$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80626d16-a5c6-3452-9a09-2f931dd68483.roa File: 80626d16-a5c6-3452-9a09-2f931dd68483.roa (raw, json) Hash identifier: /tyvAP1ipRGYTJon6Ax/KJ3U41Y9JotykQO2+VaNRwk= Subject key identifier: 39:D1:14:63:FD:71:8B:1A:C5:11:77:54:13:F5:3B:61:98:90:65:18 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B799C02D34D7225415911C Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80626d16-a5c6-3452-9a09-2f931dd68483.roa Signing time: Thu 24 Apr 2025 11:08:54 +0000 ROA not before: Thu 24 Apr 2025 11:08:54 +0000 ROA not after: Wed 23 Jul 2025 11:08:54 +0000 asID: 12041 IP address blocks: 65.22.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:99:c0:2d:34:d7:22:54:15:91:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:54 2025 GMT Not After : Jul 23 11:08:54 2025 GMT Subject: CN=55850a28-d563-4bf8-81e3-497878a3b51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:cd:57:54:de:ac:bf:af:11:e1:f4:f8:9e: c8:a0:92:a0:20:d9:03:e2:1f:bf:f4:5a:c2:cb:f3: 38:fc:0f:3f:e1:fa:67:09:05:30:67:49:7a:56:a2: 57:61:b0:93:3b:25:a8:5a:43:1d:93:8b:9f:3f:f3: cc:6e:4b:3d:83:7d:fc:63:f8:3b:e0:65:a5:29:84: 70:d1:bc:45:fd:80:6f:52:52:47:32:40:1d:5f:97: e2:05:1a:e0:21:03:21:d9:23:c7:f0:1d:e6:df:32: 22:33:1a:64:c6:49:42:89:d7:c0:86:cb:5c:96:08: b5:f2:b9:89:90:f8:b7:f5:68:62:f2:cc:10:cb:4b: e1:2f:4b:5c:3b:1a:3c:24:98:a2:e6:c2:f8:cd:3f: f8:6e:c2:27:c2:6d:d8:2f:dc:0b:56:49:49:b0:02: 49:f5:8e:44:21:7a:58:a7:cc:30:e1:5b:e1:ad:cf: 9c:71:62:e7:ef:46:95:de:05:60:f3:3e:00:09:4c: f6:14:40:b7:dd:40:1f:87:92:5c:a5:8f:2a:af:52: ea:f8:fd:e2:3b:ae:2b:4e:38:f8:18:7c:3c:32:5a: 31:3c:b7:a0:73:99:d7:b1:61:c0:fa:e7:f4:85:ac: 3f:0b:bb:e0:8e:ac:6c:56:d1:80:62:46:af:e9:1b: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D1:14:63:FD:71:8B:1A:C5:11:77:54:13:F5:3B:61:98:90:65:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80626d16-a5c6-3452-9a09-2f931dd68483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:85:a9:b3:b5:38:b9:72:e5:d9:94:51:ea:e1:aa:7a:9e:bd: a1:f4:e4:24:72:b8:09:58:09:2a:63:b4:b6:4c:b5:46:2d:24: bd:52:cb:e4:60:19:6e:30:89:08:e7:4d:e1:35:87:60:61:e4: 72:80:e6:90:43:d2:28:01:8d:57:b0:59:f0:82:70:85:61:78: 11:9c:30:81:e5:39:51:47:dc:0c:8c:ef:4c:6d:6b:b0:8f:8a: a4:8a:ea:f4:98:51:10:ce:86:09:5c:7d:7e:6f:3d:a1:38:9b: 50:a9:96:46:2d:6a:b1:09:42:cd:79:ee:1d:0e:62:25:03:58: 88:db:3a:31:68:f1:9e:d5:8c:a0:66:db:b3:e6:0c:e2:59:1a: 7e:cb:aa:c5:ee:42:07:9c:77:f1:e6:cd:f2:0a:5c:26:cb:99: 5d:d3:07:db:ba:3f:e8:26:63:42:8b:d5:c8:20:de:73:1e:88: ac:4b:96:0f:42:f1:7c:48:74:aa:eb:8e:cb:3d:9f:ee:fb:e5: 6a:b2:25:04:ee:b7:f3:0e:20:a1:c9:78:68:64:ec:a8:00:a3: 55:96:f0:d8:3a:f8:47:16:cc:3e:e6:21:57:bf:ab:be:35:0e: 27:6e:3a:5b:14:00:b8:11:24:8d:c6:78:22:92:85:15:de:83: 7c:55:26:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht5nALTTXIlQVkRwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1NFoXDTI1MDcyMzExMDg1NFowLzEtMCsGA1UEAxMk NTU4NTBhMjgtZDU2My00YmY4LTgxZTMtNDk3ODc4YTNiNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u/NV1TerL+vEeH0+J7IoJKgINkD4h+/9FrC y/M4/A8/4fpnCQUwZ0l6VqJXYbCTOyWoWkMdk4ufP/PMbks9g338Y/g74GWlKYRw 0bxF/YBvUlJHMkAdX5fiBRrgIQMh2SPH8B3m3zIiMxpkxklCidfAhstclgi18rmJ kPi39Whi8swQy0vhL0tcOxo8JJii5sL4zT/4bsInwm3YL9wLVklJsAJJ9Y5EIXpY p8ww4Vvhrc+ccWLn70aV3gVg8z4ACUz2FEC33UAfh5JcpY8qr1Lq+P3iO64rTjj4 GHw8MloxPLegc5nXsWHA+uf0haw/C7vgjqxsVtGAYkav6Rv1xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnRFGP9cYsaxRF3VBP1O2GYkGUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODA2MjZkMTYtYTVjNi0z NDUyLTlhMDktMmY5MzFkZDY4NDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiFqbO1OLly5dmUUerhqnqevaH05CRyuAlYCSpjtLZMtUYtJL1Sy+Rg GW4wiQjnTeE1h2Bh5HKA5pBD0igBjVewWfCCcIVheBGcMIHlOVFH3AyM70xta7CP iqSK6vSYURDOhglcfX5vPaE4m1CplkYtarEJQs157h0OYiUDWIjbOjFo8Z7VjKBm 27PmDOJZGn7LqsXuQgecd/HmzfIKXCbLmV3TB9u6P+gmY0KL1cgg3nMeiKxLlg9C 8XxIdKrrjss9n+775WqyJQTut/MOIKHJeGhk7KgAo1WW8Ng6+EcWzD7mIVe/q741 DiduOlsUALgRJI3GeCKShRXeg3xVJkc= -----END CERTIFICATE-----Generated at Sat May 10 21:23:00 2025 by rpki-client