$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa File: 7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa (raw, json) Hash identifier: pjHZQZ8qNUndHr3pQhOGanxIgVm6TzuKYq6Eurl7/i4= Subject key identifier: 87:A4:6E:10:88:F5:1C:9C:84:3E:40:3C:0A:1E:91:CF:C6:A2:00:E1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B74688BB6F817E4B46C400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa Signing time: Thu 24 Apr 2025 11:08:15 +0000 ROA not before: Thu 24 Apr 2025 11:08:15 +0000 ROA not after: Wed 23 Jul 2025 11:08:15 +0000 asID: 12041 IP address blocks: 65.22.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:46:88:bb:6f:81:7e:4b:46:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:15 2025 GMT Not After : Jul 23 11:08:15 2025 GMT Subject: CN=55b8cc9a-b150-4875-bad0-bff56e1e6674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6b:8c:06:5d:88:80:56:12:e7:99:1f:fe:7f: 79:87:75:8d:09:12:00:08:2e:77:a2:cd:0a:96:ce: c0:68:c7:85:a5:9c:71:f5:a6:e0:70:c7:43:1f:5b: f4:df:5e:fb:ac:53:a1:75:f7:e0:9e:86:dc:7c:e6: e9:dd:40:94:52:c4:15:1a:95:43:d8:9a:5e:05:b8: 71:ad:e6:86:7e:e2:c3:87:f3:4c:36:80:21:74:9b: 12:b8:7b:af:e2:58:6f:5f:d7:b5:36:4c:b9:6a:94: be:92:f7:9f:29:31:6f:18:3a:ab:6e:64:7b:c8:1c: 72:80:6e:ac:c4:fd:bf:4a:09:76:c9:99:93:e1:c9: f5:ea:c0:28:fd:83:dc:42:a3:8e:50:18:cb:14:d9: 6a:d3:84:41:2d:f6:87:85:dc:75:33:d3:fb:02:45: 66:40:1e:7e:23:9e:3b:6f:19:c4:61:d5:c3:c8:cc: ec:23:02:6b:d1:ef:fe:6f:d6:52:24:12:44:36:06: 8f:cd:48:2d:08:39:43:3f:4d:77:b9:98:52:fb:06: ce:78:81:77:40:da:18:31:8b:8c:a1:34:6c:20:80: 31:09:01:b2:2d:ea:f3:24:a1:d2:81:94:27:ee:c5: 8e:9c:cd:9b:b8:6a:87:f9:df:12:37:09:1a:60:a9: 95:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A4:6E:10:88:F5:1C:9C:84:3E:40:3C:0A:1E:91:CF:C6:A2:00:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:07:3f:2f:d2:fd:0b:e9:43:d7:11:6f:3b:3d:07:86:8d:e4: dd:b6:b6:d5:ce:a4:48:51:2c:f9:6c:d3:5f:f9:a3:3c:ab:be: 8a:ff:c8:10:bc:62:b7:da:61:22:9a:86:f4:39:21:f4:b9:05: 57:b8:79:2b:70:19:c2:83:7d:81:73:35:b0:06:2a:2a:7c:14: d7:23:d2:4f:fa:09:ae:ea:ba:77:8f:00:d8:b6:eb:8d:30:78: 5a:5d:49:fa:af:a2:ec:e5:f4:6e:02:78:f6:03:38:36:fd:13: de:39:d6:5d:bf:54:3e:ea:98:3c:9b:96:b1:42:cf:2c:8a:09: 20:97:bc:21:89:1a:99:af:15:43:32:72:4c:21:f3:81:cb:b8: c0:72:30:ed:67:bb:69:89:e4:4a:1a:e5:e1:45:00:af:11:51: 7d:04:84:dc:79:95:8d:ec:64:b3:88:10:9a:eb:3e:d3:c3:66: a6:d9:ee:84:91:78:79:8c:95:84:73:fc:b4:8a:dd:e7:4e:dd: ba:47:3f:dc:62:7c:3c:d7:e7:64:24:6c:7e:17:c8:22:00:16: a4:7b:5d:06:5c:13:3b:ad:41:27:1e:b9:ee:c0:ac:fd:97:16: 1c:92:90:30:d3:9a:8d:8c:e0:4b:3b:8b:a4:68:7f:c2:8d:2a: 1d:0a:a8:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht0aIu2+BfktGxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgxNVoXDTI1MDcyMzExMDgxNVowLzEtMCsGA1UEAxMk NTViOGNjOWEtYjE1MC00ODc1LWJhZDAtYmZmNTZlMWU2Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GuMBl2IgFYS55kf/n95h3WNCRIACC53os0K ls7AaMeFpZxx9abgcMdDH1v03177rFOhdffgnobcfObp3UCUUsQVGpVD2JpeBbhx reaGfuLDh/NMNoAhdJsSuHuv4lhvX9e1Nky5apS+kvefKTFvGDqrbmR7yBxygG6s xP2/Sgl2yZmT4cn16sAo/YPcQqOOUBjLFNlq04RBLfaHhdx1M9P7AkVmQB5+I547 bxnEYdXDyMzsIwJr0e/+b9ZSJBJENgaPzUgtCDlDP013uZhS+wbOeIF3QNoYMYuM oTRsIIAxCQGyLerzJKHSgZQn7sWOnM2buGqH+d8SNwkaYKmV6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIekbhCI9RychD5APAoekc/GogDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzAxM2Y5YTYtOWUxYS0z ZjNlLWExZTctNDY3ODNiNzFhYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQHPy/S/QvpQ9cRbzs9B4aN5N22ttXOpEhRLPls01/5ozyrvor/yBC8 YrfaYSKahvQ5IfS5BVe4eStwGcKDfYFzNbAGKip8FNcj0k/6Ca7qunePANi2640w eFpdSfqvouzl9G4CePYDODb9E9451l2/VD7qmDyblrFCzyyKCSCXvCGJGpmvFUMy ckwh84HLuMByMO1nu2mJ5Eoa5eFFAK8RUX0EhNx5lY3sZLOIEJrrPtPDZqbZ7oSR eHmMlYRz/LSK3edO3bpHP9xifDzX52QkbH4XyCIAFqR7XQZcEzutQSceue7ArP2X FhySkDDTmo2M4Es7i6Rof8KNKh0KqGs= -----END CERTIFICATE-----Generated at Sat May 10 03:37:56 2025 by rpki-client