$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa File: 73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa (raw, json) Hash identifier: LRjYJgnmYMBGL/nRE7Rz9Z5FynSzzcKL+sjFrJ76+nw= Subject key identifier: C8:2E:BA:54:37:A5:BA:B1:E6:1D:BF:AF:2B:15:E5:7E:7E:34:2F:45 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B79695C105F3688E08E7C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa Signing time: Thu 24 Apr 2025 11:08:53 +0000 ROA not before: Thu 24 Apr 2025 11:08:53 +0000 ROA not after: Wed 23 Jul 2025 11:08:53 +0000 asID: 12041 IP address blocks: 65.22.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:96:95:c1:05:f3:68:8e:08:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:53 2025 GMT Not After : Jul 23 11:08:53 2025 GMT Subject: CN=233ef728-bb7d-46ff-9beb-f5cae813aefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:26:62:5e:c5:1c:31:47:f0:05:92:41:f6:28: cb:ef:ed:78:54:72:23:8b:b2:2a:5b:f0:a2:45:6d: db:1f:43:c3:a1:d9:cd:e8:6d:48:5e:df:e2:65:eb: 60:c4:eb:1e:d0:d0:d6:11:48:56:06:78:90:02:8e: cc:f2:73:a7:50:a9:3e:6c:26:24:02:a5:5f:be:6b: 9f:6f:c2:5a:a0:f4:5f:ab:f9:f4:0b:ed:37:50:9d: bd:49:af:21:be:8e:d3:19:6e:c7:76:ec:31:63:21: 15:cf:6d:29:ef:a3:aa:8a:bb:53:26:be:6c:aa:af: fb:5e:4e:77:de:96:fc:b9:8c:91:fe:d7:fe:a8:dc: 83:a6:cd:d5:f5:39:81:48:d3:0c:5e:d5:ab:5a:eb: 50:40:5c:82:bb:1b:11:9e:d3:0b:79:91:11:e1:f1: d5:69:20:79:73:19:f5:c3:f6:a7:de:ae:23:d3:d2: 14:74:3c:34:42:45:cc:b2:da:19:b3:a8:f5:6b:0a: 1c:ed:0b:b1:ce:c9:a0:d8:c0:7f:3c:97:03:26:95: 7d:60:75:2b:bc:d1:c2:6f:08:05:3a:c5:c1:7b:94: f7:74:aa:b6:cd:75:8d:e3:cc:e4:29:23:a1:d5:ad: 82:85:1b:c0:db:4e:17:95:e2:e4:a6:93:2e:b7:e4: de:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2E:BA:54:37:A5:BA:B1:E6:1D:BF:AF:2B:15:E5:7E:7E:34:2F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:98:db:13:43:9f:47:01:11:69:9c:09:f5:0c:f1:cf:07:85: 05:ca:43:cc:db:dc:8b:67:aa:9e:4d:24:37:6d:17:3a:40:dd: 1f:e5:bf:b5:50:84:77:b2:76:b9:bd:60:2f:24:9f:c0:66:e6: a3:23:67:49:3e:d7:0d:33:6a:9c:f4:8e:98:af:6e:d3:23:ec: 71:06:f1:99:37:dc:52:e4:99:58:b2:5a:b7:b4:9b:54:5c:26: 71:78:1e:50:7f:8b:58:4d:9f:c1:7f:f7:c7:83:fa:43:77:af: 85:9b:43:c8:24:04:0f:14:3e:dd:a9:1a:c5:e7:5b:40:6a:80: 51:fa:53:cc:f9:69:09:9a:c4:74:06:f8:16:73:73:2c:2b:0b: c2:89:3c:ac:0b:a4:00:88:f5:ef:b4:ca:c7:13:46:b3:69:13: 8d:41:14:80:3f:e2:b6:fc:59:3b:50:63:c1:2d:5b:7e:31:ec: 6a:57:1e:f7:82:e1:e7:79:c0:da:d5:1a:3d:c8:cc:ad:96:be: 96:66:4d:e2:8b:6d:99:6b:b3:e2:5d:22:7c:f7:b6:24:9e:a5: 45:85:77:af:36:37:d3:54:7a:55:17:4d:94:70:68:d2:62:78: 3f:cd:08:11:e1:9e:dc:06:0c:32:3a:da:8f:1b:87:f2:9f:52: 7c:90:d9:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht5aVwQXzaI4I58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1M1oXDTI1MDcyMzExMDg1M1owLzEtMCsGA1UEAxMk MjMzZWY3MjgtYmI3ZC00NmZmLTliZWItZjVjYWU4MTNhZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSZiXsUcMUfwBZJB9ijL7+14VHIji7IqW/Ci RW3bH0PDodnN6G1IXt/iZetgxOse0NDWEUhWBniQAo7M8nOnUKk+bCYkAqVfvmuf b8JaoPRfq/n0C+03UJ29Sa8hvo7TGW7HduwxYyEVz20p76OqirtTJr5sqq/7Xk53 3pb8uYyR/tf+qNyDps3V9TmBSNMMXtWrWutQQFyCuxsRntMLeZER4fHVaSB5cxn1 w/an3q4j09IUdDw0QkXMstoZs6j1awoc7Quxzsmg2MB/PJcDJpV9YHUrvNHCbwgF OsXBe5T3dKq2zXWN48zkKSOh1a2ChRvA204XleLkppMut+TeTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMguulQ3pbqx5h2/rysV5X5+NC9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzNjMjBhMjUtM2M3OS0z MTZmLWI3MTAtN2VjNGE4YWQ2ZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqY2xNDn0cBEWmcCfUM8c8HhQXKQ8zb3Itnqp5NJDdtFzpA3R/lv7VQ hHeydrm9YC8kn8Bm5qMjZ0k+1w0zapz0jpivbtMj7HEG8Zk33FLkmViyWre0m1Rc JnF4HlB/i1hNn8F/98eD+kN3r4WbQ8gkBA8UPt2pGsXnW0BqgFH6U8z5aQmaxHQG +BZzcywrC8KJPKwLpACI9e+0yscTRrNpE41BFIA/4rb8WTtQY8EtW34x7GpXHveC 4ed5wNrVGj3IzK2WvpZmTeKLbZlrs+JdInz3tiSepUWFd682N9NUelUXTZRwaNJi eD/NCBHhntwGDDI62o8bh/KfUnyQ2XE= -----END CERTIFICATE-----Generated at Thu May 8 12:24:09 2025 by rpki-client