$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa File: aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa (raw, json) Hash identifier: kZa3/PthtPK9uSbI1bCp38Jf/fx/JuNIMgNwQ76/Sic= Subject key identifier: 1A:B1:2D:03:98:E4:A5:EA:6B:44:FC:F6:FB:E7:CD:A0:1D:4E:FF:24 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B79071A5FC1D40002D4B40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa Signing time: Thu 24 Apr 2025 11:08:50 +0000 ROA not before: Thu 24 Apr 2025 11:08:50 +0000 ROA not after: Wed 23 Jul 2025 11:08:50 +0000 asID: 12041 IP address blocks: 65.22.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:90:71:a5:fc:1d:40:00:2d:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:50 2025 GMT Not After : Jul 23 11:08:50 2025 GMT Subject: CN=41b2b6a2-6620-4370-b5ac-2a8818e3f90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:01:40:18:6f:66:19:2d:83:6a:27:62:1e:72: 1d:87:b5:b5:71:f9:ee:16:c1:d0:49:77:89:bf:4c: 88:0c:4b:c2:04:fc:a1:25:e6:19:86:fd:47:32:d8: 3e:0b:40:29:ce:a3:c4:c7:0d:9d:5b:9d:b8:da:6d: 93:5a:f7:d8:c1:24:8c:db:71:a5:bd:fd:27:ae:71: 7a:07:a0:a5:b4:be:6a:f5:92:c4:95:75:3f:8f:c7: 80:4d:30:80:54:3c:3a:72:8f:05:8b:e7:f8:da:f4: aa:19:6e:08:45:96:c7:cb:e2:10:63:39:51:06:95: 68:7b:2f:70:7b:c5:bf:b5:b1:21:fc:81:3d:b1:f6: 34:73:93:25:0f:fd:83:bd:26:53:6c:a0:af:80:42: 51:5d:b6:30:d0:96:df:96:4d:2e:e6:67:ac:21:94: ae:a3:af:b9:34:08:b0:db:c2:3f:2d:99:5d:05:8c: 4b:6b:9c:69:ad:e9:89:0b:3d:d0:ba:af:23:5c:9c: ea:38:df:1b:0f:f0:4f:29:8a:a2:cd:33:32:64:55: f2:c1:86:29:b4:c2:2f:55:d3:b5:34:7d:03:f1:9c: 5e:49:1d:13:3c:13:45:d7:36:93:43:b3:d6:87:be: 68:6c:58:76:24:55:49:ba:5c:ea:76:5d:c4:bb:98: 11:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:2D:03:98:E4:A5:EA:6B:44:FC:F6:FB:E7:CD:A0:1D:4E:FF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:22:e1:3c:96:1d:91:b0:1b:86:a0:61:a3:c4:c6:a1:59:94: 3b:03:23:64:5c:b4:8c:92:8f:84:92:3f:12:da:1e:bc:87:c0: ef:11:17:e3:2f:b5:ec:f7:47:f5:1d:bc:50:bd:f8:09:9c:8b: 9c:76:7b:30:40:5c:cd:c3:7f:5f:71:8b:d2:cb:c0:0f:06:53: b8:2a:a2:11:90:4f:fd:58:a3:2b:79:72:a6:8b:9f:e1:d6:a1: 52:c1:86:6a:d2:f0:4f:d8:b1:11:ce:b6:b6:23:b6:f7:26:08: 65:6e:b1:78:0a:1c:9c:fe:95:3a:05:5a:5c:a6:60:7c:1d:1a: 82:97:32:f7:41:41:a9:16:35:e3:92:4b:c6:02:22:6f:07:81: 8d:87:82:06:29:93:be:30:7e:43:99:51:67:82:05:05:8a:fa: 77:0f:ab:71:a2:d1:37:7f:76:28:d1:b4:07:30:75:6a:63:71: a3:0e:ca:bc:a5:07:e0:8c:b9:0f:cd:fc:96:c4:8e:e5:02:d4: c8:63:60:16:23:84:88:0b:53:5f:ed:5a:1d:fb:a5:17:44:a5: 5c:99:9b:2c:26:39:b3:74:c5:23:a8:1d:e8:ce:38:b9:89:29: 87:36:cc:9c:f0:94:e2:33:5d:5b:f1:a1:48:0a:76:b5:db:d8: 62:25:86:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht5BxpfwdQAAtS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1MFoXDTI1MDcyMzExMDg1MFowLzEtMCsGA1UEAxMk NDFiMmI2YTItNjYyMC00MzcwLWI1YWMtMmE4ODE4ZTNmOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQFAGG9mGS2DaidiHnIdh7W1cfnuFsHQSXeJ v0yIDEvCBPyhJeYZhv1HMtg+C0ApzqPExw2dW5242m2TWvfYwSSM23Glvf0nrnF6 B6CltL5q9ZLElXU/j8eATTCAVDw6co8Fi+f42vSqGW4IRZbHy+IQYzlRBpVoey9w e8W/tbEh/IE9sfY0c5MlD/2DvSZTbKCvgEJRXbYw0Jbflk0u5mesIZSuo6+5NAiw 28I/LZldBYxLa5xpremJCz3Quq8jXJzqON8bD/BPKYqizTMyZFXywYYptMIvVdO1 NH0D8ZxeSR0TPBNF1zaTQ7PWh75obFh2JFVJulzqdl3Eu5gR1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqxLQOY5KXqa0T89vvnzaAdTv8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWEzNmQ0ZmEtZGU5YS0z Njg3LWE2ZDgtNmE1NjQyOGJhNTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4i4TyWHZGwG4agYaPExqFZlDsDI2RctIySj4SSPxLaHryHwO8RF+Mv tez3R/UdvFC9+Amci5x2ezBAXM3Df19xi9LLwA8GU7gqohGQT/1Yoyt5cqaLn+HW oVLBhmrS8E/YsRHOtrYjtvcmCGVusXgKHJz+lToFWlymYHwdGoKXMvdBQakWNeOS S8YCIm8HgY2HggYpk74wfkOZUWeCBQWK+ncPq3Gi0Td/dijRtAcwdWpjcaMOyryl B+CMuQ/N/JbEjuUC1MhjYBYjhIgLU1/tWh37pRdEpVyZmywmObN0xSOoHejOOLmJ KYc2zJzwlOIzXVvxoUgKdrXb2GIlhiw= -----END CERTIFICATE-----Generated at Mon Jun 30 02:27:20 2025 by rpki-client