$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5c0ce03f-b54f-3dad-9161-9841f413c900.roa File: 5c0ce03f-b54f-3dad-9161-9841f413c900.roa (raw, json) Hash identifier: KEf7S8xCfxbgnm7jZBL4g7FVWiUYG3LVakkakzOxDg4= Subject key identifier: 2E:F1:AD:00:D7:60:C4:EC:87:52:8F:3A:3F:D4:BE:11:4A:DC:AB:3A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D177C40193B4C3644B3C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5c0ce03f-b54f-3dad-9161-9841f413c900.roa Signing time: Thu 06 Mar 2025 13:19:53 +0000 ROA not before: Thu 06 Mar 2025 13:19:53 +0000 ROA not after: Wed 04 Jun 2025 12:19:53 +0000 asID: 207266 IP address blocks: 65.22.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:17:7c:40:19:3b:4c:36:44:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:53 2025 GMT Not After : Jun 4 12:19:53 2025 GMT Subject: CN=b1a80cea-857c-44a1-8745-6604fbcd8ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:8e:26:b8:06:c7:76:fe:bc:89:69:7c:86: cd:42:4e:f9:93:df:ce:1d:96:bb:51:44:93:0e:b6: 71:dc:74:a0:22:a6:85:79:41:e5:3b:ff:2f:0c:d9: d7:9e:0b:84:d7:50:36:b4:91:87:7e:a9:cf:75:78: 61:30:91:e1:2b:b2:dd:27:50:9e:19:75:2b:6e:d0: f9:27:58:e5:76:e5:e4:97:29:85:7d:e9:35:fe:b2: 61:04:c8:d8:75:7a:ac:4a:22:28:1f:ef:d0:01:28: b1:15:b2:25:52:9d:21:2b:2f:7e:a8:b2:bb:1c:b5: 14:48:fa:32:85:00:a4:b7:23:2f:40:48:da:96:ea: e8:32:b5:64:1d:f3:02:cd:d4:cb:71:ba:42:74:8a: 01:fa:51:52:2e:b1:7f:4e:d0:80:da:4a:fe:f4:e4: 9c:b7:ad:2b:91:a1:1e:27:a5:34:9a:04:d6:ad:a3: a3:37:11:d3:55:31:f2:43:98:87:4c:61:ae:7b:db: 90:74:83:1f:ab:bf:47:7e:94:08:24:e2:60:a6:70: 18:67:96:ea:8e:2a:46:64:5f:93:4d:f6:a1:b4:7c: 94:b6:ea:2b:b0:68:2f:6c:48:55:ef:e0:a4:1f:5e: e6:87:1f:83:21:8d:e9:ed:5b:d4:4f:32:cd:77:b6: b0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F1:AD:00:D7:60:C4:EC:87:52:8F:3A:3F:D4:BE:11:4A:DC:AB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5c0ce03f-b54f-3dad-9161-9841f413c900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c6:f9:cf:46:ee:80:c2:54:42:a2:11:59:10:c1:5f:ef:6c: e2:5b:c6:69:d1:7f:2b:c3:9b:ab:af:82:c4:4e:fa:59:05:42: 12:32:ce:52:98:6c:05:f9:40:38:aa:85:3b:9c:48:81:48:b5: 92:3e:04:5b:37:29:d4:e9:ee:e5:5f:4e:c6:ff:4a:49:18:a4: f7:4b:69:3a:4b:1f:62:f4:ae:25:0d:b5:c8:ad:38:d2:22:4f: fd:6b:bf:15:f5:19:cf:7e:e5:17:5e:b2:e7:11:51:93:ed:dc: 60:71:7c:7c:33:f5:0d:ae:12:34:1a:37:cc:90:40:1c:e3:93: 50:bf:cd:84:8d:0d:f3:f8:c5:bf:db:ab:c8:53:c9:cb:38:7b: 2a:bd:50:6a:fb:62:d4:da:f8:db:db:e6:df:a3:34:b6:74:6c: 0f:10:8b:63:83:02:35:e8:98:03:3c:30:24:b5:5a:66:c1:b8: d9:54:ae:e9:0e:8a:cd:73:b3:5e:7e:82:3a:73:f8:27:ba:31: 14:ba:87:82:6a:ee:4b:78:88:bf:57:c9:34:00:66:91:7b:85: da:44:6c:9c:9f:ce:c2:9a:49:16:c7:dd:f2:3f:92:ad:01:f5: 93:a5:88:39:c7:7e:e1:6c:9d:6f:8b:6d:3a:64:38:a3:e5:e6: 57:5e:39:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLRd8QBk7TDZEs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1M1oXDTI1MDYwNDEyMTk1M1owLzEtMCsGA1UEAxMk YjFhODBjZWEtODU3Yy00NGExLTg3NDUtNjYwNGZiY2Q4YWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6yOJrgGx3b+vIlpfIbNQk75k9/OHZa7UUST DrZx3HSgIqaFeUHlO/8vDNnXnguE11A2tJGHfqnPdXhhMJHhK7LdJ1CeGXUrbtD5 J1jlduXklymFfek1/rJhBMjYdXqsSiIoH+/QASixFbIlUp0hKy9+qLK7HLUUSPoy hQCktyMvQEjaluroMrVkHfMCzdTLcbpCdIoB+lFSLrF/TtCA2kr+9OSct60rkaEe J6U0mgTWraOjNxHTVTHyQ5iHTGGue9uQdIMfq79HfpQIJOJgpnAYZ5bqjipGZF+T TfahtHyUtuorsGgvbEhV7+CkH17mhx+DIY3p7VvUTzLNd7aw+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7xrQDXYMTsh1KPOj/UvhFK3Ks6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWMwY2UwM2YtYjU0Zi0z ZGFkLTkxNjEtOTg0MWY0MTNjOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXG+c9G7oDCVEKiEVkQwV/vbOJbxmnRfyvDm6uvgsRO+lkFQhIyzlKY bAX5QDiqhTucSIFItZI+BFs3KdTp7uVfTsb/SkkYpPdLaTpLH2L0riUNtcitONIi T/1rvxX1Gc9+5RdesucRUZPt3GBxfHwz9Q2uEjQaN8yQQBzjk1C/zYSNDfP4xb/b q8hTycs4eyq9UGr7YtTa+Nvb5t+jNLZ0bA8Qi2ODAjXomAM8MCS1WmbBuNlUrukO is1zs15+gjpz+Ce6MRS6h4Jq7kt4iL9XyTQAZpF7hdpEbJyfzsKaSRbH3fI/kq0B 9ZOliDnHfuFsnW+LbTpkOKPl5ldeOeQ= -----END CERTIFICATE-----Generated at Sat Mar 15 06:16:10 2025 by rpki-client