$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa File: a32b982b-80c0-30f4-9738-db8d8a2a0644.roa (raw, json) Hash identifier: sQf0CozMGbQtrZqt4HC8ymQqHVWfita2uWmR5OtH7ww= Subject key identifier: AC:B8:4E:84:62:70:27:B5:5F:EC:1C:3C:D1:6E:CA:5B:B7:2D:44:7E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7D3CE730162B936264F40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa Signing time: Thu 24 Apr 2025 11:09:22 +0000 ROA not before: Thu 24 Apr 2025 11:09:22 +0000 ROA not after: Wed 23 Jul 2025 11:09:22 +0000 asID: 12041 IP address blocks: 65.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:d3:ce:73:01:62:b9:36:26:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:22 2025 GMT Not After : Jul 23 11:09:22 2025 GMT Subject: CN=4fe4ce11-0038-4dc3-8a56-23e383929abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:a6:6b:50:74:68:70:dc:b4:1c:24:cb:d9: de:06:e5:39:0a:38:77:0f:95:9f:cb:8d:d9:01:85: 4a:63:ee:3c:35:0c:16:ef:76:23:1f:b2:39:93:52: b5:b8:72:14:ff:7e:48:c4:57:e4:6a:6a:be:e7:a0: 64:cd:13:14:77:28:db:e3:b0:ba:e5:e0:4c:a7:e3: 59:66:49:aa:5f:00:f7:3b:22:d5:93:db:7a:c1:0e: ae:53:2c:03:c0:d5:15:3c:2a:c7:c7:f6:6c:a8:b4: bd:44:52:0f:aa:1b:5b:c2:91:bf:70:95:35:77:56: 52:ed:fb:72:a9:04:ad:da:11:ac:ad:cf:b7:8a:9c: 64:e4:44:cf:c3:06:8f:a5:33:8e:fe:c3:68:65:e5: 8b:d7:e5:5a:f6:df:e1:c6:2d:2d:10:d4:89:1c:5b: 3c:c4:d4:c8:24:4c:2c:5d:6b:77:e2:72:92:de:fe: 40:64:6e:c1:d0:c6:2e:ad:44:b5:b1:11:45:b8:1b: 21:67:43:c3:80:f6:80:5d:07:d4:b9:92:3f:dc:b0: bf:db:56:c4:23:de:58:d5:06:dc:4a:39:b8:da:e8: f7:a3:85:c1:c6:ba:d2:46:aa:cd:9b:e7:ba:4c:4f: a3:2f:a2:de:6e:69:48:ac:89:02:0d:32:58:a5:22: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B8:4E:84:62:70:27:B5:5F:EC:1C:3C:D1:6E:CA:5B:B7:2D:44:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5b:24:88:21:34:7a:eb:c9:85:36:a7:82:95:aa:82:69:7b: 4a:78:5d:5f:5c:63:28:a4:d5:db:4a:c2:bb:bf:26:e5:3d:2d: 90:d7:f6:6a:f9:cf:2a:80:19:d1:57:c3:e9:ce:c6:9e:e8:9b: 33:fb:00:66:15:e5:ce:8e:f7:d5:e0:cd:f3:62:b3:71:04:4f: 4f:12:ee:2b:35:f0:f1:ff:2c:a1:ef:64:9b:ca:77:28:dc:36: 23:79:d0:dc:55:88:cd:d1:d1:18:a3:23:16:68:a1:d5:ee:5c: fe:3b:2a:0b:c0:b8:63:fd:75:0b:d6:8f:21:59:a8:a2:a2:8b: b7:ef:cd:21:13:08:6a:68:db:55:fd:26:85:a9:2d:89:bd:53: 4a:ed:f3:0f:25:9d:41:54:ef:a7:a7:45:3c:9f:eb:ea:70:aa: 2c:43:ce:46:7c:c6:9c:7d:84:59:4b:b0:70:c9:46:83:f3:95: 8b:e5:74:3b:59:ea:06:ef:b0:b6:cc:31:aa:35:db:a7:84:db: 34:33:c7:d0:b0:03:e6:db:9e:be:12:be:a4:96:5c:69:eb:c4: 91:41:4e:37:18:74:a8:09:65:95:de:ed:2b:9b:7d:7e:95:dc: ef:f0:72:5c:a3:a9:9d:3c:b7:43:ee:c6:3b:fa:ce:ad:69:42: 86:1f:80:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht9POcwFiuTYmT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyMloXDTI1MDcyMzExMDkyMlowLzEtMCsGA1UEAxMk NGZlNGNlMTEtMDAzOC00ZGMzLThhNTYtMjNlMzgzOTI5YWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqmma1B0aHDctBwky9neBuU5Cjh3D5Wfy43Z AYVKY+48NQwW73YjH7I5k1K1uHIU/35IxFfkamq+56BkzRMUdyjb47C65eBMp+NZ ZkmqXwD3OyLVk9t6wQ6uUywDwNUVPCrHx/ZsqLS9RFIPqhtbwpG/cJU1d1ZS7fty qQSt2hGsrc+3ipxk5ETPwwaPpTOO/sNoZeWL1+Va9t/hxi0tENSJHFs8xNTIJEws XWt34nKS3v5AZG7B0MYurUS1sRFFuBshZ0PDgPaAXQfUuZI/3LC/21bEI95Y1Qbc Sjm42uj3o4XBxrrSRqrNm+e6TE+jL6LebmlIrIkCDTJYpSJInQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy4ToRicCe1X+wcPNFuylu3LUR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTMyYjk4MmItODBjMC0z MGY0LTk3MzgtZGI4ZDhhMmEwNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJbJIghNHrryYU2p4KVqoJpe0p4XV9cYyik1dtKwru/JuU9LZDX9mr5 zyqAGdFXw+nOxp7omzP7AGYV5c6O99XgzfNis3EET08S7is18PH/LKHvZJvKdyjc NiN50NxViM3R0RijIxZoodXuXP47KgvAuGP9dQvWjyFZqKKii7fvzSETCGpo21X9 JoWpLYm9U0rt8w8lnUFU76enRTyf6+pwqixDzkZ8xpx9hFlLsHDJRoPzlYvldDtZ 6gbvsLbMMao126eE2zQzx9CwA+bbnr4SvqSWXGnrxJFBTjcYdKgJZZXe7SubfX6V 3O/wclyjqZ08t0Puxjv6zq1pQoYfgFU= -----END CERTIFICATE-----Generated at Thu May 8 13:10:36 2025 by rpki-client