$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/89226945-8764-37b8-93cc-16c6eeb50585.roa File: 89226945-8764-37b8-93cc-16c6eeb50585.roa (raw, json) Hash identifier: 1KAVBQ7VB28ezSRRHM78lSsHHYcTcjbVFhunti3QnMA= Subject key identifier: 8F:87:D8:70:19:AF:E6:C5:58:D3:5B:B7:3F:92:B0:AD:0E:6F:C8:A3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B76ED2BCAE4BE639E4DC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/89226945-8764-37b8-93cc-16c6eeb50585.roa Signing time: Thu 24 Apr 2025 11:08:34 +0000 ROA not before: Thu 24 Apr 2025 11:08:34 +0000 ROA not after: Wed 23 Jul 2025 11:08:34 +0000 asID: 12041 IP address blocks: 65.22.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:6e:d2:bc:ae:4b:e6:39:e4:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:34 2025 GMT Not After : Jul 23 11:08:34 2025 GMT Subject: CN=b336e48a-bcd7-49c1-98ed-1482cc1e7f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6b:3e:2f:a6:2d:e1:e8:8f:0f:9c:b5:9e:34: 12:fc:cb:ac:70:61:90:a2:28:59:82:03:99:c1:4f: f7:13:b4:e8:58:22:af:59:96:a0:2d:b3:ce:95:41: 1d:32:7a:6c:52:85:29:6e:2e:a6:5b:c0:ed:c4:9f: 90:38:bf:af:e0:a3:25:52:24:50:f3:e1:55:d2:90: 9a:23:95:9a:09:ec:68:43:3f:70:bd:fd:ee:9b:aa: 59:e5:63:be:6a:fc:32:31:e4:4c:8d:b0:6e:2c:b8: 21:d5:f6:dd:eb:40:f3:19:e0:5e:07:0d:3d:fb:79: ad:50:e2:56:59:1c:28:3c:4a:49:ef:d9:fa:8c:0b: a7:e6:1a:9c:93:9a:5b:1a:49:75:d1:c3:ac:36:37: c9:3b:99:b2:db:fb:9c:f5:5e:fd:b0:75:a9:77:66: 8b:e2:57:ba:9e:4e:89:23:ec:ab:17:84:f9:a5:35: a4:fe:20:ce:bd:b9:ee:aa:3b:57:cb:f0:76:ef:a2: b1:a2:05:89:62:66:57:79:59:a6:ab:75:52:9b:f0: e0:6f:1f:d0:8e:38:66:a9:bc:d5:b8:9a:13:8a:07: 09:e2:c4:54:3e:1f:65:7b:5e:63:29:84:7b:a9:87: ad:92:d1:8b:41:c6:32:6c:05:a1:0d:56:bf:40:23: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:87:D8:70:19:AF:E6:C5:58:D3:5B:B7:3F:92:B0:AD:0E:6F:C8:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/89226945-8764-37b8-93cc-16c6eeb50585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ec:b8:c4:f1:1c:26:1e:66:1d:4b:17:7f:f4:9b:b7:d0:72: eb:ad:41:31:51:4c:b8:b2:d3:69:47:3a:16:c0:8a:9e:c8:a2: 0b:07:41:fe:65:47:c7:52:ef:4e:62:22:ef:2a:69:89:a5:b0: 88:bd:44:78:71:62:9c:22:29:5e:82:3c:70:a5:2b:60:1d:34: 48:20:34:50:8c:69:3d:5f:0f:bb:f5:08:a2:68:e6:f1:99:73: 89:1c:6f:0f:6b:33:e9:e6:90:13:57:d6:16:6a:72:77:fc:71: 20:ab:2c:d7:f1:a2:79:be:36:4d:87:97:f9:69:b0:c6:fa:06: f2:23:81:d0:3a:dc:7b:d5:67:00:8b:0c:fc:4c:b7:f0:28:de: c4:68:e4:f6:f7:b8:fa:20:8a:43:a7:1d:1f:b5:9b:18:5a:58: 59:a2:60:2f:db:7c:ad:6f:13:9c:86:e3:36:54:36:06:45:7a: 30:10:0b:ed:8e:d3:0b:db:8e:29:e2:f8:22:5b:05:ee:ed:a4: 8c:e1:5f:a3:df:eb:10:5d:c2:5d:5b:2a:57:89:80:5f:3c:6c: 8f:2e:42:f1:88:84:88:2c:9f:47:ee:2a:75:1b:ef:f6:1e:94: 90:21:5a:f4:c8:40:5e:d9:92:db:fd:7a:97:da:83:ca:78:29: fe:e7:77:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht27SvK5L5jnk3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgzNFoXDTI1MDcyMzExMDgzNFowLzEtMCsGA1UEAxMk YjMzNmU0OGEtYmNkNy00OWMxLTk4ZWQtMTQ4MmNjMWU3Zjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Gs+L6Yt4eiPD5y1njQS/MuscGGQoihZggOZ wU/3E7ToWCKvWZagLbPOlUEdMnpsUoUpbi6mW8DtxJ+QOL+v4KMlUiRQ8+FV0pCa I5WaCexoQz9wvf3um6pZ5WO+avwyMeRMjbBuLLgh1fbd60DzGeBeBw09+3mtUOJW WRwoPEpJ79n6jAun5hqck5pbGkl10cOsNjfJO5my2/uc9V79sHWpd2aL4le6nk6J I+yrF4T5pTWk/iDOvbnuqjtXy/B276KxogWJYmZXeVmmq3VSm/Dgbx/QjjhmqbzV uJoTigcJ4sRUPh9le15jKYR7qYetktGLQcYybAWhDVa/QCNkjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+H2HAZr+bFWNNbtz+SsK0Ob8ijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODkyMjY5NDUtODc2NC0z N2I4LTkzY2MtMTZjNmVlYjUwNTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLsuMTxHCYeZh1LF3/0m7fQcuutQTFRTLiy02lHOhbAip7IogsHQf5l R8dS705iIu8qaYmlsIi9RHhxYpwiKV6CPHClK2AdNEggNFCMaT1fD7v1CKJo5vGZ c4kcbw9rM+nmkBNX1hZqcnf8cSCrLNfxonm+Nk2Hl/lpsMb6BvIjgdA63HvVZwCL DPxMt/Ao3sRo5Pb3uPogikOnHR+1mxhaWFmiYC/bfK1vE5yG4zZUNgZFejAQC+2O 0wvbjini+CJbBe7tpIzhX6Pf6xBdwl1bKleJgF88bI8uQvGIhIgsn0fuKnUb7/Ye lJAhWvTIQF7Zktv9epfag8p4Kf7nd64= -----END CERTIFICATE-----Generated at Sun May 11 09:42:34 2025 by rpki-client