$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9dd52851-7a9c-36e5-a3a2-1862c61760b6.roa File: 9dd52851-7a9c-36e5-a3a2-1862c61760b6.roa (raw, json) Hash identifier: EP9PbtAZ806xpy0jzHwBp2gklpGtMUF1OEoZqKMHOyg= Subject key identifier: 17:1D:73:8E:1D:A6:BF:01:22:B9:A4:B7:B7:9E:45:A8:92:E2:8B:55 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B801B2DA71A4754142F500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9dd52851-7a9c-36e5-a3a2-1862c61760b6.roa Signing time: Thu 24 Apr 2025 11:09:43 +0000 ROA not before: Thu 24 Apr 2025 11:09:43 +0000 ROA not after: Wed 23 Jul 2025 11:09:43 +0000 asID: 12041 IP address blocks: 65.22.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:01:b2:da:71:a4:75:41:42:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:43 2025 GMT Not After : Jul 23 11:09:43 2025 GMT Subject: CN=fb43af79-afe8-4cd8-9a84-a00067e6e705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a8:52:58:70:21:2b:84:ee:63:b7:fa:1e:2f: bd:60:a5:b2:50:d9:0d:a8:fd:10:ef:ff:4d:14:34: a1:85:45:d8:85:b2:c7:2f:d3:9f:f2:45:44:fb:bd: e5:56:4a:07:c8:d3:90:bb:c3:e3:46:75:46:49:69: 41:81:99:e2:cf:da:72:74:13:07:60:78:8c:7d:8d: 03:89:e0:4d:db:63:a3:91:8b:3e:7c:9b:81:34:a3: 00:2a:b7:57:b2:e4:95:bd:33:cf:0e:b0:65:27:8c: 4c:b0:fa:71:89:4f:c5:84:c3:26:2d:66:a7:55:de: 9b:79:5c:6b:cb:10:d8:c3:43:81:f9:2d:9f:cf:d6: 01:d8:4f:50:a5:1f:f1:b6:2e:fb:b9:0d:e7:31:b1: 07:67:1f:32:07:3e:cb:93:26:ab:de:da:de:4d:72: d4:44:55:a3:91:be:d7:e4:73:79:f9:59:eb:74:a7: ab:86:ed:cb:45:5a:76:c8:a1:f6:7f:d1:84:3a:22: 62:6d:49:6f:2d:eb:25:03:47:8a:81:2b:f3:99:dc: 64:51:3b:3d:68:b3:22:f2:86:83:e0:43:38:4d:b3: a8:a9:33:bb:57:88:c7:d8:31:e3:60:8b:0d:ae:20: 9d:c7:1e:c8:5c:53:4c:4e:24:26:8e:08:68:e5:a5: b8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1D:73:8E:1D:A6:BF:01:22:B9:A4:B7:B7:9E:45:A8:92:E2:8B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9dd52851-7a9c-36e5-a3a2-1862c61760b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:fb:f7:8b:d8:a2:5d:7b:3b:54:a5:8d:bc:35:b9:19:25:b1: 10:3f:2f:8a:2e:f8:51:48:43:71:10:16:39:88:b1:9c:ea:3c: d7:17:33:9f:98:b9:18:80:4f:95:c5:54:83:85:6e:b3:0e:5d: 6b:36:f4:4b:a9:62:eb:2c:c7:da:70:49:3e:70:f0:af:f5:a0: 8b:61:f6:09:d0:c4:7c:36:11:c4:f0:1e:ec:9e:6e:5e:04:50: 14:14:f3:bf:59:30:39:1b:6a:b1:9a:44:8b:69:09:c9:d1:bd: 1a:e0:dd:d1:e3:a2:d4:29:85:4a:b8:98:c2:cc:15:d0:12:b6: e1:3f:10:77:71:70:53:8c:43:7d:68:84:61:cc:2e:08:ff:f1: 4f:84:3f:e1:96:7a:c8:72:8b:c3:2a:80:18:0d:f1:d4:0a:5b: 95:cc:09:86:9c:eb:32:a0:45:ec:e9:a0:4e:b2:42:0c:7c:b1: ce:a1:2e:01:3d:00:ff:d0:d0:24:68:01:6c:42:db:aa:a6:47: 82:3c:71:b8:86:cd:de:a2:51:16:1e:90:9b:bf:f4:18:45:44: a0:ff:3b:0a:2c:0a:34:5c:83:6f:02:47:9b:3f:82:d2:67:9a: fb:78:1e:c8:f5:c3:d3:70:1f:eb:70:ab:10:94:b0:52:c0:81: 6c:41:de:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuAGy2nGkdUFC9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDk0M1oXDTI1MDcyMzExMDk0M1owLzEtMCsGA1UEAxMk ZmI0M2FmNzktYWZlOC00Y2Q4LTlhODQtYTAwMDY3ZTZlNzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhahSWHAhK4TuY7f6Hi+9YKWyUNkNqP0Q7/9N FDShhUXYhbLHL9Of8kVE+73lVkoHyNOQu8PjRnVGSWlBgZniz9pydBMHYHiMfY0D ieBN22OjkYs+fJuBNKMAKrdXsuSVvTPPDrBlJ4xMsPpxiU/FhMMmLWanVd6beVxr yxDYw0OB+S2fz9YB2E9QpR/xti77uQ3nMbEHZx8yBz7Lkyar3treTXLURFWjkb7X 5HN5+VnrdKerhu3LRVp2yKH2f9GEOiJibUlvLeslA0eKgSvzmdxkUTs9aLMi8oaD 4EM4TbOoqTO7V4jH2DHjYIsNriCdxx7IXFNMTiQmjgho5aW4oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcdc44dpr8BIrmkt7eeRaiS4otVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWRkNTI4NTEtN2E5Yy0z NmU1LWEzYTItMTg2MmM2MTc2MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL794vYol17O1Sljbw1uRklsRA/L4ou+FFIQ3EQFjmIsZzqPNcXM5+Y uRiAT5XFVIOFbrMOXWs29EupYussx9pwST5w8K/1oIth9gnQxHw2EcTwHuyebl4E UBQU879ZMDkbarGaRItpCcnRvRrg3dHjotQphUq4mMLMFdAStuE/EHdxcFOMQ31o hGHMLgj/8U+EP+GWeshyi8MqgBgN8dQKW5XMCYac6zKgRezpoE6yQgx8sc6hLgE9 AP/Q0CRoAWxC26qmR4I8cbiGzd6iURYekJu/9BhFRKD/OwosCjRcg28CR5s/gtJn mvt4Hsj1w9NwH+twqxCUsFLAgWxB3oU= -----END CERTIFICATE-----Generated at Sat May 10 11:41:27 2025 by rpki-client