$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f2bdb302-96fa-38e1-a601-acb09c90541c.roa File: f2bdb302-96fa-38e1-a601-acb09c90541c.roa (raw, json) Hash identifier: VZngV7UjSw1yXm9SXirPYgBSPVikJ3hEDWU71E73eLo= Subject key identifier: 7F:37:C8:37:69:9C:BA:EB:FE:3A:CB:DD:2A:8E:86:C7:F5:0D:30:85 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7A44F1FBF175B32D41680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f2bdb302-96fa-38e1-a601-acb09c90541c.roa Signing time: Thu 24 Apr 2025 11:08:59 +0000 ROA not before: Thu 24 Apr 2025 11:08:59 +0000 ROA not after: Wed 23 Jul 2025 11:08:59 +0000 asID: 12041 IP address blocks: 65.22.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:a4:4f:1f:bf:17:5b:32:d4:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:59 2025 GMT Not After : Jul 23 11:08:59 2025 GMT Subject: CN=42cca464-65f7-4d13-b522-21be79c9002f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9b:8b:8b:4d:5a:f6:a4:e5:cf:07:e0:07:6f: 55:7c:47:ba:8f:ec:44:0c:a6:79:f0:46:4a:5f:6f: 69:b6:22:77:2c:32:d1:42:92:f0:e6:74:c7:74:db: 8a:95:4e:1e:9a:39:d6:c3:4a:38:2f:58:20:c6:fa: 68:f7:c0:67:d8:e4:5f:16:4d:f7:20:f3:cc:e9:b6: e7:34:0d:db:e3:6e:a0:7c:a5:b0:bd:b8:07:55:01: 47:39:d7:87:52:dc:b9:4e:55:cd:ad:39:7d:47:d2: 97:70:02:2f:26:f2:41:7b:89:8b:3a:16:9b:b7:9d: 55:f6:d2:b3:ce:ba:c6:db:f3:2c:04:b4:ab:73:78: 06:c1:9c:0c:3c:5d:4d:c2:c3:8b:b9:ac:78:40:ec: 08:03:fc:fb:be:bc:67:0f:85:e5:8f:7c:78:f1:71: 58:29:15:52:25:bf:64:d3:f3:21:b2:d7:05:0e:09: 68:4c:8c:40:22:ee:82:b7:9b:ba:3b:a5:c7:97:04: 17:0c:c3:1f:f4:70:e1:ee:97:9b:93:04:4f:72:ef: e0:e8:31:e8:c2:63:ed:aa:fc:a9:2f:12:dd:c5:1a: b1:e7:f3:a9:cc:c4:3d:e9:42:8a:59:c9:42:46:cb: d0:e9:87:ff:72:c6:65:59:e5:f2:9a:34:87:db:9c: da:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:37:C8:37:69:9C:BA:EB:FE:3A:CB:DD:2A:8E:86:C7:F5:0D:30:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f2bdb302-96fa-38e1-a601-acb09c90541c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0e:1b:96:ec:bd:fc:c3:7d:b4:59:d6:1d:00:71:e2:f6:9f: 41:41:62:41:c5:f9:2e:f6:d3:dc:1c:3b:9f:09:f6:b8:81:a1: 53:ad:2d:7f:3d:ab:ea:d2:e0:06:41:80:7e:ad:7a:9a:22:52: 90:6c:3e:11:13:1f:91:bd:d0:d5:fe:ea:79:bd:de:37:59:8a: 47:ca:be:56:59:a9:fa:b9:5c:8d:b7:af:15:81:dc:38:d5:5a: aa:d9:45:1c:fc:9b:2f:6d:a9:a1:11:b1:47:8a:af:39:32:14: 6e:98:d2:c7:c1:95:bf:1c:2f:4b:8e:84:02:13:c7:0d:14:4d: d2:72:0d:4d:03:47:38:9e:f6:a2:23:42:c5:85:33:db:5d:18: 95:e8:de:a1:00:e3:3c:9e:c6:32:03:2d:dd:bf:06:5c:6a:8a: b3:f0:73:86:fb:e2:96:af:e4:2e:06:9d:aa:1e:28:47:4f:ef: 9a:81:22:07:72:8a:a1:90:62:4f:02:f5:0f:fa:c7:03:d5:d8: 79:22:28:46:a5:15:5c:3b:73:58:6f:a6:7e:81:1a:48:9c:8c: bb:96:a5:c4:84:a1:f0:43:d4:52:95:63:a1:cd:1a:cb:42:72: e6:e5:e8:b3:d5:54:54:4e:71:03:e4:d0:c2:a3:88:a8:e4:e3: c0:ad:28:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht6RPH78XWzLUFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDg1OVoXDTI1MDcyMzExMDg1OVowLzEtMCsGA1UEAxMk NDJjY2E0NjQtNjVmNy00ZDEzLWI1MjItMjFiZTc5YzkwMDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipuLi01a9qTlzwfgB29VfEe6j+xEDKZ58EZK X29ptiJ3LDLRQpLw5nTHdNuKlU4emjnWw0o4L1ggxvpo98Bn2ORfFk33IPPM6bbn NA3b426gfKWwvbgHVQFHOdeHUty5TlXNrTl9R9KXcAIvJvJBe4mLOhabt51V9tKz zrrG2/MsBLSrc3gGwZwMPF1NwsOLuax4QOwIA/z7vrxnD4Xlj3x48XFYKRVSJb9k 0/MhstcFDgloTIxAIu6Ct5u6O6XHlwQXDMMf9HDh7pebkwRPcu/g6DHowmPtqvyp LxLdxRqx5/OpzMQ96UKKWclCRsvQ6Yf/csZlWeXymjSH25zaKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH83yDdpnLrr/jrL3SqOhsf1DTCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjJiZGIzMDItOTZmYS0z OGUxLWE2MDEtYWNiMDljOTA1NDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYOG5bsvfzDfbRZ1h0AceL2n0FBYkHF+S7209wcO58J9riBoVOtLX89 q+rS4AZBgH6tepoiUpBsPhETH5G90NX+6nm93jdZikfKvlZZqfq5XI23rxWB3DjV WqrZRRz8my9tqaERsUeKrzkyFG6Y0sfBlb8cL0uOhAITxw0UTdJyDU0DRzie9qIj QsWFM9tdGJXo3qEA4zyexjIDLd2/BlxqirPwc4b74pav5C4GnaoeKEdP75qBIgdy iqGQYk8C9Q/6xwPV2HkiKEalFVw7c1hvpn6BGkicjLuWpcSEofBD1FKVY6HNGstC cubl6LPVVFROcQPk0MKjiKjk48CtKKU= -----END CERTIFICATE-----Generated at Fri May 9 04:37:54 2025 by rpki-client