$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b3c80276-53c6-3f4e-8c21-8ef290fd0431.roa File: b3c80276-53c6-3f4e-8c21-8ef290fd0431.roa (raw, json) Hash identifier: LLTBUh+yiaT9mMH7tP/72U66PqjdfT08Pp7ic+zjUgA= Subject key identifier: D3:37:63:7C:46:08:F7:EA:21:0F:BA:93:A3:FE:09:36:66:D2:22:9E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7436AB995778CD2C601A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b3c80276-53c6-3f4e-8c21-8ef290fd0431.roa Signing time: Thu 24 Apr 2025 11:08:13 +0000 ROA not before: Thu 24 Apr 2025 11:08:13 +0000 ROA not after: Wed 23 Jul 2025 11:08:13 +0000 asID: 12041 IP address blocks: 65.22.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:43:6a:b9:95:77:8c:d2:c6:01:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:13 2025 GMT Not After : Jul 23 11:08:13 2025 GMT Subject: CN=99193efe-da14-4fe6-8816-3cc2083ac351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:c5:e6:fb:95:d7:bb:8a:4e:dc:68:4a:25: 19:3e:9f:e0:99:09:da:fd:3e:ec:24:fd:d1:fa:be: 6d:4b:19:24:20:49:5d:d3:62:c8:cb:29:b4:56:b2: 85:8d:5a:45:2a:a0:cc:e9:77:23:b9:12:32:01:d5: fd:fc:10:9d:cf:24:ef:6f:e2:4a:41:34:bc:9d:16: a3:82:1e:72:a8:05:02:0f:f6:d5:2e:7b:52:f7:c6: 51:bb:a9:3a:ca:07:e2:db:0f:65:6f:83:d9:56:f9: 14:f1:98:3c:ca:c8:5d:8c:3f:e7:e9:4b:f0:e1:d0: c5:9d:06:91:54:96:8c:a7:be:c5:0b:7a:66:67:7a: 7e:20:f0:35:db:05:1b:7e:29:26:05:07:60:fe:77: ec:f9:35:7c:c6:93:a4:1a:f8:bb:7a:4b:46:a2:f0: 20:57:98:27:18:61:6c:2e:94:2d:6f:9a:8d:3f:a7: 04:72:8b:c0:d0:78:6a:42:5f:70:d0:bf:1c:0f:a4: ac:43:90:38:1d:77:ba:40:34:34:43:d6:7f:d8:fa: f1:6c:16:73:e0:b0:d3:32:e5:f9:58:54:1b:37:01: d6:71:9a:85:90:d7:2e:b4:7b:71:ea:5b:99:de:68: a1:dc:ba:0f:46:5e:4d:87:28:24:0a:2f:a6:df:40: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:63:7C:46:08:F7:EA:21:0F:BA:93:A3:FE:09:36:66:D2:22:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b3c80276-53c6-3f4e-8c21-8ef290fd0431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:89:9a:2f:9d:6b:f5:f8:99:9e:0f:be:49:1c:0e:37:85:77: 1f:a7:45:6c:4d:08:23:b1:8c:01:08:9f:3f:28:24:0f:b6:a5: 6a:bb:0e:a4:ac:e8:8e:d0:e3:5f:e6:b1:d3:91:b0:16:34:1d: de:06:1c:80:cf:8e:9a:cc:21:cb:0d:8c:63:e4:d5:a9:c5:c0: be:46:9c:ee:4a:fd:1c:13:7a:85:73:3c:36:d8:de:d6:96:0d: 53:2d:87:8b:f0:4b:f7:a5:35:2a:38:1d:5d:2f:71:59:36:22: 06:43:d3:b1:81:b2:1b:f7:1e:74:c3:fa:bb:1f:c1:89:7b:ed: aa:d9:b4:d3:bf:0b:2a:3d:5d:80:68:63:9b:d4:83:0e:31:cd: 8a:00:68:fa:a8:bc:b1:c2:1a:1e:8d:84:ca:9c:1f:48:c2:8d: 56:b7:88:97:42:54:cb:8d:fa:34:ce:76:46:0c:13:97:1b:8c: 85:18:57:0f:3b:1d:2b:c9:f4:e4:12:29:dd:ab:ca:83:e0:10: a3:3e:c9:ec:09:c6:1e:1c:8c:cc:22:98:1f:e3:1f:aa:97:db: 13:9f:86:97:e2:49:46:a6:0e:9f:ef:8d:f4:47:03:0e:20:80: b6:8f:c1:ee:ca:f6:e5:b7:2d:28:4b:10:af:47:e7:43:96:7e: 25:d1:96:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht0NquZV3jNLGAaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgxM1oXDTI1MDcyMzExMDgxM1owLzEtMCsGA1UEAxMk OTkxOTNlZmUtZGExNC00ZmU2LTg4MTYtM2NjMjA4M2FjMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiarF5vuV17uKTtxoSiUZPp/gmQna/T7sJP3R +r5tSxkkIEld02LIyym0VrKFjVpFKqDM6XcjuRIyAdX9/BCdzyTvb+JKQTS8nRaj gh5yqAUCD/bVLntS98ZRu6k6ygfi2w9lb4PZVvkU8Zg8yshdjD/n6Uvw4dDFnQaR VJaMp77FC3pmZ3p+IPA12wUbfikmBQdg/nfs+TV8xpOkGvi7ektGovAgV5gnGGFs LpQtb5qNP6cEcovA0HhqQl9w0L8cD6SsQ5A4HXe6QDQ0Q9Z/2PrxbBZz4LDTMuX5 WFQbNwHWcZqFkNcutHtx6luZ3mih3LoPRl5NhygkCi+m30B6CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM3Y3xGCPfqIQ+6k6P+CTZm0iKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjNjODAyNzYtNTNjNi0z ZjRlLThjMjEtOGVmMjkwZmQwNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKJmi+da/X4mZ4PvkkcDjeFdx+nRWxNCCOxjAEInz8oJA+2pWq7DqSs 6I7Q41/msdORsBY0Hd4GHIDPjprMIcsNjGPk1anFwL5GnO5K/RwTeoVzPDbY3taW DVMth4vwS/elNSo4HV0vcVk2IgZD07GBshv3HnTD+rsfwYl77arZtNO/Cyo9XYBo Y5vUgw4xzYoAaPqovLHCGh6NhMqcH0jCjVa3iJdCVMuN+jTOdkYME5cbjIUYVw87 HSvJ9OQSKd2ryoPgEKM+yewJxh4cjMwimB/jH6qX2xOfhpfiSUamDp/vjfRHAw4g gLaPwe7K9uW3LShLEK9H50OWfiXRlsU= -----END CERTIFICATE-----Generated at Fri May 9 05:06:42 2025 by rpki-client