$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa File: f97c1542-281c-386c-aa21-e33460f6654b.roa (raw, json) Hash identifier: Yg2gvguAqprA+oVAp4Tbsf/V0DMPwhRa6kSq1eFX3Bk= Subject key identifier: 31:F3:6F:35:9C:7A:E6:D3:15:47:A7:1A:63:99:17:A1:A2:F9:E8:E2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7E79A8C2FB259654D5600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa Signing time: Thu 24 Apr 2025 11:09:31 +0000 ROA not before: Thu 24 Apr 2025 11:09:31 +0000 ROA not after: Wed 23 Jul 2025 11:09:31 +0000 asID: 12041 IP address blocks: 65.22.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:e7:9a:8c:2f:b2:59:65:4d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:31 2025 GMT Not After : Jul 23 11:09:31 2025 GMT Subject: CN=13cc7762-d15c-425e-822b-85f266f7668d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:d8:9b:82:bf:55:9a:ae:da:91:bc:9c:bb: bd:42:bb:3e:84:88:b8:d2:32:c5:63:27:3f:a8:f3: 0d:f3:80:be:bb:74:31:4c:de:ca:b5:7c:ef:28:48: 07:73:0b:96:b3:b3:44:54:b1:87:9f:5d:42:35:bf: 43:81:a1:c2:d2:ef:eb:a8:d2:71:94:80:dc:8f:4d: e6:a4:14:3b:04:85:1d:42:08:32:2d:9d:5c:cd:d8: 38:20:34:21:69:90:a7:51:9e:0d:1f:c5:39:b3:0b: 54:31:1f:f2:7a:42:b5:6d:35:8a:2f:ff:e6:b7:cf: 00:94:9e:c3:94:b6:12:60:4d:67:78:f0:84:e6:d7: c9:1b:c0:79:85:b5:0a:89:e7:15:04:f1:9f:93:b7: e9:c0:87:db:59:8e:2b:20:6a:63:f7:3d:00:fd:c9: 31:aa:7d:ac:eb:19:a7:bd:f8:f8:37:33:37:4b:66: ac:a8:b7:cb:c5:c0:17:cc:40:46:25:3f:24:19:17: a8:3d:cf:0c:7c:02:42:3c:6f:8a:4d:bf:fa:14:30: cb:61:d1:21:5f:6d:ba:31:82:ca:8f:2b:dd:b6:d1: e8:e1:5a:22:14:a6:21:3d:b0:37:b7:c6:c6:cb:85: 6a:01:b6:0b:64:00:ed:5c:d8:4e:39:2f:2f:5c:54: 02:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F3:6F:35:9C:7A:E6:D3:15:47:A7:1A:63:99:17:A1:A2:F9:E8:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:de:1a:2b:39:6d:28:62:41:df:fc:e8:73:55:d3:84:f6:c3: bb:84:47:66:c6:cd:80:61:e3:8f:ff:f8:d6:f6:69:2b:2c:b2: 68:6e:29:d4:f7:52:70:d4:50:f9:ba:91:28:bb:93:7f:50:69: 30:10:0c:da:c5:57:0f:bd:a6:ab:75:46:62:e5:0c:7e:5f:59: 7f:e1:3c:71:3a:a8:82:75:c0:14:5c:5e:dd:5d:d0:9f:0b:7b: 12:e8:5d:7e:ed:e9:a4:0b:43:ea:78:32:34:c8:21:34:f1:dd: 0f:1e:3e:c1:cc:9f:ba:ca:81:c3:f4:e4:21:be:8d:50:3e:c4: 68:a8:25:1f:c7:64:73:74:e0:4e:2d:ea:8c:a8:d7:e7:28:aa: 7d:57:23:cf:73:06:fe:6c:a3:8a:6e:a3:66:66:fd:60:f0:20: a8:e5:69:7e:d6:99:63:a3:ec:e5:23:d2:34:66:bd:0b:e8:51: af:ea:02:e4:ee:70:c4:84:40:73:fe:5e:a7:9c:17:aa:1a:b3: fb:9a:44:a3:e7:e7:93:0a:c8:58:56:6c:cf:d5:83:92:8b:98: 3d:e3:ae:eb:ba:e7:3e:15:38:68:4d:f0:06:36:37:ac:d8:ba: 25:aa:1c:53:3b:14:3a:01:58:96:ef:57:0a:83:b1:6e:9f:0c: 0a:74:da:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht+eajC+yWWVNVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkzMVoXDTI1MDcyMzExMDkzMVowLzEtMCsGA1UEAxMk MTNjYzc3NjItZDE1Yy00MjVlLTgyMmItODVmMjY2Zjc2NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVbYm4K/VZqu2pG8nLu9Qrs+hIi40jLFYyc/ qPMN84C+u3QxTN7KtXzvKEgHcwuWs7NEVLGHn11CNb9DgaHC0u/rqNJxlIDcj03m pBQ7BIUdQggyLZ1czdg4IDQhaZCnUZ4NH8U5swtUMR/yekK1bTWKL//mt88AlJ7D lLYSYE1nePCE5tfJG8B5hbUKiecVBPGfk7fpwIfbWY4rIGpj9z0A/ckxqn2s6xmn vfj4NzM3S2asqLfLxcAXzEBGJT8kGReoPc8MfAJCPG+KTb/6FDDLYdEhX226MYLK jyvdttHo4VoiFKYhPbA3t8bGy4VqAbYLZADtXNhOOS8vXFQCywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHzbzWceubTFUenGmOZF6Gi+ejiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjk3YzE1NDItMjgxYy0z ODZjLWFhMjEtZTMzNDYwZjY2NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHeGis5bShiQd/86HNV04T2w7uER2bGzYBh44//+Nb2aSsssmhuKdT3 UnDUUPm6kSi7k39QaTAQDNrFVw+9pqt1RmLlDH5fWX/hPHE6qIJ1wBRcXt1d0J8L exLoXX7t6aQLQ+p4MjTIITTx3Q8ePsHMn7rKgcP05CG+jVA+xGioJR/HZHN04E4t 6oyo1+coqn1XI89zBv5so4puo2Zm/WDwIKjlaX7WmWOj7OUj0jRmvQvoUa/qAuTu cMSEQHP+XqecF6oas/uaRKPn55MKyFhWbM/Vg5KLmD3jruu65z4VOGhN8AY2N6zY uiWqHFM7FDoBWJbvVwqDsW6fDAp02o8= -----END CERTIFICATE-----Generated at Fri May 9 00:23:11 2025 by rpki-client