$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1afcfc5-26ba-3179-8d46-a29c487d4536.roa File: e1afcfc5-26ba-3179-8d46-a29c487d4536.roa (raw, json) Hash identifier: S/tmI693n+IlxbIjvbFw29btnyvg45I1rM/wNfnAvaU= Subject key identifier: AE:68:65:CA:F3:99:CA:40:D6:D7:66:24:28:D6:69:45:79:BC:A2:F0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B73EE4CD667D73A3BFE640 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1afcfc5-26ba-3179-8d46-a29c487d4536.roa Signing time: Thu 24 Apr 2025 11:08:11 +0000 ROA not before: Thu 24 Apr 2025 11:08:11 +0000 ROA not after: Wed 23 Jul 2025 11:08:11 +0000 asID: 12041 IP address blocks: 65.22.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:3e:e4:cd:66:7d:73:a3:bf:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:11 2025 GMT Not After : Jul 23 11:08:11 2025 GMT Subject: CN=4e72f03b-67a9-4c1b-9c05-1a8545bd609f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:85:99:ee:3c:f1:cd:7a:60:df:ce:6c:5b: c7:5e:02:48:11:b8:8e:22:86:e5:9b:69:a4:d2:d6: ee:03:2d:1d:d0:59:52:ac:86:ef:f5:c3:c4:a5:93: 35:9b:67:12:f8:40:81:bc:aa:5a:2e:12:83:ae:ed: 44:f7:34:bd:6b:86:99:44:5a:19:12:99:80:4c:29: ba:1b:0e:a6:95:1e:d0:cd:8e:34:4f:10:d5:88:1c: f7:68:26:e7:83:4d:f7:a3:fd:ef:e3:3d:1b:03:8e: 43:72:f5:ce:7d:8d:47:5c:14:80:f6:51:2a:09:a1: fe:9b:b1:64:b9:93:b3:f4:08:4d:ca:cf:aa:37:ed: 69:2c:31:33:75:4e:0f:a8:68:5d:51:7b:da:8b:08: 96:f6:f6:9e:8a:f5:be:a9:ca:1e:4d:05:43:dc:9c: de:62:16:15:8d:f0:74:20:bd:93:af:09:b9:53:1f: a3:51:f3:70:9d:b1:6b:a5:d0:d9:f4:6b:b1:6f:99: 73:11:19:25:8e:d8:1a:3b:c9:24:7d:24:21:95:e4: 24:1a:ae:85:d7:db:b3:bf:f8:b9:cc:34:c2:58:05: bb:97:8a:f9:71:74:72:58:cb:1e:46:ac:e6:d7:cd: 1a:82:5b:b9:8c:f6:9d:fa:d5:25:dc:d7:90:e5:64: db:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:68:65:CA:F3:99:CA:40:D6:D7:66:24:28:D6:69:45:79:BC:A2:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1afcfc5-26ba-3179-8d46-a29c487d4536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:42:e1:ea:2f:9e:af:3c:b4:a5:7c:22:cb:8d:53:6d:6a:a0: ce:93:67:25:1e:2e:94:58:88:fc:48:b4:99:ba:c0:d7:46:94: 87:8f:71:b4:d7:a1:a7:13:7a:9b:3b:91:60:62:fb:dc:cf:51: ad:83:08:96:a8:6f:cb:6f:0a:3e:b9:f7:7b:b3:15:a5:1e:c1: ea:86:57:4c:17:5f:c4:84:e4:3e:4c:39:9a:cb:db:5e:07:8d: 96:de:b0:1a:ef:ad:12:91:78:0b:80:eb:18:a5:57:0c:9e:b6: f0:4c:b0:ec:f3:3b:fc:a0:52:be:40:ef:f9:dc:07:f2:0c:54: c4:80:00:e6:99:a6:50:cc:90:4e:a2:65:d6:be:49:12:f3:b0: 9c:3a:da:45:f1:5f:a8:90:d0:09:5f:1d:82:07:0d:d0:88:d2: 91:1c:14:52:58:85:a9:3f:81:eb:05:ca:e9:c4:3f:28:36:23: ed:ab:5d:82:e3:83:66:45:56:64:d4:2e:39:6e:c8:a7:96:a2: 4a:06:2a:c4:15:1f:dd:fb:f2:f3:0e:bd:a7:84:9e:c5:8e:c6: 79:87:7f:bb:37:9b:8d:e7:e0:d9:a0:e8:cf:69:59:da:cc:6f: 9f:f0:12:27:0f:11:11:32:7e:35:6e:b3:f5:80:68:a8:d7:c3: 1a:1f:f8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtz7kzWZ9c6O/5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgxMVoXDTI1MDcyMzExMDgxMVowLzEtMCsGA1UEAxMk NGU3MmYwM2ItNjdhOS00YzFiLTljMDUtMWE4NTQ1YmQ2MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt2Fme488c16YN/ObFvHXgJIEbiOIoblm2mk 0tbuAy0d0FlSrIbv9cPEpZM1m2cS+ECBvKpaLhKDru1E9zS9a4aZRFoZEpmATCm6 Gw6mlR7QzY40TxDViBz3aCbng033o/3v4z0bA45DcvXOfY1HXBSA9lEqCaH+m7Fk uZOz9AhNys+qN+1pLDEzdU4PqGhdUXvaiwiW9vaeivW+qcoeTQVD3JzeYhYVjfB0 IL2Trwm5Ux+jUfNwnbFrpdDZ9Guxb5lzERkljtgaO8kkfSQhleQkGq6F19uzv/i5 zDTCWAW7l4r5cXRyWMseRqzm180aglu5jPad+tUl3NeQ5WTbIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5oZcrzmcpA1tdmJCjWaUV5vKLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTFhZmNmYzUtMjZiYS0z MTc5LThkNDYtYTI5YzQ4N2Q0NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBC4eovnq88tKV8IsuNU21qoM6TZyUeLpRYiPxItJm6wNdGlIePcbTX oacTeps7kWBi+9zPUa2DCJaob8tvCj6593uzFaUeweqGV0wXX8SE5D5MOZrL214H jZbesBrvrRKReAuA6xilVwyetvBMsOzzO/ygUr5A7/ncB/IMVMSAAOaZplDMkE6i Zda+SRLzsJw62kXxX6iQ0AlfHYIHDdCI0pEcFFJYhak/gesFyunEPyg2I+2rXYLj g2ZFVmTULjluyKeWokoGKsQVH9378vMOvaeEnsWOxnmHf7s3m43n4Nmg6M9pWdrM b5/wEicPEREyfjVus/WAaKjXwxof+Kk= -----END CERTIFICATE-----Generated at Sat May 10 13:29:30 2025 by rpki-client