$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa File: d1ac60c5-9597-3dc6-96f9-a339051715df.roa (raw, json) Hash identifier: NnLjEMO3Z1gkc+sg4eXg0yiufQwAn93XS/XVENA12nw= Subject key identifier: CF:CC:CD:BC:F5:DE:E2:80:EB:7F:B9:3E:8E:F1:E7:4C:06:6D:16:12 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B4392E9DF8D2043CF19860 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa Signing time: Thu 24 Apr 2025 11:02:06 +0000 ROA not before: Thu 24 Apr 2025 11:02:06 +0000 ROA not after: Wed 23 Jul 2025 11:02:06 +0000 asID: 12041 IP address blocks: 65.22.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:39:2e:9d:f8:d2:04:3c:f1:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:02:06 2025 GMT Not After : Jul 23 11:02:06 2025 GMT Subject: CN=9353efa3-38d8-4894-93cd-e04f9078ac2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d3:41:46:f4:85:f9:ea:e8:9f:e4:6d:20:49: 7c:29:b3:0a:0d:79:33:18:15:0b:8a:a2:46:15:75: 2e:62:6f:53:8e:cf:51:7f:9c:b9:25:51:e1:1c:04: 3b:cc:8d:89:b3:34:b7:4f:59:b9:00:4c:d0:65:9b: d7:9f:be:22:39:cb:57:63:8a:e1:82:b1:03:e5:75: 3a:d6:60:bc:fa:fc:c3:f0:d4:ba:f2:6f:5a:6e:0b: ed:bf:e6:84:58:76:96:ee:9d:b3:57:4d:cd:7a:d3: 31:55:f6:38:05:4c:85:2f:58:48:0b:3b:fb:72:5a: fd:a6:0b:66:f2:0c:fc:61:b7:cb:6c:ad:9a:19:9a: 3f:18:0e:94:33:57:75:51:a8:e5:eb:0d:a5:b9:b7: 2d:64:30:02:4a:48:49:cf:a3:95:c2:84:20:51:c9: 31:53:09:29:2b:ef:1a:4b:00:c1:2d:e1:34:33:02: de:70:02:1b:a9:4a:4e:18:61:f6:b0:7c:03:99:28: 65:87:a8:c1:37:78:f1:83:f5:4f:cf:8a:51:45:df: 07:e8:6f:c2:57:1b:05:ab:b7:6e:26:18:52:0e:d3: 94:a3:eb:d6:ef:dc:f6:a8:e8:12:76:11:5b:f7:44: 14:a1:a5:93:42:18:72:d7:90:87:55:1b:cc:de:0d: 61:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CC:CD:BC:F5:DE:E2:80:EB:7F:B9:3E:8E:F1:E7:4C:06:6D:16:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f2:47:e9:83:74:c0:40:13:3e:2f:ab:9d:34:05:19:0e:16: 5c:4b:39:9e:ca:a8:8d:72:04:9a:00:91:82:19:eb:1d:a9:01: 7d:0e:63:f1:45:e4:d2:32:20:0e:77:48:15:d4:42:38:11:2b: c8:2d:83:52:e9:bd:5c:e2:2c:a1:8a:a5:b3:33:c7:97:ef:20: c0:a3:ef:05:14:52:6c:ca:79:39:ce:d5:28:ca:94:bf:9f:33: 9b:1c:0a:74:b9:d8:49:ca:c5:45:fd:e3:ac:3d:7b:a2:10:ae: 9c:ca:30:9c:23:77:ad:47:27:54:63:48:50:4b:57:e5:7c:88: ba:2e:34:3d:de:f6:40:8f:c7:21:3e:58:1f:36:14:9c:28:fe: 9e:fe:39:0d:8b:3e:df:ca:d5:6a:58:7d:b2:a2:d6:98:82:a3: 7d:9d:a5:1a:8b:c7:00:dc:b8:d9:e8:33:d3:3a:0c:a0:80:85: 90:b3:fb:95:5c:2a:8f:94:22:a6:a4:9d:7a:02:1d:a9:44:c0: c6:84:9f:98:35:df:a4:62:86:4c:b3:cc:08:27:9f:bf:bf:f4: 83:63:35:f8:ad:a8:36:91:26:d9:39:20:ef:ad:6f:db:9f:26: 3b:36:68:5b:f8:c0:92:84:1a:f2:f8:84:48:cc:9e:1f:db:79: e7:3e:2b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtDkunfjSBDzxmGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDIwNloXDTI1MDcyMzExMDIwNlowLzEtMCsGA1UEAxMk OTM1M2VmYTMtMzhkOC00ODk0LTkzY2QtZTA0ZjkwNzhhYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdNBRvSF+eron+RtIEl8KbMKDXkzGBULiqJG FXUuYm9Tjs9Rf5y5JVHhHAQ7zI2JszS3T1m5AEzQZZvXn74iOctXY4rhgrED5XU6 1mC8+vzD8NS68m9abgvtv+aEWHaW7p2zV03NetMxVfY4BUyFL1hICzv7clr9pgtm 8gz8YbfLbK2aGZo/GA6UM1d1Uajl6w2lubctZDACSkhJz6OVwoQgUckxUwkpK+8a SwDBLeE0MwLecAIbqUpOGGH2sHwDmShlh6jBN3jxg/VPz4pRRd8H6G/CVxsFq7du JhhSDtOUo+vW79z2qOgSdhFb90QUoaWTQhhy15CHVRvM3g1hiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/Mzbz13uKA63+5Po7x50wGbRYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDFhYzYwYzUtOTU5Ny0z ZGM2LTk2ZjktYTMzOTA1MTcxNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/yR+mDdMBAEz4vq500BRkOFlxLOZ7KqI1yBJoAkYIZ6x2pAX0OY/FF 5NIyIA53SBXUQjgRK8gtg1LpvVziLKGKpbMzx5fvIMCj7wUUUmzKeTnO1SjKlL+f M5scCnS52EnKxUX946w9e6IQrpzKMJwjd61HJ1RjSFBLV+V8iLouND3e9kCPxyE+ WB82FJwo/p7+OQ2LPt/K1WpYfbKi1piCo32dpRqLxwDcuNnoM9M6DKCAhZCz+5Vc Ko+UIqaknXoCHalEwMaEn5g136RihkyzzAgnn7+/9INjNfitqDaRJtk5IO+tb9uf Jjs2aFv4wJKEGvL4hEjMnh/beec+K10= -----END CERTIFICATE-----Generated at Thu May 8 12:22:38 2025 by rpki-client