$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0a38f9a-3888-3f92-87db-f08fcc28a181.roa File: a0a38f9a-3888-3f92-87db-f08fcc28a181.roa (raw, json) Hash identifier: O2pkXjYVoJ6DY0lwrrRGL0y+4zCkNWzY33IHL1iKo8Q= Subject key identifier: 5B:F5:9E:DD:CC:6B:94:74:1C:8E:E7:B9:8A:9B:FD:DA:B4:DE:CF:4A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D194BBB08AA922CFA6660 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0a38f9a-3888-3f92-87db-f08fcc28a181.roa Signing time: Thu 06 Mar 2025 13:19:54 +0000 ROA not before: Thu 06 Mar 2025 13:19:54 +0000 ROA not after: Wed 04 Jun 2025 12:19:54 +0000 asID: 207266 IP address blocks: 65.22.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:19:4b:bb:08:aa:92:2c:fa:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:54 2025 GMT Not After : Jun 4 12:19:54 2025 GMT Subject: CN=60d35b7f-239a-4ac9-a968-fc56ec0bd093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5a:f6:d9:5c:ce:3f:9c:83:22:87:43:4e:54: b4:e0:12:b6:b9:11:ca:bc:cd:e8:4f:76:14:91:3b: e5:6a:80:ad:60:6b:48:34:b2:b7:bd:6c:1b:66:f6: ec:d2:03:ce:ee:4c:5a:2e:a6:86:cb:54:43:62:c1: 47:d4:fa:5b:62:2f:5f:0a:ce:39:d4:51:7e:16:04: 8c:8f:e0:0d:5f:7a:d8:f0:f5:42:45:3e:11:e7:26: 11:dc:29:ba:d6:b2:32:cd:b2:8d:3c:8e:27:3a:c7: 3e:a6:36:7d:53:7f:2b:6e:30:fb:b6:ae:26:c3:60: 84:fa:dd:b7:10:a8:ec:5f:6e:49:c7:cf:1f:c4:6f: ef:70:47:ee:f5:f7:bc:28:73:da:89:2a:d1:a4:a7: 24:0a:6d:22:6b:69:52:2a:7e:2d:5e:bb:e2:ac:9b: 82:6a:0f:f4:7c:a4:34:53:0c:78:e2:02:e6:80:fc: c9:95:29:8d:51:87:b7:9b:9c:76:c6:81:25:0d:5a: 32:3b:57:32:5f:f1:2f:91:49:6a:4d:9a:2f:15:6b: 5c:8a:03:5d:59:0e:fd:82:1a:ca:3d:45:8a:20:60: 66:fd:ce:3e:14:5b:96:da:b8:90:74:91:04:9a:d9: bb:be:b5:c5:ad:08:a5:bf:ce:a2:39:1c:6b:7d:8d: 3c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F5:9E:DD:CC:6B:94:74:1C:8E:E7:B9:8A:9B:FD:DA:B4:DE:CF:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0a38f9a-3888-3f92-87db-f08fcc28a181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:81:56:05:74:fc:b6:ff:cb:50:99:10:29:e7:6c:6f:68:23: 3b:96:5a:d8:b3:0d:df:1e:aa:b6:a9:49:4c:0c:6d:7f:4d:7c: bc:52:a6:11:10:37:08:7d:2a:09:89:17:ac:15:ff:99:9d:a6: 01:99:c2:82:19:7f:16:7a:13:fc:fd:9e:74:c5:4b:98:fb:ba: 84:58:e3:1c:32:b1:69:0f:ed:d1:74:12:65:ae:ce:1e:c2:26: 70:9d:16:8d:da:5a:04:a2:10:77:e9:a4:3e:5e:28:92:82:c8: 89:8b:6f:de:94:f6:4c:82:47:2a:21:d3:5a:dd:51:97:15:f8: 4e:e4:0f:99:a9:36:dd:c4:83:01:05:1b:72:82:ae:3b:4a:92: 7c:15:6c:ce:f1:aa:3b:e6:63:15:e1:38:5d:b5:38:12:ad:9d: c5:49:1c:c3:71:8c:b1:3a:59:d0:5c:cc:98:26:4c:00:b0:91: 35:ea:eb:bd:ea:8c:12:8f:54:82:34:54:97:a9:32:17:f0:85: a8:90:89:00:32:d5:4c:46:9a:67:55:05:dc:8f:76:40:55:ba: c5:3c:de:b0:a4:d2:e5:70:49:07:f1:08:87:82:b6:32:15:31: 8b:be:28:79:47:6d:15:66:9b:87:a6:87:c5:96:e9:51:a4:58: 5c:b4:d7:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLRlLuwiqkiz6ZmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1NFoXDTI1MDYwNDEyMTk1NFowLzEtMCsGA1UEAxMk NjBkMzViN2YtMjM5YS00YWM5LWE5NjgtZmM1NmVjMGJkMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglr22VzOP5yDIodDTlS04BK2uRHKvM3oT3YU kTvlaoCtYGtINLK3vWwbZvbs0gPO7kxaLqaGy1RDYsFH1PpbYi9fCs451FF+FgSM j+ANX3rY8PVCRT4R5yYR3Cm61rIyzbKNPI4nOsc+pjZ9U38rbjD7tq4mw2CE+t23 EKjsX25Jx88fxG/vcEfu9fe8KHPaiSrRpKckCm0ia2lSKn4tXrvirJuCag/0fKQ0 Uwx44gLmgPzJlSmNUYe3m5x2xoElDVoyO1cyX/EvkUlqTZovFWtcigNdWQ79ghrK PUWKIGBm/c4+FFuW2riQdJEEmtm7vrXFrQilv86iORxrfY08YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv1nt3Ma5R0HI7nuYqb/dq03s9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTBhMzhmOWEtMzg4OC0z ZjkyLTg3ZGItZjA4ZmNjMjhhMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6BVgV0/Lb/y1CZECnnbG9oIzuWWtizDd8eqrapSUwMbX9NfLxSphEQ Nwh9KgmJF6wV/5mdpgGZwoIZfxZ6E/z9nnTFS5j7uoRY4xwysWkP7dF0EmWuzh7C JnCdFo3aWgSiEHfppD5eKJKCyImLb96U9kyCRyoh01rdUZcV+E7kD5mpNt3EgwEF G3KCrjtKknwVbM7xqjvmYxXhOF21OBKtncVJHMNxjLE6WdBczJgmTACwkTXq673q jBKPVII0VJepMhfwhaiQiQAy1UxGmmdVBdyPdkBVusU83rCk0uVwSQfxCIeCtjIV MYu+KHlHbRVmm4emh8WW6VGkWFy01yk= -----END CERTIFICATE-----Generated at Sat Mar 15 06:08:50 2025 by rpki-client