$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa File: 3952f2df-c9da-34fd-b192-2e69549fdba1.roa (raw, json) Hash identifier: WiVIyHZ61l3A+RehHDlkrX0UlaXgnQ6tYOXrlHK7dTE= Subject key identifier: 58:D7:54:E4:28:23:75:26:E3:0D:C4:0E:C6:9C:23:6A:3D:33:D6:7E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7D546A66ECCF0D5AE5EE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa Signing time: Thu 24 Apr 2025 11:09:22 +0000 ROA not before: Thu 24 Apr 2025 11:09:22 +0000 ROA not after: Wed 23 Jul 2025 11:09:22 +0000 asID: 12041 IP address blocks: 65.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:d5:46:a6:6e:cc:f0:d5:ae:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:22 2025 GMT Not After : Jul 23 11:09:22 2025 GMT Subject: CN=dfc4293b-459d-4024-8733-93e05a54ac62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:f1:6c:8d:98:24:d7:c1:e5:ac:73:8a:ee: 87:2c:06:2f:87:5d:84:7e:55:76:9e:6f:50:b3:81: 30:70:53:30:65:e1:59:fe:70:24:59:2c:de:0b:82: ef:dc:a3:5a:64:5c:98:e5:64:23:c5:62:81:46:91: 43:2f:a7:6a:a3:34:ed:02:15:71:a5:da:11:ae:ee: 94:13:98:b3:0e:9e:8b:6a:f8:f6:cf:d0:5c:92:fd: b7:56:ff:79:25:60:36:9e:99:49:ca:9f:98:84:1c: 5d:d9:6e:ed:03:fe:f6:b1:6c:48:57:0c:09:e7:92: 18:59:41:d0:64:c0:5e:31:21:76:e3:1b:db:5a:31: ed:a9:fd:a4:03:ba:f3:73:b5:fc:d2:10:78:b0:52: 02:25:ca:d9:fd:4f:d2:4e:3d:e4:37:ef:53:68:af: 9e:b8:d7:18:db:5a:f3:3c:b7:82:12:db:24:79:a7: 7c:c1:fa:0e:f7:ca:b2:57:5c:e9:a3:76:e8:22:ae: 2b:7c:a8:bc:6d:fb:9e:c5:33:e9:4d:8a:3e:cc:86: 94:3e:8c:6b:a0:b3:8a:1a:9d:74:9b:09:e9:ba:f3: ad:cf:f0:e3:de:d9:00:12:35:89:b9:fd:22:6e:ba: 7a:62:7d:37:a9:f9:6b:11:ee:84:13:82:c1:c7:5a: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D7:54:E4:28:23:75:26:E3:0D:C4:0E:C6:9C:23:6A:3D:33:D6:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7c:35:4c:2d:08:84:c9:c3:0f:dc:9c:27:da:80:3c:95:a3: 21:0c:fd:4a:e3:47:a2:bb:e5:ee:0e:55:33:59:e6:aa:8d:ba: 3b:7a:c2:13:ec:b4:28:17:f5:33:34:62:f5:44:ed:a2:ab:32: 0f:53:cd:b2:d5:3e:85:6a:85:b5:27:ce:a2:6e:bb:66:53:14: 11:e8:fe:69:56:ad:f0:97:48:6c:ac:29:72:61:2a:70:80:41: 4a:c0:65:fe:58:4d:a0:ef:6a:a1:74:19:5b:0e:b1:a2:9a:6e: 6f:2d:1c:69:35:6a:19:4f:2b:a0:67:46:f0:05:8d:8d:8d:ff: 13:0b:f8:dd:29:75:5e:c8:89:55:37:4c:2d:8a:9f:1b:be:cd: 7c:52:60:a4:6d:66:72:50:02:08:3b:22:3d:fc:88:50:ba:dd: e6:d1:e7:83:81:be:32:01:09:53:ff:40:b8:24:e6:20:5a:7f: 84:ec:85:c7:7e:e3:ef:91:44:e4:9e:d6:50:c6:49:31:8d:92: c4:ec:26:b9:07:35:c6:af:bb:94:0e:22:da:64:18:da:d7:86: 4a:9a:45:12:81:13:12:1f:e2:28:54:77:5f:c3:b6:1c:b1:37: cd:da:56:60:36:b7:78:e9:f4:90:71:08:3c:62:c7:03:b4:33: 91:b0:63:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht9VGpm7M8NWuXuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyMloXDTI1MDcyMzExMDkyMlowLzEtMCsGA1UEAxMk ZGZjNDI5M2ItNDU5ZC00MDI0LTg3MzMtOTNlMDVhNTRhYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeDxbI2YJNfB5axziu6HLAYvh12EflV2nm9Q s4EwcFMwZeFZ/nAkWSzeC4Lv3KNaZFyY5WQjxWKBRpFDL6dqozTtAhVxpdoRru6U E5izDp6Lavj2z9Bckv23Vv95JWA2nplJyp+YhBxd2W7tA/72sWxIVwwJ55IYWUHQ ZMBeMSF24xvbWjHtqf2kA7rzc7X80hB4sFICJcrZ/U/STj3kN+9TaK+euNcY21rz PLeCEtskead8wfoO98qyV1zpo3boIq4rfKi8bfuexTPpTYo+zIaUPoxroLOKGp10 mwnpuvOtz/Dj3tkAEjWJuf0ibrp6Yn03qflrEe6EE4LBx1rW2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjXVOQoI3Um4w3EDsacI2o9M9Z+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzk1MmYyZGYtYzlkYS0z NGZkLWIxOTItMmU2OTU0OWZkYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE18NUwtCITJww/cnCfagDyVoyEM/UrjR6K75e4OVTNZ5qqNujt6whPs tCgX9TM0YvVE7aKrMg9TzbLVPoVqhbUnzqJuu2ZTFBHo/mlWrfCXSGysKXJhKnCA QUrAZf5YTaDvaqF0GVsOsaKabm8tHGk1ahlPK6BnRvAFjY2N/xML+N0pdV7IiVU3 TC2Knxu+zXxSYKRtZnJQAgg7Ij38iFC63ebR54OBvjIBCVP/QLgk5iBaf4Tshcd+ 4++RROSe1lDGSTGNksTsJrkHNcavu5QOItpkGNrXhkqaRRKBExIf4ihUd1/Dthyx N83aVmA2t3jp9JBxCDxixwO0M5GwY3A= -----END CERTIFICATE-----Generated at Thu May 8 12:24:11 2025 by rpki-client