$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d94db6b-9114-3c5c-a18c-1f76ebac0d83.roa File: 8d94db6b-9114-3c5c-a18c-1f76ebac0d83.roa (raw, json) Hash identifier: CV0BbBnFGCleCUs+nCp/bpDy78EN8KaLANCIkwbezPw= Subject key identifier: 9B:95:6B:EC:17:08:27:F8:F4:54:7D:20:D7:78:C5:9C:06:87:56:AF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B86502DAF40E0DB38A67C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d94db6b-9114-3c5c-a18c-1f76ebac0d83.roa Signing time: Thu 24 Apr 2025 11:10:30 +0000 ROA not before: Thu 24 Apr 2025 11:10:30 +0000 ROA not after: Wed 23 Jul 2025 11:10:30 +0000 asID: 12041 IP address blocks: 65.22.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:65:02:da:f4:0e:0d:b3:8a:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:30 2025 GMT Not After : Jul 23 11:10:30 2025 GMT Subject: CN=bf7356a0-4aa7-40aa-8e96-a617269db900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:1b:f1:69:c5:78:25:ea:22:0f:0c:40:67: e3:9c:e5:b2:fc:a9:08:a8:2f:2a:2f:0a:09:2f:bc: 67:ec:4e:f2:06:c6:7d:92:54:c7:b0:a9:67:27:df: f8:f7:a3:39:30:cf:6c:62:c4:2d:35:79:29:cf:d0: a7:ec:ff:60:b6:31:d3:54:82:cd:41:e2:26:9d:33: cb:7f:21:e7:3c:19:ab:5e:e0:9a:17:e1:ca:79:87: 4e:a8:33:b7:b9:97:cc:99:74:f6:78:a5:69:96:b6: 0b:f9:cc:38:fb:9d:5a:e2:9e:59:38:70:11:38:fd: 5b:0d:e5:ff:8e:ef:93:31:9c:02:20:10:f4:e8:c2: 49:6d:da:6d:9c:4a:f4:67:98:01:6e:5f:cb:72:84: c0:c2:00:3c:5f:ed:bd:6c:30:ef:c7:af:ac:db:78: f7:53:56:42:a3:67:ff:af:9a:29:76:f9:26:b2:29: 08:a2:81:8a:56:9a:f0:dc:f0:cc:ee:46:dc:32:46: ae:16:db:21:5b:52:2e:bc:80:10:23:14:fd:bc:5b: 24:79:e5:40:cb:21:66:07:6f:66:3b:d4:01:e7:66: ee:60:c4:3c:0a:72:f9:e0:79:b9:31:15:7c:25:81: 7f:5b:91:7a:bb:98:0e:75:d2:71:56:7f:f2:dc:60: 72:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:95:6B:EC:17:08:27:F8:F4:54:7D:20:D7:78:C5:9C:06:87:56:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d94db6b-9114-3c5c-a18c-1f76ebac0d83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3f:e2:ab:96:66:ad:33:aa:5b:26:85:dd:eb:ae:32:f3:72: 0a:f8:33:af:47:ab:82:a1:bd:a4:74:53:81:32:65:d2:ea:f4: 3c:39:21:6c:d6:30:7b:34:7a:ea:a2:38:eb:b2:8c:fb:91:eb: a2:35:a5:4a:3f:75:9c:48:4c:76:a8:2f:05:05:ea:38:ef:05: 3a:ff:1a:9b:35:64:bb:68:54:04:e1:e6:39:b5:95:c0:73:81: 35:1a:b4:2c:8c:21:0c:b7:e3:51:f8:81:41:84:37:da:9e:62: b8:06:37:fe:8f:37:a0:37:96:db:b8:3a:1c:e7:e6:8f:e0:2a: 5c:a0:af:eb:35:df:2f:49:d3:26:bb:57:11:c8:9b:72:60:7a: cb:3d:7d:94:73:ec:56:65:ee:81:58:03:27:9c:37:59:05:48: 98:a1:c4:ae:f1:f8:85:4e:28:6c:1e:c7:04:89:ec:d6:bb:de: 7b:d9:33:48:a8:08:db:b6:92:fc:24:69:e8:40:83:13:53:dd: 80:17:e2:a2:54:52:85:87:e3:60:7c:34:f7:52:a6:8d:6c:f1: f6:bf:7c:08:ad:6a:8b:9a:30:24:59:07:84:08:a2:0e:a5:6c: 70:eb:ec:bb:ed:80:2f:12:9a:24:03:6d:76:10:c6:69:1d:28: 5e:8a:98:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuGUC2vQODbOKZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAzMFoXDTI1MDcyMzExMTAzMFowLzEtMCsGA1UEAxMk YmY3MzU2YTAtNGFhNy00MGFhLThlOTYtYTYxNzI2OWRiOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKQb8WnFeCXqIg8MQGfjnOWy/KkIqC8qLwoJ L7xn7E7yBsZ9klTHsKlnJ9/496M5MM9sYsQtNXkpz9Cn7P9gtjHTVILNQeImnTPL fyHnPBmrXuCaF+HKeYdOqDO3uZfMmXT2eKVplrYL+cw4+51a4p5ZOHAROP1bDeX/ ju+TMZwCIBD06MJJbdptnEr0Z5gBbl/LcoTAwgA8X+29bDDvx6+s23j3U1ZCo2f/ r5opdvkmsikIooGKVprw3PDM7kbcMkauFtshW1IuvIAQIxT9vFskeeVAyyFmB29m O9QB52buYMQ8CnL54Hm5MRV8JYF/W5F6u5gOddJxVn/y3GByLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuVa+wXCCf49FR9INd4xZwGh1avMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGQ5NGRiNmItOTExNC0z YzVjLWExOGMtMWY3NmViYWMwZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM/4quWZq0zqlsmhd3rrjLzcgr4M69Hq4KhvaR0U4EyZdLq9Dw5IWzW MHs0euqiOOuyjPuR66I1pUo/dZxITHaoLwUF6jjvBTr/Gps1ZLtoVATh5jm1lcBz gTUatCyMIQy341H4gUGEN9qeYrgGN/6PN6A3ltu4Ohzn5o/gKlygr+s13y9J0ya7 VxHIm3Jgess9fZRz7FZl7oFYAyecN1kFSJihxK7x+IVOKGwexwSJ7Na73nvZM0io CNu2kvwkaehAgxNT3YAX4qJUUoWH42B8NPdSpo1s8fa/fAitaouaMCRZB4QIog6l bHDr7LvtgC8SmiQDbXYQxmkdKF6KmBk= -----END CERTIFICATE-----Generated at Thu May 8 21:05:52 2025 by rpki-client