$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd3864df-24b5-341b-a471-671ea4c815ca.roa File: dd3864df-24b5-341b-a471-671ea4c815ca.roa (raw, json) Hash identifier: kTMNnEIz3KAh6cDvTX9eJxcorQ+B4ZAh0HalfJ6NmLw= Subject key identifier: 43:22:12:82:C2:C1:D3:83:A0:71:2C:5C:F5:78:3B:52:FD:14:82:2A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B853B32CC97C14B6F0ACC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd3864df-24b5-341b-a471-671ea4c815ca.roa Signing time: Thu 24 Apr 2025 11:10:22 +0000 ROA not before: Thu 24 Apr 2025 11:10:22 +0000 ROA not after: Wed 23 Jul 2025 11:10:22 +0000 asID: 12041 IP address blocks: 65.22.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:53:b3:2c:c9:7c:14:b6:f0:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:22 2025 GMT Not After : Jul 23 11:10:22 2025 GMT Subject: CN=e63bdea3-bf2f-4d2e-b76a-114b5bb80676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:47:65:92:92:ea:2d:82:32:f3:54:6e:b6: e7:3a:c6:0b:38:2e:9a:0d:07:33:1c:a3:5b:be:4b: 38:75:7e:12:de:04:5e:fd:a7:1c:ca:8f:4c:41:55: dd:eb:2c:fe:20:e0:5a:6b:ea:76:3a:c0:9c:46:a0: 4d:7e:a7:a2:f6:e5:ce:d5:b6:5c:64:22:a9:cb:56: 84:5e:0f:1d:07:c0:07:65:9a:fe:8c:4c:d3:f4:56: 39:60:c3:79:09:99:6b:ca:92:40:6e:6f:10:c5:58: b8:7b:6d:11:b7:cb:73:46:29:f0:ca:9f:fd:65:35: c5:ca:b3:66:7e:36:a0:a6:d8:17:e7:f2:09:9a:0d: 5e:a2:b6:bd:ac:06:24:5e:c7:be:6f:1f:d4:15:ee: d1:11:22:90:0a:0e:8e:d1:6c:c8:f1:be:c5:66:cf: 7a:49:ec:fc:c9:90:81:5f:15:40:fe:2f:8c:c2:d7: 63:b9:3f:a9:d3:bf:88:c6:df:c8:0e:d9:d9:67:41: d2:c4:67:50:e8:04:b5:db:15:52:9b:1f:ef:df:e5: c7:75:33:04:ab:b0:2f:cb:70:6d:d0:4c:8f:4d:77: 55:b6:49:91:95:83:cb:8c:45:6e:02:77:c3:00:64: b1:4b:e7:93:69:07:10:e9:96:a0:bf:ff:ac:5e:a5: f1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:22:12:82:C2:C1:D3:83:A0:71:2C:5C:F5:78:3B:52:FD:14:82:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd3864df-24b5-341b-a471-671ea4c815ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:ae:fe:dd:f3:38:c4:f5:9e:c6:db:b8:e1:6e:00:91:60:70: f1:b8:37:80:48:ba:ba:9d:51:52:74:c7:0c:04:02:8a:79:da: 06:3f:5d:cf:d4:0f:c5:e9:98:e8:a2:e6:9e:f1:b5:be:1c:d3: dc:33:7d:d6:90:44:42:87:7b:90:e5:7f:01:61:de:0c:99:c9: 36:93:9f:16:02:1c:9f:4b:c4:56:a4:c5:9f:b2:c9:96:17:b0: 1f:84:99:6e:7a:42:05:16:4f:32:79:42:8a:2a:61:42:97:54: 3b:2c:c7:d2:62:56:6c:ca:f6:4e:86:42:b1:88:e4:18:97:2a: 7b:54:e1:2d:45:0b:10:18:c8:0a:fc:17:fc:3a:67:43:cc:90: 2d:6c:95:1e:cf:f6:af:6b:91:42:95:92:4f:73:82:8c:92:61: 2f:78:46:14:0b:c7:27:ef:55:35:7b:b7:c6:8c:2e:4e:b2:b2: 86:2a:93:30:68:86:4a:53:d2:78:db:f4:05:bf:7a:92:dd:51: d4:fc:6d:e3:dd:b3:87:ae:a1:99:ed:d1:30:8a:a9:08:35:e6: 53:c3:97:61:e8:01:30:6c:ba:58:5f:93:02:7e:43:61:39:fc: 99:32:f2:29:1b:6b:e1:b4:86:e2:05:f3:b2:2f:fa:e6:2f:8d: 89:fd:66:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuFOzLMl8FLbwrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAyMloXDTI1MDcyMzExMTAyMlowLzEtMCsGA1UEAxMk ZTYzYmRlYTMtYmYyZi00ZDJlLWI3NmEtMTE0YjViYjgwNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNBHZZKS6i2CMvNUbrbnOsYLOC6aDQczHKNb vks4dX4S3gRe/accyo9MQVXd6yz+IOBaa+p2OsCcRqBNfqei9uXO1bZcZCKpy1aE Xg8dB8AHZZr+jEzT9FY5YMN5CZlrypJAbm8QxVi4e20Rt8tzRinwyp/9ZTXFyrNm fjagptgX5/IJmg1eora9rAYkXse+bx/UFe7RESKQCg6O0WzI8b7FZs96Sez8yZCB XxVA/i+MwtdjuT+p07+Ixt/IDtnZZ0HSxGdQ6AS12xVSmx/v3+XHdTMEq7Avy3Bt 0EyPTXdVtkmRlYPLjEVuAnfDAGSxS+eTaQcQ6Zagv/+sXqXx9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMiEoLCwdODoHEsXPV4O1L9FIIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGQzODY0ZGYtMjRiNS0z NDFiLWE0NzEtNjcxZWE0YzgxNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6u/t3zOMT1nsbbuOFuAJFgcPG4N4BIurqdUVJ0xwwEAop52gY/Xc/U D8XpmOii5p7xtb4c09wzfdaQREKHe5DlfwFh3gyZyTaTnxYCHJ9LxFakxZ+yyZYX sB+EmW56QgUWTzJ5QooqYUKXVDssx9JiVmzK9k6GQrGI5BiXKntU4S1FCxAYyAr8 F/w6Z0PMkC1slR7P9q9rkUKVkk9zgoySYS94RhQLxyfvVTV7t8aMLk6ysoYqkzBo hkpT0njb9AW/epLdUdT8bePds4euoZnt0TCKqQg15lPDl2HoATBsulhfkwJ+Q2E5 /Jky8ikba+G0huIF87Iv+uYvjYn9Zq4= -----END CERTIFICATE-----Generated at Mon Jun 30 09:05:14 2025 by rpki-client