$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fba2cbe6-2c11-3b10-97f6-f38385925598.roa File: fba2cbe6-2c11-3b10-97f6-f38385925598.roa (raw, json) Hash identifier: aa7MPI6NfPmxqqDimNIfDu543nI7k768Y3UjOwD1DHE= Subject key identifier: 09:D3:EE:86:82:E0:F6:8F:E8:A3:F0:A5:51:35:A1:65:DC:E8:38:75 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7682D0E6D77261719CA60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fba2cbe6-2c11-3b10-97f6-f38385925598.roa Signing time: Thu 24 Apr 2025 11:08:31 +0000 ROA not before: Thu 24 Apr 2025 11:08:31 +0000 ROA not after: Wed 23 Jul 2025 11:08:31 +0000 asID: 12041 IP address blocks: 65.22.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:68:2d:0e:6d:77:26:17:19:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:31 2025 GMT Not After : Jul 23 11:08:31 2025 GMT Subject: CN=746170fb-4690-4f02-8e82-504734c4d0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:c0:61:3c:c5:35:ed:70:8a:67:d6:76:0b: f6:4d:43:3c:82:38:45:03:09:6b:7b:72:d5:87:ce: e7:57:aa:d1:f5:7e:13:48:b1:b0:18:b1:53:fd:59: d2:39:46:c2:09:dc:1b:c3:3e:52:fb:f2:26:99:48: 86:a7:48:ee:c3:5c:b0:cb:79:ef:aa:87:2a:fe:ce: d6:a4:0e:21:13:f3:53:df:87:6a:94:bd:eb:53:2d: b9:b5:0e:38:b7:3e:eb:a3:4a:7c:1f:53:1d:35:5c: da:12:9b:cc:17:43:91:5b:de:a6:db:73:0f:de:be: a0:a0:17:29:7b:7d:37:82:d1:69:83:00:c9:97:d5: 36:26:4d:0e:54:30:26:10:71:78:64:19:6d:87:5c: 03:43:c4:63:88:6a:3b:6e:f2:fe:57:3e:5d:e1:02: 52:13:6e:3f:ed:d9:89:3f:1c:18:8f:14:89:55:7d: 65:7a:e9:c1:fd:7c:4c:7e:48:91:fc:3c:52:3a:5e: 36:f2:3c:fe:0f:80:b1:ce:fb:87:b8:2a:2b:30:7b: 19:d3:e7:c3:b0:94:93:34:e5:9e:eb:86:29:9b:60: 99:4b:a5:58:6e:ba:73:95:9b:f0:8e:35:e3:8a:80: ad:a0:84:e5:46:6f:35:98:8b:a1:3f:c4:84:33:ae: e1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D3:EE:86:82:E0:F6:8F:E8:A3:F0:A5:51:35:A1:65:DC:E8:38:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fba2cbe6-2c11-3b10-97f6-f38385925598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ad:c7:1d:52:40:c1:e9:0f:11:ff:62:6e:16:1e:bb:3c:0f: ca:74:c6:de:3b:e1:13:4f:2b:5b:55:20:7c:4b:2a:a0:1e:2a: 45:15:94:fa:58:63:0a:da:44:fe:a8:bd:2c:de:db:ad:05:80: 0d:6e:3a:75:f6:93:70:4a:3e:81:89:4c:a3:a1:1a:bf:65:40: ad:4e:da:f6:2e:71:ff:45:f8:f9:98:45:14:f2:d1:79:5b:81: f5:92:5a:7e:f9:56:56:9d:bc:21:27:5b:70:a0:66:99:db:9c: 28:1f:42:be:16:df:17:cf:4d:77:ff:13:00:4a:74:e7:c4:d9: eb:74:91:b5:23:09:59:3e:2d:5b:3b:f1:55:26:49:75:58:19: 30:16:78:f5:6e:bd:45:6b:44:3e:da:23:6c:29:b8:cc:c9:f0: 31:df:b7:59:b8:b0:4e:99:74:16:db:d0:e8:ec:2b:8e:89:80: d8:c5:cc:4c:e5:ec:95:3a:31:f8:87:7a:a3:96:f8:fe:7e:ec: e3:ec:5a:2d:9b:6e:f0:5e:94:24:fe:75:de:58:36:63:23:da: 11:96:61:ce:8b:f3:5c:e6:d9:00:fd:af:58:6f:9b:9e:89:47: 05:5e:0d:af:de:a5:63:ef:47:cd:0c:75:74:e6:79:95:38:c7: 26:91:f8:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht2gtDm13JhcZymAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgzMVoXDTI1MDcyMzExMDgzMVowLzEtMCsGA1UEAxMk NzQ2MTcwZmItNDY5MC00ZjAyLThlODItNTA0NzM0YzRkMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQPAYTzFNe1wimfWdgv2TUM8gjhFAwlre3LV h87nV6rR9X4TSLGwGLFT/VnSOUbCCdwbwz5S+/ImmUiGp0juw1ywy3nvqocq/s7W pA4hE/NT34dqlL3rUy25tQ44tz7ro0p8H1MdNVzaEpvMF0ORW96m23MP3r6goBcp e303gtFpgwDJl9U2Jk0OVDAmEHF4ZBlth1wDQ8RjiGo7bvL+Vz5d4QJSE24/7dmJ PxwYjxSJVX1leunB/XxMfkiR/DxSOl428jz+D4CxzvuHuCorMHsZ0+fDsJSTNOWe 64Ypm2CZS6VYbrpzlZvwjjXjioCtoITlRm81mIuhP8SEM67h7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnT7oaC4PaP6KPwpVE1oWXc6Dh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmJhMmNiZTYtMmMxMS0z YjEwLTk3ZjYtZjM4Mzg1OTI1NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADStxx1SQMHpDxH/Ym4WHrs8D8p0xt474RNPK1tVIHxLKqAeKkUVlPpY YwraRP6ovSze260FgA1uOnX2k3BKPoGJTKOhGr9lQK1O2vYucf9F+PmYRRTy0Xlb gfWSWn75VladvCEnW3CgZpnbnCgfQr4W3xfPTXf/EwBKdOfE2et0kbUjCVk+LVs7 8VUmSXVYGTAWePVuvUVrRD7aI2wpuMzJ8DHft1m4sE6ZdBbb0OjsK46JgNjFzEzl 7JU6MfiHeqOW+P5+7OPsWi2bbvBelCT+dd5YNmMj2hGWYc6L81zm2QD9r1hvm56J RwVeDa/epWPvR80MdXTmeZU4xyaR+HY= -----END CERTIFICATE-----Generated at Fri May 9 13:45:46 2025 by rpki-client