$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5d7f9d6-90c1-379d-8230-09073bd60584.roa File: f5d7f9d6-90c1-379d-8230-09073bd60584.roa (raw, json) Hash identifier: tYWuVKVVD+LJXFuzg6n24tACfzOuY84ulEYrNLq4ejc= Subject key identifier: E4:84:B5:45:1E:61:E5:C3:55:25:AA:5C:D3:5B:DB:02:85:A4:03:27 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7D82EF7906C60805A3D80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5d7f9d6-90c1-379d-8230-09073bd60584.roa Signing time: Thu 24 Apr 2025 11:09:24 +0000 ROA not before: Thu 24 Apr 2025 11:09:24 +0000 ROA not after: Wed 23 Jul 2025 11:09:24 +0000 asID: 12041 IP address blocks: 65.22.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:d8:2e:f7:90:6c:60:80:5a:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:24 2025 GMT Not After : Jul 23 11:09:24 2025 GMT Subject: CN=f3c273bf-78bc-41b7-bab7-8b8873182e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:16:7f:53:65:40:1f:5c:52:2a:e6:c3:80: e9:1a:1e:57:36:76:c2:fb:c4:52:43:e5:0f:17:d1: 57:49:9b:45:ec:50:f7:e8:8e:ff:4d:17:9e:72:98: f3:47:ad:71:71:4c:11:50:93:18:49:54:28:84:38: 7c:29:6c:c3:8d:73:4a:54:47:2d:09:5a:2c:52:00: e3:e7:a9:37:ad:b4:ef:79:d5:2b:4a:2f:6b:dc:8a: 73:1b:e8:da:6b:b5:2e:e1:25:a0:3b:6c:cd:35:42: 97:63:46:77:b0:03:c4:db:cc:93:71:c6:6b:a4:2d: 07:dd:ec:46:fd:ee:b6:a7:a4:77:2a:0a:fb:1b:5d: b7:ac:69:84:89:7c:9c:c4:cc:fd:a8:4b:43:f2:16: 8a:03:f5:14:0f:2e:6c:79:4c:d8:04:b2:59:ea:09: db:04:a6:f1:5d:0f:b7:36:ee:af:77:43:b9:ea:1b: de:d1:05:0e:c2:63:6f:a6:79:f9:75:8c:d0:c0:79: 14:b8:14:a9:0f:2e:97:84:05:81:e3:1c:a3:f3:03: ee:3c:65:57:da:30:9d:1d:91:2a:74:5e:f5:47:dd: c5:f5:1e:7a:f7:84:c0:fb:76:db:74:75:57:f4:40: a6:a1:f2:1d:ac:75:25:67:c1:59:18:72:e8:c7:5d: e1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:84:B5:45:1E:61:E5:C3:55:25:AA:5C:D3:5B:DB:02:85:A4:03:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5d7f9d6-90c1-379d-8230-09073bd60584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d7:d2:fe:ad:ab:73:da:bd:e2:37:e5:e2:f8:d8:08:59:f0: cf:15:1a:87:60:8a:44:37:f6:c6:b5:d5:38:3a:7e:f6:df:b6: 22:3a:e7:b5:6e:1a:13:f7:db:9a:04:6d:b9:29:48:38:25:12: d7:ef:93:5c:1e:b8:c6:72:a4:d4:22:bf:b6:2f:d5:d9:d5:37: 26:52:ad:08:16:07:2c:8a:c9:ef:62:45:63:23:0a:bf:92:89: 20:d1:98:70:ae:21:8d:38:08:c7:f9:69:f1:c6:d8:84:a9:db: 40:23:9d:ec:f7:86:db:80:94:38:ba:97:87:4d:86:3a:c3:9b: 62:70:02:60:ef:f6:8a:49:12:b6:de:72:2a:c9:d3:5e:d9:8a: 4e:7b:09:28:47:1f:c2:e8:df:86:b1:c2:2e:37:ae:ea:a7:b1: 45:bb:a4:17:04:9b:e1:33:19:b9:9f:fa:a1:af:44:06:c9:80: ee:d2:b3:ca:f3:e7:ea:92:25:ba:65:d2:ed:f7:ad:69:e9:21: 51:f6:69:87:c6:a0:38:f7:bb:ce:3f:b4:6c:8f:d8:6f:86:68: fb:ac:a1:ef:73:6f:72:60:ea:d9:92:85:c0:d3:1d:45:ad:7a: 8b:73:e4:dd:be:d8:c9:e6:66:7e:ff:bb:0a:c9:00:ba:75:a2: 9e:dc:40:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht9gu95BsYIBaPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyNFoXDTI1MDcyMzExMDkyNFowLzEtMCsGA1UEAxMk ZjNjMjczYmYtNzhiYy00MWI3LWJhYjctOGI4ODczMTgyZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhkWf1NlQB9cUirmw4DpGh5XNnbC+8RSQ+UP F9FXSZtF7FD36I7/TReecpjzR61xcUwRUJMYSVQohDh8KWzDjXNKVEctCVosUgDj 56k3rbTvedUrSi9r3IpzG+jaa7Uu4SWgO2zNNUKXY0Z3sAPE28yTccZrpC0H3exG /e62p6R3Kgr7G123rGmEiXycxMz9qEtD8haKA/UUDy5seUzYBLJZ6gnbBKbxXQ+3 Nu6vd0O56hve0QUOwmNvpnn5dYzQwHkUuBSpDy6XhAWB4xyj8wPuPGVX2jCdHZEq dF71R93F9R5694TA+3bbdHVX9ECmofIdrHUlZ8FZGHLox13h4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSEtUUeYeXDVSWqXNNb2wKFpAMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjVkN2Y5ZDYtOTBjMS0z NzlkLTgyMzAtMDkwNzNiZDYwNTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3X0v6tq3PaveI35eL42AhZ8M8VGodgikQ39sa11Tg6fvbftiI657Vu GhP325oEbbkpSDglEtfvk1weuMZypNQiv7Yv1dnVNyZSrQgWByyKye9iRWMjCr+S iSDRmHCuIY04CMf5afHG2ISp20Ajnez3htuAlDi6l4dNhjrDm2JwAmDv9opJErbe cirJ017Zik57CShHH8Lo34axwi43ruqnsUW7pBcEm+EzGbmf+qGvRAbJgO7Ss8rz 5+qSJbpl0u33rWnpIVH2aYfGoDj3u84/tGyP2G+GaPusoe9zb3Jg6tmShcDTHUWt eotz5N2+2MnmZn7/uwrJALp1op7cQDY= -----END CERTIFICATE-----Generated at Sat May 10 10:26:48 2025 by rpki-client