$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/249ed03c-6a67-32e2-a681-7707eb5f52fd.roa File: 249ed03c-6a67-32e2-a681-7707eb5f52fd.roa (raw, json) Hash identifier: FidtevAOOdLrp8AhSDlzudbSem+PDIFov8W7mv6wmvs= Subject key identifier: 05:E8:42:9F:85:BB:34:11:F1:3E:BC:B7:F7:9C:AB:08:0B:00:E0:25 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D196DE1567179234F2860 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/249ed03c-6a67-32e2-a681-7707eb5f52fd.roa Signing time: Thu 06 Mar 2025 13:19:54 +0000 ROA not before: Thu 06 Mar 2025 13:19:54 +0000 ROA not after: Wed 04 Jun 2025 12:19:54 +0000 asID: 207266 IP address blocks: 65.22.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:19:6d:e1:56:71:79:23:4f:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:54 2025 GMT Not After : Jun 4 12:19:54 2025 GMT Subject: CN=833618c1-3107-4775-b4a6-1c5850a195f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:01:c6:bb:75:15:e7:74:71:2b:d0:00:4a:e5: 60:54:06:41:2d:a5:06:b1:e5:62:c4:4c:58:d6:02: c3:33:36:62:d6:f8:f0:21:55:bc:0c:f2:f7:cc:8b: bc:02:3c:71:79:71:6c:0c:53:49:32:9e:ab:94:44: fa:74:26:20:a0:c6:b2:bb:31:bd:83:41:a3:36:42: 5d:26:21:30:c7:62:58:1c:3c:ed:51:73:9f:25:8f: db:fb:ed:93:cb:09:af:38:58:08:51:71:6b:71:1c: 52:4c:fd:b6:72:4f:6c:eb:02:1e:8e:17:d8:12:c6: 2b:f4:8d:dd:65:1c:53:81:92:44:de:6a:14:83:96: 65:67:fa:ca:cf:1b:80:a0:18:03:b4:b8:24:1d:d3: 29:41:e3:fe:0d:15:cd:bb:30:e7:01:14:85:c8:66: 85:92:77:80:f4:1d:26:2f:91:d0:9f:b1:d1:b6:5a: a6:0d:10:9e:48:48:1b:a3:84:14:17:8f:62:e3:b5: e6:dc:59:b5:b9:9b:71:5a:4c:e8:9e:24:36:ad:3c: 43:e8:d9:ef:92:24:25:52:2a:ab:1d:fb:53:f9:75: 0a:f6:df:42:ad:34:70:e4:28:e6:58:6f:92:ac:22: 71:17:4e:f4:9a:e1:cf:a5:a4:cf:c2:1b:03:44:83: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E8:42:9F:85:BB:34:11:F1:3E:BC:B7:F7:9C:AB:08:0B:00:E0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/249ed03c-6a67-32e2-a681-7707eb5f52fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d2:77:02:92:3a:c8:99:3c:42:57:a2:27:35:ff:d3:a7:c4: ce:eb:00:82:5c:60:3f:90:8b:0b:2b:11:c8:6f:4a:aa:2c:28: 9c:04:5f:7c:57:18:c4:25:1d:b6:a2:2c:91:00:ba:05:73:bd: 5e:90:ea:ba:6f:d9:32:c6:07:12:ff:50:a1:0e:27:f7:00:83: 03:e6:07:2c:b4:40:b6:51:3a:e6:56:67:fb:10:18:b0:c0:fb: 66:2b:64:17:e7:da:32:ee:f9:e1:ae:40:1e:87:21:db:01:13: 89:2f:94:d8:ba:93:0f:13:9a:9e:15:6a:86:9e:ea:90:13:ed: 7b:73:34:62:a1:d8:f0:28:a9:f5:cb:fb:d1:ab:e4:27:ee:13: c4:1b:64:56:95:f0:b1:1b:c2:a1:ea:77:1a:03:25:b4:11:e3: 81:d5:79:ed:d9:bd:c7:2c:bf:a2:23:a8:30:16:7f:59:8f:36: fd:34:45:c4:bf:3e:93:37:22:74:22:c5:23:3f:2c:b9:f1:f1: c1:7c:e1:95:97:a7:00:1d:33:17:c2:f9:31:77:e9:b3:d8:ff: 4a:96:d3:5b:d9:41:34:4d:d0:aa:ef:0f:ca:7d:1e:d2:44:02: df:e7:30:a7:30:fe:94:6a:6a:ca:65:47:85:90:0d:52:c9:99: a8:8c:1f:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLRlt4VZxeSNPKGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1NFoXDTI1MDYwNDEyMTk1NFowLzEtMCsGA1UEAxMk ODMzNjE4YzEtMzEwNy00Nzc1LWI0YTYtMWM1ODUwYTE5NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgHGu3UV53RxK9AASuVgVAZBLaUGseVixExY 1gLDMzZi1vjwIVW8DPL3zIu8AjxxeXFsDFNJMp6rlET6dCYgoMayuzG9g0GjNkJd JiEwx2JYHDztUXOfJY/b++2TywmvOFgIUXFrcRxSTP22ck9s6wIejhfYEsYr9I3d ZRxTgZJE3moUg5ZlZ/rKzxuAoBgDtLgkHdMpQeP+DRXNuzDnARSFyGaFkneA9B0m L5HQn7HRtlqmDRCeSEgbo4QUF49i47Xm3Fm1uZtxWkzoniQ2rTxD6NnvkiQlUiqr HftT+XUK9t9CrTRw5CjmWG+SrCJxF070muHPpaTPwhsDRIMECQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXoQp+FuzQR8T68t/ecqwgLAOAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjQ5ZWQwM2MtNmE2Ny0z MmUyLWE2ODEtNzcwN2ViNWY1MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLSdwKSOsiZPEJXoic1/9OnxM7rAIJcYD+QiwsrEchvSqosKJwEX3xX GMQlHbaiLJEAugVzvV6Q6rpv2TLGBxL/UKEOJ/cAgwPmByy0QLZROuZWZ/sQGLDA +2YrZBfn2jLu+eGuQB6HIdsBE4kvlNi6kw8Tmp4Vaoae6pAT7XtzNGKh2PAoqfXL +9Gr5CfuE8QbZFaV8LEbwqHqdxoDJbQR44HVee3Zvccsv6IjqDAWf1mPNv00RcS/ PpM3InQixSM/LLnx8cF84ZWXpwAdMxfC+TF36bPY/0qW01vZQTRN0KrvD8p9HtJE At/nMKcw/pRqasplR4WQDVLJmaiMH3s= -----END CERTIFICATE-----Generated at Sat Mar 15 06:16:10 2025 by rpki-client