$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f63910cf-60c7-326e-af72-9ba3c56ca4df.roa File: f63910cf-60c7-326e-af72-9ba3c56ca4df.roa (raw, json) Hash identifier: OCKjYl2XuId/CqILovqftfiW9I42VZ7E1hwrXWIC9O4= Subject key identifier: 22:FD:A7:65:17:70:BA:B1:41:71:85:25:9D:91:CE:43:23:A1:2D:6E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B86005B09D83A94465E980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f63910cf-60c7-326e-af72-9ba3c56ca4df.roa Signing time: Thu 24 Apr 2025 11:10:28 +0000 ROA not before: Thu 24 Apr 2025 11:10:28 +0000 ROA not after: Wed 23 Jul 2025 11:10:28 +0000 asID: 12041 IP address blocks: 65.22.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:60:05:b0:9d:83:a9:44:65:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:28 2025 GMT Not After : Jul 23 11:10:28 2025 GMT Subject: CN=51e43199-447e-4d81-b449-22757e9b914b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:27:8c:d9:98:10:64:ac:27:14:b8:01:6e: 60:6b:22:84:e5:6e:a1:d0:62:1d:55:bf:92:20:6f: 02:f9:5f:e8:e0:86:e0:cc:50:79:61:74:d2:e4:b9: a6:31:f4:f5:49:11:64:33:be:00:f7:8a:f3:6d:e5: aa:fa:cf:24:09:cb:6d:ef:8d:55:f2:b6:ac:b8:97: 90:8c:34:4b:d4:47:b4:59:ec:6c:a0:0b:15:84:9a: ad:2f:be:ec:17:fb:81:48:2c:33:8c:7a:cb:c6:9b: 30:df:29:fb:8b:f4:39:12:d9:ed:70:4f:ee:d8:a8: 5c:14:0e:1f:48:6f:38:64:78:89:62:8a:11:bd:14: be:ff:0a:cf:4c:76:f3:6b:1f:18:f7:2b:a4:0c:c9: 0f:5d:bb:9c:20:1c:cb:c3:15:55:53:6b:0a:ea:14: e2:2e:88:3f:07:31:4f:34:0a:f8:d3:6f:a9:45:7c: 45:aa:73:fc:24:02:5c:dd:cd:c8:df:5f:ed:5e:c0: 29:ad:ec:96:31:74:bd:00:7f:45:64:5b:9f:5f:ff: f2:fd:6d:e4:93:e0:ab:74:71:14:00:9c:45:f2:8c: 44:57:22:65:06:6a:65:af:fa:c6:7e:d4:c9:dc:ec: 6a:0d:1f:36:08:bd:79:91:0b:64:96:9a:58:e9:6c: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:A7:65:17:70:BA:B1:41:71:85:25:9D:91:CE:43:23:A1:2D:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f63910cf-60c7-326e-af72-9ba3c56ca4df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ef:1d:9a:63:13:c1:00:35:7e:1f:71:dc:52:73:da:84:05: 53:e8:47:7c:95:90:d5:87:24:c3:62:5d:f6:6f:38:9e:6b:c0: 8e:cf:b7:a9:6f:97:7c:0d:4f:2e:a1:00:34:55:ff:9a:3e:fc: ab:e4:00:af:54:32:dc:23:56:d0:cc:71:ec:6a:5a:08:6b:c3: 62:f0:6e:13:21:c3:0c:84:55:ab:28:f0:4b:1b:fa:9c:64:40: a2:df:54:e3:21:c3:e6:40:7d:85:f7:56:a4:20:07:d0:bd:26: 7b:47:e2:89:c8:31:ba:a2:6a:e2:85:92:a7:50:db:bb:07:22: 2a:48:45:42:2f:5c:f1:ad:36:02:00:5d:e1:7f:be:2f:f2:2a: c0:b0:f5:06:f1:21:4d:71:93:63:9c:f4:a0:54:f5:b8:4f:78: 00:49:bb:ee:05:0e:57:03:18:91:87:24:7a:9d:f1:c9:df:51: dc:6f:e4:86:66:77:9a:ca:8a:6b:fe:5a:82:54:70:2a:3f:f0: 36:95:e6:b6:cb:b8:0c:06:67:be:f2:32:2f:52:6c:ca:77:30: 08:cd:77:1d:24:eb:47:e6:5b:e4:3e:0c:b5:75:d9:05:0c:ee: 64:39:34:6f:a3:7f:a0:49:8f:60:07:30:95:f9:e5:79:fe:37: 19:4f:87:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuGAFsJ2DqURl6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAyOFoXDTI1MDcyMzExMTAyOFowLzEtMCsGA1UEAxMk NTFlNDMxOTktNDQ3ZS00ZDgxLWI0NDktMjI3NTdlOWI5MTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI4njNmYEGSsJxS4AW5gayKE5W6h0GIdVb+S IG8C+V/o4IbgzFB5YXTS5LmmMfT1SRFkM74A94rzbeWq+s8kCctt741V8rasuJeQ jDRL1Ee0WexsoAsVhJqtL77sF/uBSCwzjHrLxpsw3yn7i/Q5EtntcE/u2KhcFA4f SG84ZHiJYooRvRS+/wrPTHbzax8Y9yukDMkPXbucIBzLwxVVU2sK6hTiLog/BzFP NAr402+pRXxFqnP8JAJc3c3I31/tXsApreyWMXS9AH9FZFufX//y/W3kk+CrdHEU AJxF8oxEVyJlBmplr/rGftTJ3OxqDR82CL15kQtklppY6Wzx4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL9p2UXcLqxQXGFJZ2RzkMjoS1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjYzOTEwY2YtNjBjNy0z MjZlLWFmNzItOWJhM2M1NmNhNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnvHZpjE8EANX4fcdxSc9qEBVPoR3yVkNWHJMNiXfZvOJ5rwI7Pt6lv l3wNTy6hADRV/5o+/KvkAK9UMtwjVtDMcexqWghrw2LwbhMhwwyEVaso8Esb+pxk QKLfVOMhw+ZAfYX3VqQgB9C9JntH4onIMbqiauKFkqdQ27sHIipIRUIvXPGtNgIA XeF/vi/yKsCw9QbxIU1xk2Oc9KBU9bhPeABJu+4FDlcDGJGHJHqd8cnfUdxv5IZm d5rKimv+WoJUcCo/8DaV5rbLuAwGZ77yMi9SbMp3MAjNdx0k60fmW+Q+DLV12QUM 7mQ5NG+jf6BJj2AHMJX55Xn+NxlPh/M= -----END CERTIFICATE-----Generated at Fri May 9 00:38:21 2025 by rpki-client