$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6d87e6bc-2296-3c9d-b105-558f88df0a3c.roa File: 6d87e6bc-2296-3c9d-b105-558f88df0a3c.roa (raw, json) Hash identifier: UsGZT+AT76DZEirg9OKALjZcQOgxjHBfB4VWcj3fs48= Subject key identifier: C3:AA:10:8A:14:A7:BA:FC:A4:76:28:D5:C2:C9:79:8A:81:6D:B6:5E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B74EA2C664C84649B5E060 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6d87e6bc-2296-3c9d-b105-558f88df0a3c.roa Signing time: Thu 24 Apr 2025 11:08:19 +0000 ROA not before: Thu 24 Apr 2025 11:08:19 +0000 ROA not after: Wed 23 Jul 2025 11:08:19 +0000 asID: 12041 IP address blocks: 65.22.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:4e:a2:c6:64:c8:46:49:b5:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:19 2025 GMT Not After : Jul 23 11:08:19 2025 GMT Subject: CN=61634fb9-7b47-4304-9987-e0fca7b6bf71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:92:1b:03:3f:5d:e1:a0:e4:e1:c4:fe:03:15: 0b:99:b5:ff:a9:68:60:56:ce:48:86:c4:01:14:0b: 5a:51:c0:75:7d:3c:0a:8b:2a:3b:a6:47:94:d4:50: 88:ab:d2:2d:58:07:8a:e4:78:c2:0b:eb:65:eb:c5: bb:45:3d:53:11:32:04:f3:53:66:84:ea:92:4a:c3: 47:d6:fc:61:95:41:74:06:af:8e:1c:1d:c8:13:c2: a4:8e:2f:b1:05:0c:10:16:16:61:73:0a:77:ec:f9: 7b:48:dc:bc:70:63:68:d2:01:6a:33:f7:2e:b5:3c: 4c:9f:63:1b:b4:3a:81:75:81:8b:7a:6f:e7:a5:0f: b9:b6:50:60:bf:77:93:05:3a:6c:27:7c:b5:28:2f: 3a:b9:7c:3e:72:f8:18:03:b7:dd:b0:c5:16:46:7c: 87:87:04:34:3d:46:72:04:94:25:e9:e9:6e:06:cc: 35:66:25:dc:7a:4f:bb:c5:1e:38:e3:46:39:5c:37: e8:8e:dc:d3:5c:df:4e:5f:72:7b:0b:ed:92:52:84: de:c7:41:0e:d1:44:ee:c1:34:df:0c:20:a5:c2:bd: 60:51:5d:bf:a7:f2:79:fd:fc:75:60:35:ca:dd:ee: 08:47:f8:51:22:2b:df:71:f3:05:27:99:d7:5b:51: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AA:10:8A:14:A7:BA:FC:A4:76:28:D5:C2:C9:79:8A:81:6D:B6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6d87e6bc-2296-3c9d-b105-558f88df0a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:81:32:e5:a8:4e:68:f9:95:5d:72:75:fe:34:1b:b2:0d:32: 6e:fa:5f:58:a6:0f:f6:da:fc:7a:51:19:c9:ac:e5:55:08:a1: 88:4c:a4:10:af:66:1a:f6:ee:91:93:35:43:b9:38:87:3f:48: 27:d5:6a:7d:41:95:b1:02:ad:22:f3:c6:16:06:1e:96:08:5b: 18:27:9e:dc:4b:c5:14:b1:67:75:08:dc:74:f5:c3:e5:c3:66: 9e:2c:77:6a:d0:15:d9:88:61:be:9f:c9:6e:13:73:a8:03:33: 14:d1:ee:82:a1:d5:de:fe:31:6b:7b:88:5a:57:5e:00:d7:89: 24:d5:eb:64:c4:b0:23:c9:b4:14:d6:42:19:7c:46:b2:df:20: 2a:73:eb:17:b2:5f:2e:9f:23:20:5b:ae:18:90:cb:8b:31:37: d1:b6:53:5c:8a:17:b2:cf:27:66:2d:e5:09:bd:30:de:20:3e: ac:16:40:b6:08:f7:8c:84:dd:6c:eb:1a:74:db:58:de:bf:42: fa:ef:22:40:60:52:51:0b:b1:a6:9c:ba:bd:74:00:e4:55:f5: e6:72:40:1e:4d:c0:53:82:77:12:fb:d6:db:a5:ab:5c:41:53: 5d:12:92:af:ff:83:3c:09:71:a5:64:9b:2c:34:37:1e:84:c5: fc:09:8d:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht06ixmTIRkm14GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgxOVoXDTI1MDcyMzExMDgxOVowLzEtMCsGA1UEAxMk NjE2MzRmYjktN2I0Ny00MzA0LTk5ODctZTBmY2E3YjZiZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5IbAz9d4aDk4cT+AxULmbX/qWhgVs5IhsQB FAtaUcB1fTwKiyo7pkeU1FCIq9ItWAeK5HjCC+tl68W7RT1TETIE81NmhOqSSsNH 1vxhlUF0Bq+OHB3IE8Kkji+xBQwQFhZhcwp37Pl7SNy8cGNo0gFqM/cutTxMn2Mb tDqBdYGLem/npQ+5tlBgv3eTBTpsJ3y1KC86uXw+cvgYA7fdsMUWRnyHhwQ0PUZy BJQl6eluBsw1ZiXcek+7xR4440Y5XDfojtzTXN9OX3J7C+2SUoTex0EO0UTuwTTf DCClwr1gUV2/p/J5/fx1YDXK3e4IR/hRIivfcfMFJ5nXW1EtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOqEIoUp7r8pHYo1cLJeYqBbbZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmQ4N2U2YmMtMjI5Ni0z YzlkLWIxMDUtNTU4Zjg4ZGYwYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+BMuWoTmj5lV1ydf40G7INMm76X1imD/ba/HpRGcms5VUIoYhMpBCv Zhr27pGTNUO5OIc/SCfVan1BlbECrSLzxhYGHpYIWxgnntxLxRSxZ3UI3HT1w+XD Zp4sd2rQFdmIYb6fyW4Tc6gDMxTR7oKh1d7+MWt7iFpXXgDXiSTV62TEsCPJtBTW Qhl8RrLfICpz6xeyXy6fIyBbrhiQy4sxN9G2U1yKF7LPJ2Yt5Qm9MN4gPqwWQLYI 94yE3WzrGnTbWN6/QvrvIkBgUlELsaacur10AORV9eZyQB5NwFOCdxL71tulq1xB U10Skq//gzwJcaVkmyw0Nx6ExfwJjVA= -----END CERTIFICATE-----Generated at Sat May 10 21:19:54 2025 by rpki-client