$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fb409d0a-9655-316c-b3cb-34d6c7603bcc.roa File: fb409d0a-9655-316c-b3cb-34d6c7603bcc.roa (raw, json) Hash identifier: YBZMasTzSfUe5VwZRonlSo6COa88tmr4lhWGkZABAtg= Subject key identifier: 7A:DA:B5:99:63:5A:02:A6:38:B9:EB:68:C4:DE:E9:88:05:7F:DE:D0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B4432763A301CC4E28F000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fb409d0a-9655-316c-b3cb-34d6c7603bcc.roa Signing time: Thu 24 Apr 2025 11:02:11 +0000 ROA not before: Thu 24 Apr 2025 11:02:11 +0000 ROA not after: Wed 23 Jul 2025 11:02:11 +0000 asID: 12041 IP address blocks: 65.22.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b4:43:27:63:a3:01:cc:4e:28:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:02:11 2025 GMT Not After : Jul 23 11:02:11 2025 GMT Subject: CN=8acf3a0b-6b2e-456b-ae76-a0e3f75008ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c2:2f:cd:c5:67:e3:5f:8a:7c:b3:fc:b5:87: 33:93:e8:e0:69:23:ef:52:7a:23:0a:b1:2d:f1:5c: c7:7b:16:1b:b1:36:62:d7:1c:86:d8:b2:38:42:25: e5:68:93:07:c5:be:ac:33:5a:cd:57:bf:83:45:7a: 41:88:6b:2c:bc:43:45:a4:7f:9e:d2:4e:90:61:90: 25:2a:32:8f:0a:4b:eb:67:af:34:e5:f0:a7:1f:7f: 6e:6d:21:63:4e:17:03:44:cf:83:30:b1:fb:43:15: 87:04:cb:8a:73:b1:89:a2:e1:92:80:ab:4b:65:6a: 1e:1e:04:b1:8d:4d:3c:5e:7b:6d:bc:03:fd:dc:b6: 88:93:4b:f3:95:85:19:2c:c1:37:fe:2d:89:26:2a: 1e:ed:f5:9e:54:65:9d:b9:8f:a5:40:0a:b5:42:69: 5f:e9:df:0f:d5:8b:3a:97:f5:fd:b3:48:be:2b:72: a1:22:ed:7d:a0:d4:b0:c8:ee:e9:dd:db:a1:c9:e2: 82:68:0b:5d:dc:6f:03:cd:26:15:0d:34:63:7a:dd: 2b:c7:80:6d:e7:c5:dd:24:7e:98:7a:19:23:fb:03: be:90:52:16:0c:c4:5d:b2:3a:c8:9c:08:16:58:e6: 39:5a:a3:64:9c:37:e7:1d:62:eb:f8:26:c0:65:3d: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DA:B5:99:63:5A:02:A6:38:B9:EB:68:C4:DE:E9:88:05:7F:DE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fb409d0a-9655-316c-b3cb-34d6c7603bcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3b:b4:71:58:55:7b:cc:b1:06:62:ab:64:32:e5:08:8a:61: 26:77:39:2e:d1:18:a3:ed:78:1d:b5:22:fe:d6:0a:d2:95:66: af:f7:d7:7b:00:97:72:cd:0d:8d:9b:c4:5a:a9:d9:dc:97:57: f3:dd:e1:81:9d:4c:20:aa:62:d3:37:7e:b3:a0:86:1d:f9:36: 67:06:d7:bd:2d:51:de:c9:05:1e:9f:c3:28:bb:66:b2:8d:f6: a3:64:23:08:91:ae:68:51:35:55:c2:ce:1b:5d:16:4f:92:ea: 43:c2:b1:61:44:b1:c8:39:8c:5d:22:06:0c:0f:9a:ab:2e:a1: f8:03:c7:7f:1f:57:4a:2f:41:91:07:11:2c:3a:1d:ee:fa:f7: 15:43:ee:ea:4b:38:eb:1e:ae:e8:88:37:ac:01:bd:8e:7f:09: 89:38:99:26:be:74:13:37:1f:3d:56:df:c3:74:4d:db:3a:f2: 1d:24:3b:dd:82:d5:57:1a:c5:43:7c:f4:08:96:bd:63:b0:a9: f2:4e:e9:c8:6d:84:dc:7f:b2:18:5b:5c:06:02:05:50:9c:18: 9a:5a:5e:fd:6c:5d:f3:46:a5:04:01:24:04:da:d9:e6:05:b8: 43:da:79:27:3e:a0:a1:20:3e:c8:54:36:4d:bc:47:00:84:32: f6:43:ae:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtEMnY6MBzE4o8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDIxMVoXDTI1MDcyMzExMDIxMVowLzEtMCsGA1UEAxMk OGFjZjNhMGItNmIyZS00NTZiLWFlNzYtYTBlM2Y3NTAwOGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcIvzcVn41+KfLP8tYczk+jgaSPvUnojCrEt 8VzHexYbsTZi1xyG2LI4QiXlaJMHxb6sM1rNV7+DRXpBiGssvENFpH+e0k6QYZAl KjKPCkvrZ6805fCnH39ubSFjThcDRM+DMLH7QxWHBMuKc7GJouGSgKtLZWoeHgSx jU08XnttvAP93LaIk0vzlYUZLME3/i2JJioe7fWeVGWduY+lQAq1Qmlf6d8P1Ys6 l/X9s0i+K3KhIu19oNSwyO7p3duhyeKCaAtd3G8DzSYVDTRjet0rx4Bt58XdJH6Y ehkj+wO+kFIWDMRdsjrInAgWWOY5WqNknDfnHWLr+CbAZT2uhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHratZljWgKmOLnraMTe6YgFf97QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmI0MDlkMGEtOTY1NS0z MTZjLWIzY2ItMzRkNmM3NjAzYmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc7tHFYVXvMsQZiq2Qy5QiKYSZ3OS7RGKPteB21Iv7WCtKVZq/313sA l3LNDY2bxFqp2dyXV/Pd4YGdTCCqYtM3frOghh35NmcG170tUd7JBR6fwyi7ZrKN 9qNkIwiRrmhRNVXCzhtdFk+S6kPCsWFEscg5jF0iBgwPmqsuofgDx38fV0ovQZEH ESw6He769xVD7upLOOseruiIN6wBvY5/CYk4mSa+dBM3Hz1W38N0Tds68h0kO92C 1VcaxUN89AiWvWOwqfJO6chthNx/shhbXAYCBVCcGJpaXv1sXfNGpQQBJATa2eYF uEPaeSc+oKEgPshUNk28RwCEMvZDri0= -----END CERTIFICATE-----Generated at Thu May 8 11:48:06 2025 by rpki-client