$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a4c62c1-3955-3c7f-a20f-7a1f08b8024c.roa File: 3a4c62c1-3955-3c7f-a20f-7a1f08b8024c.roa (raw, json) Hash identifier: ufOgbCC/7WYmBT09qc4wf2G2wJTOFdzIV+jq2qlfSPw= Subject key identifier: B3:64:97:6C:2D:11:2D:22:89:91:85:D4:DC:C7:6E:A7:B3:C7:19:EB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7518B19B1CE74F08D8640 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a4c62c1-3955-3c7f-a20f-7a1f08b8024c.roa Signing time: Thu 24 Apr 2025 11:08:20 +0000 ROA not before: Thu 24 Apr 2025 11:08:20 +0000 ROA not after: Wed 23 Jul 2025 11:08:20 +0000 asID: 12041 IP address blocks: 65.22.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:51:8b:19:b1:ce:74:f0:8d:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:20 2025 GMT Not After : Jul 23 11:08:20 2025 GMT Subject: CN=f5f03be0-0148-48db-85f3-795293804be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:ec:df:df:c6:d2:94:68:97:48:26:aa:4f: 18:f3:26:6b:20:11:4f:1a:53:dd:b9:f6:04:5a:c8: 2d:d9:6c:9c:3d:3b:52:fe:40:ab:e5:5f:13:d8:2d: 0d:2e:5b:e9:28:3e:8c:3c:7c:ae:2a:bd:c1:28:b4: 6a:c1:0b:da:6d:5f:67:ca:2c:3f:e7:82:12:16:bd: 2b:36:73:25:d6:9e:b1:4b:bf:25:d5:74:ba:c0:e5: 2d:01:65:08:9c:d8:bf:6a:9e:2e:56:52:cc:ca:86: b5:48:73:10:1b:41:dd:49:6c:b6:04:71:24:e8:b4: cf:1f:a2:3a:bb:a7:b1:03:b9:bf:13:08:e3:71:1e: eb:79:e7:2d:23:78:84:19:ea:75:29:ac:04:e6:95: 79:b8:97:1a:44:f0:c3:e2:79:15:ce:b0:6c:28:fa: 9c:d3:cc:6a:63:15:9e:e9:8f:a9:2d:f0:d8:6b:bb: fb:57:53:59:fc:a8:63:59:8e:55:3d:39:96:b3:16: f7:94:e4:08:cc:f2:3c:3a:54:bb:f6:18:0a:a6:d9: d8:e5:23:09:34:fb:0d:73:00:61:d1:99:02:79:dc: dd:51:e5:4d:29:56:b7:72:d2:11:66:19:8a:21:b5: 53:b1:6c:38:4b:f3:fa:6e:d5:ff:0a:0a:63:50:b2: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:64:97:6C:2D:11:2D:22:89:91:85:D4:DC:C7:6E:A7:B3:C7:19:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a4c62c1-3955-3c7f-a20f-7a1f08b8024c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:85:20:b8:a8:cd:b3:f1:69:de:14:5b:15:76:ec:37:9f:e8: e3:ef:e8:51:87:76:ab:da:0e:e0:98:ad:a2:c9:85:45:d3:8f: 52:05:6f:15:e6:6e:3e:2b:8f:11:52:20:cc:71:9d:f2:80:40: 93:0c:6c:62:57:d5:02:22:f9:8a:b5:50:d7:2f:49:07:4b:45: e6:1c:64:d5:c7:93:a3:6c:29:87:05:5a:3a:86:70:bc:53:2b: c7:c8:14:11:98:1a:62:02:61:8a:ec:1c:fe:5d:31:88:17:10: ee:10:f1:b4:9b:83:e2:f9:7a:91:33:78:18:ba:12:54:0d:6f: 61:f6:6b:ed:ee:12:6e:04:16:34:b9:4b:10:40:37:d2:2d:28: e6:97:ef:84:7d:63:c2:1a:7a:bc:4d:31:01:81:2c:f4:04:03: c0:09:6b:f4:89:ae:03:d4:bf:f9:f5:28:64:ee:f8:c1:51:f7: 70:40:1d:75:a7:c7:83:16:54:21:0f:ed:37:d3:08:0e:62:5a: 6d:aa:47:a2:89:0e:23:16:36:0b:0d:9c:b8:f0:e6:7c:cd:f6: 53:d9:b1:5c:a1:68:4e:06:17:89:ea:20:58:18:c7:d9:87:98: 08:4f:55:b6:80:68:bd:a3:34:68:05:5f:bd:2f:63:14:e3:8e: 86:65:b1:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht1GLGbHOdPCNhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgyMFoXDTI1MDcyMzExMDgyMFowLzEtMCsGA1UEAxMk ZjVmMDNiZTAtMDE0OC00OGRiLTg1ZjMtNzk1MjkzODA0YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ7s39/G0pRol0gmqk8Y8yZrIBFPGlPdufYE Wsgt2WycPTtS/kCr5V8T2C0NLlvpKD6MPHyuKr3BKLRqwQvabV9nyiw/54ISFr0r NnMl1p6xS78l1XS6wOUtAWUInNi/ap4uVlLMyoa1SHMQG0HdSWy2BHEk6LTPH6I6 u6exA7m/EwjjcR7reectI3iEGep1KawE5pV5uJcaRPDD4nkVzrBsKPqc08xqYxWe 6Y+pLfDYa7v7V1NZ/KhjWY5VPTmWsxb3lOQIzPI8OlS79hgKptnY5SMJNPsNcwBh 0ZkCedzdUeVNKVa3ctIRZhmKIbVTsWw4S/P6btX/CgpjULJ57wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNkl2wtES0iiZGF1NzHbqezxxnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2E0YzYyYzEtMzk1NS0z YzdmLWEyMGYtN2ExZjA4YjgwMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGFILiozbPxad4UWxV27Def6OPv6FGHdqvaDuCYraLJhUXTj1IFbxXm bj4rjxFSIMxxnfKAQJMMbGJX1QIi+Yq1UNcvSQdLReYcZNXHk6NsKYcFWjqGcLxT K8fIFBGYGmICYYrsHP5dMYgXEO4Q8bSbg+L5epEzeBi6ElQNb2H2a+3uEm4EFjS5 SxBAN9ItKOaX74R9Y8IaerxNMQGBLPQEA8AJa/SJrgPUv/n1KGTu+MFR93BAHXWn x4MWVCEP7TfTCA5iWm2qR6KJDiMWNgsNnLjw5nzN9lPZsVyhaE4GF4nqIFgYx9mH mAhPVbaAaL2jNGgFX70vYxTjjoZlsaY= -----END CERTIFICATE-----Generated at Fri May 9 03:41:45 2025 by rpki-client