$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa File: a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa (raw, json) Hash identifier: V+oCk0Hos//MbTG5ztYkmeKT09v26fJOPutM0DZpkZw= Subject key identifier: 96:67:31:90:B8:FD:A9:E8:C4:97:F6:F6:60:8A:96:DC:5D:0E:73:CC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B431D8CEC9C6529F2E5D80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa Signing time: Thu 24 Apr 2025 11:02:02 +0000 ROA not before: Thu 24 Apr 2025 11:02:02 +0000 ROA not after: Wed 23 Jul 2025 11:02:02 +0000 asID: 12041 IP address blocks: 65.22.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:31:d8:ce:c9:c6:52:9f:2e:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:02:02 2025 GMT Not After : Jul 23 11:02:02 2025 GMT Subject: CN=75751227-9eb9-4a2f-a8c5-6b367f56ed7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fe:ce:a0:c4:1b:8c:53:40:d9:cb:f7:fe:fa: 08:37:1b:fb:f7:ed:fc:a4:fd:f6:0b:35:de:0c:a8: 68:4b:73:4e:93:ed:9e:6f:0e:fb:b5:29:3d:f3:4c: f6:25:f5:4b:4f:c8:0b:46:4c:1a:20:b6:d2:c6:67: ea:18:94:1a:92:f8:de:1a:9d:d0:67:f5:09:27:65: eb:f2:98:5b:b3:0c:5f:f1:db:ba:bf:57:90:7b:9e: 6d:5d:51:55:48:b6:2d:1a:f4:92:30:a1:54:5b:4c: 3b:e1:30:23:5a:14:70:ca:10:fa:dc:ba:93:ff:ff: e7:43:6e:9b:0f:5d:eb:fe:21:d9:40:ae:19:95:0b: 3c:c5:60:42:01:57:8a:59:e8:fd:75:a4:c7:53:01: ac:3c:54:21:85:ae:c8:2d:de:c4:20:b9:bc:e8:32: 5f:22:dd:66:51:b7:44:42:5c:c8:74:9b:c2:2b:ff: d8:dd:b6:53:8a:92:7d:a3:45:d6:00:00:bb:b0:4d: c1:a4:57:eb:80:79:1c:b4:8f:8b:40:d0:b4:96:50: 98:dc:1b:8f:7b:a4:48:f6:93:c7:8c:3e:49:a5:9c: eb:c2:8a:df:3d:ea:c7:4b:ed:8b:f4:f3:d5:65:1d: ce:5d:1c:55:75:99:d3:3f:06:34:2f:60:b3:7a:c0: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:67:31:90:B8:FD:A9:E8:C4:97:F6:F6:60:8A:96:DC:5D:0E:73:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c6:fc:eb:fd:73:c0:c2:b1:a8:91:69:4f:bb:e8:3b:9b:7f: 0d:58:84:f2:92:ea:9b:b8:71:a0:ee:95:29:ac:b7:b9:1f:73: df:d1:f1:93:59:14:e0:5d:68:43:fc:32:b7:b4:9f:de:23:82: 45:95:6c:40:ca:33:c9:d6:a3:c2:ce:be:e0:53:bc:03:31:4e: e4:fe:b3:26:6f:51:45:cb:92:92:25:0d:23:27:47:d6:0e:da: 41:6f:73:51:59:15:a8:84:97:4a:78:bb:c8:cb:c3:5b:8c:f2: 30:29:fc:0d:b0:54:a2:76:70:19:03:2f:b3:67:88:3e:ff:2b: 2e:8f:d6:75:9d:e7:a8:84:98:1e:bb:57:5c:48:43:31:e1:e1: 8b:10:db:22:49:c4:8a:38:d3:0a:f6:57:80:f3:b8:fe:e6:74: f5:5a:af:35:e4:94:98:d2:d8:42:75:de:8d:4d:ac:65:55:16: cd:10:a4:3f:5d:2d:71:f7:bd:9a:be:0e:36:6c:a8:89:55:e4: 4e:5b:1f:ae:22:f3:b2:1a:26:3a:3d:71:d7:c7:03:6f:2c:18: 40:24:85:5d:71:2c:ab:a6:ea:39:ef:ba:67:ca:65:fa:4f:bf: d4:6a:22:d0:b4:4a:91:83:fb:de:8c:a2:bf:4f:2e:24:35:8b: 0e:22:9f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtDHYzsnGUp8uXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDIwMloXDTI1MDcyMzExMDIwMlowLzEtMCsGA1UEAxMk NzU3NTEyMjctOWViOS00YTJmLWE4YzUtNmIzNjdmNTZlZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/7OoMQbjFNA2cv3/voINxv79+38pP32CzXe DKhoS3NOk+2ebw77tSk980z2JfVLT8gLRkwaILbSxmfqGJQakvjeGp3QZ/UJJ2Xr 8phbswxf8du6v1eQe55tXVFVSLYtGvSSMKFUW0w74TAjWhRwyhD63LqT///nQ26b D13r/iHZQK4ZlQs8xWBCAVeKWej9daTHUwGsPFQhha7ILd7EILm86DJfIt1mUbdE QlzIdJvCK//Y3bZTipJ9o0XWAAC7sE3BpFfrgHkctI+LQNC0llCY3BuPe6RI9pPH jD5JpZzrworfPerHS+2L9PPVZR3OXRxVdZnTPwY0L2CzesAMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZnMZC4/anoxJf29mCKltxdDnPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTZjYTdjN2YtNTMxZS0z ZTdlLThiMWUtYzkxYTUxMGJlNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrG/Ov9c8DCsaiRaU+76Dubfw1YhPKS6pu4caDulSmst7kfc9/R8ZNZ FOBdaEP8Mre0n94jgkWVbEDKM8nWo8LOvuBTvAMxTuT+syZvUUXLkpIlDSMnR9YO 2kFvc1FZFaiEl0p4u8jLw1uM8jAp/A2wVKJ2cBkDL7NniD7/Ky6P1nWd56iEmB67 V1xIQzHh4YsQ2yJJxIo40wr2V4DzuP7mdPVarzXklJjS2EJ13o1NrGVVFs0QpD9d LXH3vZq+DjZsqIlV5E5bH64i87IaJjo9cdfHA28sGEAkhV1xLKum6jnvumfKZfpP v9RqItC0SpGD+96Mor9PLiQ1iw4in3A= -----END CERTIFICATE-----Generated at Thu May 8 16:09:52 2025 by rpki-client