$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ad02c044-8afb-3c4b-b5fb-82482a0d7e9b.roa File: ad02c044-8afb-3c4b-b5fb-82482a0d7e9b.roa (raw, json) Hash identifier: WaqOV+TwrbzB3v1FaL/1CBoQ4HDBGR1X5mmZvpWef8c= Subject key identifier: 5E:07:A8:65:52:C9:D3:E2:9D:3D:39:5D:41:3B:DD:9D:3C:8E:97:2E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B85B51AEF1F6D0C2955380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ad02c044-8afb-3c4b-b5fb-82482a0d7e9b.roa Signing time: Thu 24 Apr 2025 11:10:25 +0000 ROA not before: Thu 24 Apr 2025 11:10:25 +0000 ROA not after: Wed 23 Jul 2025 11:10:25 +0000 asID: 12041 IP address blocks: 65.22.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:5b:51:ae:f1:f6:d0:c2:95:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:25 2025 GMT Not After : Jul 23 11:10:25 2025 GMT Subject: CN=684ea1d9-7a4c-4e5f-9858-50125db7e9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b3:6f:cb:37:1f:9b:93:db:01:7c:aa:82:b7: 82:34:34:87:b3:a2:1e:d3:8a:73:a7:e6:ca:a1:35: 2e:bd:47:87:e3:87:ca:6e:00:9e:b6:05:74:5b:ee: 0b:a9:78:44:a3:10:54:d4:63:b4:3f:71:52:e9:17: 7d:75:07:8f:93:3f:8e:2d:24:65:ff:08:2f:33:d1: 6e:ed:1a:73:46:78:c9:bf:47:f5:b1:67:7f:1e:38: 26:1a:ac:ba:85:d9:e1:15:f4:2a:0a:a0:18:ff:81: c7:a6:6a:72:c5:a8:ce:7a:7c:86:e7:9b:74:cf:78: 43:10:8b:44:9d:86:a3:9c:a2:ac:f8:89:76:85:88: de:5b:c9:e8:9d:45:6d:f9:29:65:d6:f2:e2:3d:3e: 08:96:80:f6:c4:85:8c:90:f9:73:b0:e3:34:41:fc: 24:b3:b8:68:2a:63:7f:b1:a4:86:4b:b9:dd:e8:a6: 35:4a:3a:39:01:63:7f:09:74:fa:62:d2:49:46:c9: 9d:eb:0d:91:05:7e:72:98:ee:6d:28:6d:82:26:08: 3f:48:d8:18:91:b6:21:60:d6:c4:63:5f:f4:f8:2b: 2d:a9:39:a3:8a:56:d9:31:8f:55:60:4d:cb:87:81: 46:41:cd:a4:53:4b:0b:b7:a7:5f:2a:b0:c7:9d:cf: dd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:07:A8:65:52:C9:D3:E2:9D:3D:39:5D:41:3B:DD:9D:3C:8E:97:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ad02c044-8afb-3c4b-b5fb-82482a0d7e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4c:75:14:3d:b4:0d:95:c0:53:60:94:3f:f8:05:97:b7:5d: ba:0c:e5:73:20:9c:95:ee:b3:36:af:87:5b:35:ee:3a:b0:83: 1b:5f:74:64:e3:c3:bf:60:45:a5:95:2f:1b:9b:d2:7e:a4:26: 13:58:8f:0b:8f:d4:90:97:44:08:57:7d:29:1e:5d:17:53:9d: ba:53:61:57:a5:d4:07:17:59:cd:65:1e:4e:ee:06:f5:49:3f: 1a:cc:bc:a5:fb:a1:5b:26:0c:61:12:63:25:af:ca:95:49:73: 0d:a6:11:43:eb:c2:83:a7:41:b9:8a:89:35:5f:3e:c9:7d:aa: cb:2c:e5:25:6c:35:a8:c4:dc:ea:89:74:e3:15:94:58:77:f8: 88:53:8a:09:3f:e0:ef:3e:cc:78:9e:3b:f6:0b:af:50:80:fc: 9e:d9:ae:e2:78:aa:67:d7:b2:87:9d:32:2b:52:2d:05:2e:7e: 95:3a:c6:39:7c:3b:6a:7d:e4:e3:d6:d6:a2:79:ce:bb:59:5f: 9a:7a:c9:4f:55:fd:41:c6:fb:b4:ed:64:ef:3c:51:e0:49:e4: 99:fc:9c:28:a2:11:5a:66:70:39:b7:68:47:24:95:b5:46:82: bf:3d:30:37:ee:53:c2:a7:9d:fb:4e:42:32:e3:c5:b1:cf:51: 0a:d3:0f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuFtRrvH20MKVU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAyNVoXDTI1MDcyMzExMTAyNVowLzEtMCsGA1UEAxMk Njg0ZWExZDktN2E0Yy00ZTVmLTk4NTgtNTAxMjVkYjdlOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bNvyzcfm5PbAXyqgreCNDSHs6Ie04pzp+bK oTUuvUeH44fKbgCetgV0W+4LqXhEoxBU1GO0P3FS6Rd9dQePkz+OLSRl/wgvM9Fu 7RpzRnjJv0f1sWd/HjgmGqy6hdnhFfQqCqAY/4HHpmpyxajOenyG55t0z3hDEItE nYajnKKs+Il2hYjeW8nonUVt+Sll1vLiPT4IloD2xIWMkPlzsOM0Qfwks7hoKmN/ saSGS7nd6KY1Sjo5AWN/CXT6YtJJRsmd6w2RBX5ymO5tKG2CJgg/SNgYkbYhYNbE Y1/0+CstqTmjilbZMY9VYE3Lh4FGQc2kU0sLt6dfKrDHnc/dewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4HqGVSydPinT05XUE73Z08jpcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWQwMmMwNDQtOGFmYi0z YzRiLWI1ZmItODI0ODJhMGQ3ZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9MdRQ9tA2VwFNglD/4BZe3XboM5XMgnJXuszavh1s17jqwgxtfdGTj w79gRaWVLxub0n6kJhNYjwuP1JCXRAhXfSkeXRdTnbpTYVel1AcXWc1lHk7uBvVJ PxrMvKX7oVsmDGESYyWvypVJcw2mEUPrwoOnQbmKiTVfPsl9qsss5SVsNajE3OqJ dOMVlFh3+IhTigk/4O8+zHieO/YLr1CA/J7ZruJ4qmfXsoedMitSLQUufpU6xjl8 O2p95OPW1qJ5zrtZX5p6yU9V/UHG+7TtZO88UeBJ5Jn8nCiiEVpmcDm3aEcklbVG gr89MDfuU8KnnftOQjLjxbHPUQrTD44= -----END CERTIFICATE-----Generated at Fri May 9 06:02:03 2025 by rpki-client