$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c0dae30-c78c-328b-885f-532eef23b979.roa File: 3c0dae30-c78c-328b-885f-532eef23b979.roa (raw, json) Hash identifier: NFUlm+RwJExhnKnPCmgwobFSVVI6XJDaNBfb7CFtcB4= Subject key identifier: B7:E7:4C:C0:00:28:3A:7B:D0:39:30:B8:C6:36:46:B8:20:88:C2:A6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A211C4BE472C6A923C6DEC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c0dae30-c78c-328b-885f-532eef23b979.roa Signing time: Thu 24 Apr 2025 14:10:35 +0000 ROA not before: Thu 24 Apr 2025 14:10:35 +0000 ROA not after: Wed 23 Jul 2025 14:10:35 +0000 asID: 207266 IP address blocks: 65.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:c4:be:47:2c:6a:92:3c:6d:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:10:35 2025 GMT Not After : Jul 23 14:10:35 2025 GMT Subject: CN=4aa80052-223c-4505-b4b8-d335a597bc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:65:3c:2a:a7:4b:39:a2:22:37:b5:96:49:30: ff:0c:e4:e1:d3:eb:28:aa:7d:c9:65:e9:f8:01:70: 6d:20:f6:db:92:46:fa:1e:da:e5:02:87:50:4b:59: d8:14:54:b8:d3:ec:2e:97:41:f9:1f:61:a6:ad:3d: 9b:ac:0e:89:ff:86:15:f9:e5:77:54:e9:5b:17:5b: 60:e5:c9:38:61:74:f1:74:4c:89:08:22:bb:c9:16: 83:85:25:47:34:70:0b:ba:19:49:43:2a:d5:cb:09: fc:7d:87:b5:40:fd:0b:30:c4:ad:49:fc:35:79:e8: d5:11:db:9f:ac:bc:ff:ea:a3:17:54:62:35:e3:19: 1d:d0:e3:f5:c7:5a:70:68:99:2d:22:7e:5d:6e:89: 4a:d5:80:23:1f:9e:41:b1:b5:00:a9:e9:e9:38:8d: 17:8d:cb:68:6a:32:2c:cf:86:1a:19:1c:b9:f1:71: 63:ae:3d:c3:9a:67:34:e8:ea:67:24:fd:d9:19:3a: 8f:ce:8a:1d:5f:5d:91:4f:cf:cd:52:5a:27:17:e7: 73:04:5a:dd:63:39:ab:82:59:c7:8e:5d:dd:9e:ac: d2:f1:92:14:2a:4a:48:1e:13:ff:47:47:90:1c:d2: ab:7e:e2:26:b4:12:f9:b4:8e:a6:e6:d5:8d:80:53: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E7:4C:C0:00:28:3A:7B:D0:39:30:B8:C6:36:46:B8:20:88:C2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c0dae30-c78c-328b-885f-532eef23b979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:5b:65:de:7e:e1:fc:1d:7e:c4:e3:0c:d4:fc:f3:e2:f1:f6: 58:63:95:50:5a:a7:d6:2b:14:a4:db:8e:ca:ae:ca:38:a2:a4: e5:bd:10:73:7a:3c:32:aa:7b:d0:08:42:6c:73:be:84:84:34: 0e:7f:40:49:93:61:b1:34:db:e8:6c:35:1d:db:6d:e4:b8:76: 0e:cb:7a:32:37:06:a7:a5:78:05:5a:ef:09:f1:b8:d6:9f:35: 79:2c:0b:6f:d0:4b:1d:f6:c4:11:64:9f:cc:f6:8d:2a:50:2f: 3b:73:e8:60:8e:b3:f0:eb:9c:ce:8a:19:4f:3b:e1:bc:bb:7c: 2b:a8:2d:4a:5b:20:37:9a:b6:ea:c7:fd:b3:33:43:8c:1f:ce: c9:e3:d5:9b:2c:ae:52:0d:40:1c:0d:88:fd:d8:42:3d:a5:56: 04:9d:57:fd:4b:77:b4:13:97:40:f8:c8:1e:3a:45:44:82:a9: 7e:37:65:06:b1:62:4a:f1:fc:ae:fe:e3:f7:f5:22:66:b0:b1: c9:28:f6:98:cc:53:d5:51:4a:1d:44:f6:fc:63:d2:f4:7e:1a: b1:1b:a5:d2:77:86:d1:a9:a4:ac:9e:c3:32:e7:41:f2:bc:53: 29:f1:3a:b2:14:4a:c8:8b:07:99:86:88:a0:ae:f5:5f:f1:ca: bc:c0:f6:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEcS+Ryxqkjxt7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTAzNVoXDTI1MDcyMzE0MTAzNVowLzEtMCsGA1UEAxMk NGFhODAwNTItMjIzYy00NTA1LWI0YjgtZDMzNWE1OTdiYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWU8KqdLOaIiN7WWSTD/DOTh0+soqn3JZen4 AXBtIPbbkkb6HtrlAodQS1nYFFS40+wul0H5H2GmrT2brA6J/4YV+eV3VOlbF1tg 5ck4YXTxdEyJCCK7yRaDhSVHNHALuhlJQyrVywn8fYe1QP0LMMStSfw1eejVEduf rLz/6qMXVGI14xkd0OP1x1pwaJktIn5dbolK1YAjH55BsbUAqenpOI0XjctoajIs z4YaGRy58XFjrj3Dmmc06OpnJP3ZGTqPzoodX12RT8/NUlonF+dzBFrdYzmrglnH jl3dnqzS8ZIUKkpIHhP/R0eQHNKrfuImtBL5tI6m5tWNgFNW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfnTMAAKDp70DkwuMY2RrggiMKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2MwZGFlMzAtYzc4Yy0z MjhiLTg4NWYtNTMyZWVmMjNiOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFbZd5+4fwdfsTjDNT88+Lx9lhjlVBap9YrFKTbjsquyjiipOW9EHN6 PDKqe9AIQmxzvoSENA5/QEmTYbE02+hsNR3bbeS4dg7LejI3BqeleAVa7wnxuNaf NXksC2/QSx32xBFkn8z2jSpQLztz6GCOs/DrnM6KGU874by7fCuoLUpbIDeaturH /bMzQ4wfzsnj1ZssrlINQBwNiP3YQj2lVgSdV/1Ld7QTl0D4yB46RUSCqX43ZQax Ykrx/K7+4/f1Imawscko9pjMU9VRSh1E9vxj0vR+GrEbpdJ3htGppKyewzLnQfK8 UynxOrIUSsiLB5mGiKCu9V/xyrzA9vc= -----END CERTIFICATE-----Generated at Fri May 9 12:44:27 2025 by rpki-client