$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dce4ae0-7b32-33be-9165-111b4f71396c.roa File: 1dce4ae0-7b32-33be-9165-111b4f71396c.roa (raw, json) Hash identifier: FWT4scuCUuC2A0dZgh9UTMDMo6GmkuO8KUcxJ5IrFfY= Subject key identifier: 5B:CF:76:9E:F9:E5:C9:09:3B:D8:51:E6:B8:88:07:97:C5:0F:3F:35 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D1DD23BF433773EE76400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dce4ae0-7b32-33be-9165-111b4f71396c.roa Signing time: Thu 06 Mar 2025 13:19:56 +0000 ROA not before: Thu 06 Mar 2025 13:19:56 +0000 ROA not after: Wed 04 Jun 2025 12:19:56 +0000 asID: 207266 IP address blocks: 65.22.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:1d:d2:3b:f4:33:77:3e:e7:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:56 2025 GMT Not After : Jun 4 12:19:56 2025 GMT Subject: CN=7e1ce1c8-a023-4355-9d87-95dabd6c0c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:74:ff:91:f3:60:df:6d:e1:d5:9b:90:05: 40:24:fd:89:2b:8a:0e:bb:08:03:6a:a0:26:df:19: 72:e8:8e:60:e4:bc:ba:1a:fc:7c:3d:83:bb:e7:9a: 16:57:53:16:25:2a:94:74:40:56:44:51:f1:a6:14: 92:85:5b:f0:4a:0c:39:ae:e2:c7:c4:ca:60:ff:0c: a6:8e:9a:4c:78:84:2d:1e:ab:51:09:6e:aa:7c:3d: 25:81:97:80:eb:85:26:4a:20:36:68:00:bd:1c:e8: 9e:0f:d6:a2:53:77:73:ba:09:af:bb:cf:4d:4e:8c: a0:c1:ea:e7:56:83:11:c4:38:05:63:31:dd:90:38: bb:ff:e5:f6:8c:33:92:76:c4:e8:ab:de:8d:b7:fb: 99:98:d8:d2:77:6e:3c:0c:ce:3c:18:de:9a:f3:36: bc:54:d9:8d:24:5b:b5:ba:e1:01:d2:49:d6:f8:ff: 94:bb:f8:a9:ac:ae:70:54:47:c0:61:b7:0a:0c:90: 93:31:95:61:06:b0:a7:c6:3f:c8:be:95:89:7b:5f: 99:9d:f3:96:a7:d9:bf:8d:c7:4f:66:f0:84:f2:3f: 6b:c0:2a:40:f5:e8:b3:0c:a8:08:b6:88:52:eb:5c: 5e:cd:f6:2e:44:97:c5:ff:95:26:89:19:dd:68:76: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CF:76:9E:F9:E5:C9:09:3B:D8:51:E6:B8:88:07:97:C5:0F:3F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1dce4ae0-7b32-33be-9165-111b4f71396c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:17:40:cd:df:da:4b:9b:e7:5c:72:a1:a4:2e:49:86:b8:54: 1d:2d:30:af:7a:a9:47:7f:aa:c2:7e:bd:cf:a5:68:24:60:3f: da:3e:8c:c3:04:ff:c7:05:09:bf:c4:f0:4b:a8:b1:84:f3:64: e4:64:4e:42:74:a9:d4:93:9a:d4:e2:02:ea:f9:c1:cc:ea:2a: 3c:94:64:9e:af:c2:67:48:24:15:c8:42:c0:e2:02:ef:cb:a4: fb:c9:cc:2a:ef:6e:5d:c8:d5:2f:3e:2d:ce:73:b4:2a:63:9c: 67:0d:46:00:6d:77:1f:52:4b:d2:61:9b:db:8f:88:7b:2f:46: db:ea:24:dd:ce:c9:63:08:fa:3b:ae:7d:e7:99:9f:5b:b8:b5: b3:62:ff:c9:bd:01:e4:02:38:8a:7e:51:2f:fc:c2:7c:c2:e2: 81:2e:fe:b5:a6:16:20:12:a0:25:79:77:d3:81:3a:ce:8d:e6: 00:40:bc:7a:5d:9b:87:00:da:71:82:b5:5a:4e:42:84:1f:e5: 95:3d:79:2f:1a:13:2f:a2:d3:ab:33:50:c7:4f:08:40:82:e7: e0:80:4d:73:41:96:b0:ba:2b:4b:ce:fa:42:15:93:ee:d7:26: f6:8d:89:73:57:d2:c2:82:65:29:4f:90:78:0b:09:ef:47:51: 06:41:2c:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLR3SO/Qzdz7nZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1NloXDTI1MDYwNDEyMTk1NlowLzEtMCsGA1UEAxMk N2UxY2UxYzgtYTAyMy00MzU1LTlkODctOTVkYWJkNmMwYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQN0/5HzYN9t4dWbkAVAJP2JK4oOuwgDaqAm 3xly6I5g5Ly6Gvx8PYO755oWV1MWJSqUdEBWRFHxphSShVvwSgw5ruLHxMpg/wym jppMeIQtHqtRCW6qfD0lgZeA64UmSiA2aAC9HOieD9aiU3dzugmvu89NToygwern VoMRxDgFYzHdkDi7/+X2jDOSdsToq96Nt/uZmNjSd248DM48GN6a8za8VNmNJFu1 uuEB0knW+P+Uu/iprK5wVEfAYbcKDJCTMZVhBrCnxj/IvpWJe1+ZnfOWp9m/jcdP ZvCE8j9rwCpA9eizDKgItohS61xezfYuRJfF/5UmiRndaHbcpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvPdp755ckJO9hR5riIB5fFDz81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWRjZTRhZTAtN2IzMi0z M2JlLTkxNjUtMTExYjRmNzEzOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0XQM3f2kub51xyoaQuSYa4VB0tMK96qUd/qsJ+vc+laCRgP9o+jMME /8cFCb/E8EuosYTzZORkTkJ0qdSTmtTiAur5wczqKjyUZJ6vwmdIJBXIQsDiAu/L pPvJzCrvbl3I1S8+Lc5ztCpjnGcNRgBtdx9SS9Jhm9uPiHsvRtvqJN3OyWMI+juu feeZn1u4tbNi/8m9AeQCOIp+US/8wnzC4oEu/rWmFiASoCV5d9OBOs6N5gBAvHpd m4cA2nGCtVpOQoQf5ZU9eS8aEy+i06szUMdPCECC5+CATXNBlrC6K0vO+kIVk+7X JvaNiXNX0sKCZSlPkHgLCe9HUQZBLPM= -----END CERTIFICATE-----Generated at Sat Mar 15 06:16:11 2025 by rpki-client