0:04:5a:07:90:0e:3a:aa: ea:92:7d:f0:44:36:fe:74:b7:66:cc:d9:51:51:a2: 2b:f1:09:0a:11:00:36:fb:dc:fb:cf:94:2c:28:b3: 09:bd:00:1b:80:c9:84:99:34:70:44:71:4d:9e:a4: e9:09:81:c2:eb:c5:3c:e4:53:26:8a:b5:87:e0:ce: 07:72:3f:ad:ac:c2:ec:d9:3e:83:08:bb:dd:3a:88: aa:fa:dc:a5:61:f2:2f:88:80:bf:09:6c:d6:c5:d0: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:57:35:05:21:9A:FC:F1:9B:CF:8F:D9:5A:D5:84:7C:A9:C4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1d:ec:b2:ef:4e:22:e3:78:89:e0:9b:40:c4:9a:1d:71:b5: 1e:82:85:44:c5:91:ce:29:ba:d5:c4:bd:2d:bb:57:d2:ee:62: da:96:39:e8:04:c3:fa:a2:dd:34:8f:a5:0c:64:c1:c8:d5:be: 15:c2:4a:8f:29:24:65:33:1c:d2:3f:c7:6b:5a:b0:ee:45:7b: ca:f7:00:95:39:90:13:c0:5e:db:54:53:34:bf:41:fc:9e:22: f6:d5:39:aa:fc:09:05:b4:42:45:7c:b2:b4:00:79:1d:dc:d7: 19:ff:1e:0f:36:45:ad:1e:15:1a:6e:3a:b7:9c:45:b3:43:94: c6:d6:28:6c:1b:01:ef:14:8b:58:b2:d6:f0:09:75:87:9d:b4: 46:8f:9c:ed:6e:5b:16:de:1a:1e:85:b9:4d:8c:0e:a0:11:e3: 4d:5d:69:6b:99:bd:93:9d:c2:10:e4:48:06:4d:33:4b:e0:4c: c9:94:fe:ca:5b:aa:70:88:1b:d4:86:9d:50:0b:ec:9b:f5:9f: bd:9c:b0:38:63:4d:22:bb:3c:98:ec:44:19:10:e7:cd:3d:d3: f0:5b:7d:9f:85:f3:13:e3:4b:e0:fb:54:03:2e:c2:af:95:67: 85:4b:96:0b:ca:0d:c5:25:54:92:8a:5d:03:64:12:9c:e5:e9: 53:9f:f3:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht7Ex0H+2pKbr8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkwNVoXDTI1MDcyMzExMDkwNVowLzEtMCsGA1UEAxMk Mjk3MjU2MjktYWE2ZS00OWYwLWE2NTEtNGU1NTExY2IzMzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWPh3iPe3eLdrJujSsqrEdUOpRmtPzFM5noo ZYKVAi131xB0qwqEDkqOJ4hyRR0i0UPDVmrw3dG2z07Ebm+mpu/61C01dWZLaIWn C3jZvkkweuI/jairLrfC8dg2/yIaOZ6wpZQyM0OWMhdcWlMJfz1U537Vz9e/dz71 nYmXmGu1YCKPYNKpiA6nKdxkkIqDWBY1DFNCMOsGvkTX0ARaB5AOOqrqkn3wRDb+ dLdmzNlRUaIr8QkKEQA2+9z7z5QsKLMJvQAbgMmEmTRwRHFNnqTpCYHC68U85FMm irWH4M4Hcj+trMLs2T6DCLvdOoiq+tylYfIviIC/CWzWxdCF3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARoVzUFIZr88ZvPj9la1YR8qcQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzFkNmI3MTQtZmMwOC0z MGUwLTgwYjAtZjA1ZDQ4NmJkNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcd7LLvTiLjeIngm0DEmh1xtR6ChUTFkc4putXEvS27V9LuYtqWOegE w/qi3TSPpQxkwcjVvhXCSo8pJGUzHNI/x2tasO5Fe8r3AJU5kBPAXttUUzS/Qfye IvbVOar8CQW0QkV8srQAeR3c1xn/Hg82Ra0eFRpuOrecRbNDlMbWKGwbAe8Ui1iy 1vAJdYedtEaPnO1uWxbeGh6FuU2MDqAR401daWuZvZOdwhDkSAZNM0vgTMmU/spb qnCIG9SGnVAL7Jv1n72csDhjTSK7PJjsRBkQ58090/BbfZ+F8xPjS+D7VAMuwq+V Z4VLlgvKDcUlVJKKXQNkEpzl6VOf85s= -----END CERTIFICATE-----Generated at Thu May 8 12:12:16 2025 by rpki-client