$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46267bb1-7662-3f7b-afdb-b9d43dfe3a03.roa File: 46267bb1-7662-3f7b-afdb-b9d43dfe3a03.roa (raw, json) Hash identifier: B0cOwNifnUKqNxZ8dyzN7tXGs4vhl5wHn8VYFDGUqp8= Subject key identifier: D2:63:8A:4B:7F:CC:06:8C:E4:C6:37:A7:2A:28:18:08:9C:D7:BA:79 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B81F59E3A3C420D4B8CA60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46267bb1-7662-3f7b-afdb-b9d43dfe3a03.roa Signing time: Thu 24 Apr 2025 11:09:57 +0000 ROA not before: Thu 24 Apr 2025 11:09:57 +0000 ROA not after: Wed 23 Jul 2025 11:09:57 +0000 asID: 12041 IP address blocks: 65.22.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:1f:59:e3:a3:c4:20:d4:b8:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:57 2025 GMT Not After : Jul 23 11:09:57 2025 GMT Subject: CN=2808a5e1-7165-4d50-9a63-c2fbd79633e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:82:96:68:af:94:17:4a:8b:d4:3f:2e:00: 9f:3a:3c:68:ae:b8:e4:36:88:02:8d:ff:83:a0:33: a9:a0:b4:c4:9e:68:16:b9:26:8c:91:43:70:37:a6: 07:37:e2:09:8c:4d:85:fc:43:27:ad:76:c0:9e:e5: b3:fc:46:67:b8:40:bf:31:f7:29:fd:f6:e5:af:b3: 9e:02:24:ce:1b:52:9e:4d:86:ed:8f:03:a8:b6:2c: 3a:21:aa:3e:8d:ac:46:65:ae:2a:85:3e:c2:b8:9e: 17:ed:f5:50:67:47:a0:e0:3a:01:72:aa:5b:4c:70: c1:c2:97:f9:b4:d1:8b:f8:30:99:e5:41:93:c6:0c: 14:4a:c3:36:5b:b7:75:da:a7:fe:5d:1a:c5:4d:a9: 5d:76:91:03:4c:7f:99:0f:04:8f:0e:0a:64:70:ea: df:84:b9:87:20:c6:24:3d:80:5f:03:37:37:2d:73: f8:e5:38:15:c9:bb:82:85:34:e4:3d:36:81:55:62: a1:01:20:bf:f9:36:b2:b1:c9:a2:d5:1f:a4:35:c4: ee:e5:ee:57:98:97:57:c5:94:1c:e3:0c:93:a7:37: dc:ab:94:57:8e:50:d0:8d:bb:b7:2f:b3:bc:7f:4f: 66:98:dc:de:e9:48:a3:5c:b8:a4:c4:2b:2f:8e:9d: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:63:8A:4B:7F:CC:06:8C:E4:C6:37:A7:2A:28:18:08:9C:D7:BA:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46267bb1-7662-3f7b-afdb-b9d43dfe3a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d0:bd:4c:ce:89:ad:3f:67:a6:71:c6:07:a6:c5:8c:95:55: ed:44:20:33:95:af:74:85:9c:2d:eb:e1:aa:c1:98:f6:59:04: ac:fa:d5:c3:1d:16:f6:00:6e:3a:5c:37:de:92:50:76:21:03: 31:f8:6d:70:c0:65:ad:b5:46:b2:76:3f:81:dc:af:00:0f:4e: 62:63:0b:43:07:27:1d:23:80:74:2b:d1:29:20:35:c6:7f:1d: 33:da:30:1a:d6:7a:0a:83:98:fb:2a:14:7b:a0:72:a5:b1:ff: bd:23:63:6f:8e:5e:8b:70:c7:29:c3:a2:84:6c:62:a5:54:03: 5f:65:60:cc:49:c5:f5:c1:c6:81:41:91:61:0c:38:d0:c2:48: 9a:14:33:c0:b0:87:58:ac:03:1e:a3:fd:db:af:a3:b1:82:fc: e9:98:54:fb:df:03:db:f5:f0:06:1f:45:29:a1:dd:ed:c8:4e: a8:98:61:89:37:c4:3f:90:9e:2b:65:2f:39:74:16:cb:ef:30: 65:c0:49:f2:3f:38:d3:21:5d:71:2c:51:4b:d2:4c:74:db:1c: bd:9d:8a:d4:f9:dd:c1:dd:c5:9a:fb:c2:1c:6c:bc:81:b8:cf: 3b:4e:e5:55:ed:a4:93:5e:b6:97:6a:b1:c3:19:23:3c:25:17: e3:5e:0e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuB9Z46PEINS4ymAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk1N1oXDTI1MDcyMzExMDk1N1owLzEtMCsGA1UEAxMk MjgwOGE1ZTEtNzE2NS00ZDUwLTlhNjMtYzJmYmQ3OTYzM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhSClmivlBdKi9Q/LgCfOjxorrjkNogCjf+D oDOpoLTEnmgWuSaMkUNwN6YHN+IJjE2F/EMnrXbAnuWz/EZnuEC/Mfcp/fblr7Oe AiTOG1KeTYbtjwOotiw6Iao+jaxGZa4qhT7CuJ4X7fVQZ0eg4DoBcqpbTHDBwpf5 tNGL+DCZ5UGTxgwUSsM2W7d12qf+XRrFTalddpEDTH+ZDwSPDgpkcOrfhLmHIMYk PYBfAzc3LXP45TgVybuChTTkPTaBVWKhASC/+Tayscmi1R+kNcTu5e5XmJdXxZQc 4wyTpzfcq5RXjlDQjbu3L7O8f09mmNze6UijXLikxCsvjp24EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJjikt/zAaM5MY3pyooGAic17p5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDYyNjdiYjEtNzY2Mi0z ZjdiLWFmZGItYjlkNDNkZmUzYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbQvUzOia0/Z6ZxxgemxYyVVe1EIDOVr3SFnC3r4arBmPZZBKz61cMd FvYAbjpcN96SUHYhAzH4bXDAZa21RrJ2P4HcrwAPTmJjC0MHJx0jgHQr0SkgNcZ/ HTPaMBrWegqDmPsqFHugcqWx/70jY2+OXotwxynDooRsYqVUA19lYMxJxfXBxoFB kWEMONDCSJoUM8Cwh1isAx6j/duvo7GC/OmYVPvfA9v18AYfRSmh3e3ITqiYYYk3 xD+QnitlLzl0FsvvMGXASfI/ONMhXXEsUUvSTHTbHL2ditT53cHdxZr7whxsvIG4 zztO5VXtpJNetpdqscMZIzwlF+NeDus= -----END CERTIFICATE-----Generated at Thu May 8 20:48:14 2025 by rpki-client