$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca8f8977-80be-36c4-8622-b7b51b1f7d1c.roa File: ca8f8977-80be-36c4-8622-b7b51b1f7d1c.roa (raw, json) Hash identifier: +vtzFcKaCciUxnRViwVCVN26wuIrAHb3RTO4IJRtPXo= Subject key identifier: 1C:C7:70:35:70:53:E6:39:B4:61:B5:5C:22:68:DA:72:48:D0:EF:AD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D17B0D652C2FF4E651780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca8f8977-80be-36c4-8622-b7b51b1f7d1c.roa Signing time: Thu 06 Mar 2025 13:19:53 +0000 ROA not before: Thu 06 Mar 2025 13:19:53 +0000 ROA not after: Wed 04 Jun 2025 12:19:53 +0000 asID: 207266 IP address blocks: 65.22.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:17:b0:d6:52:c2:ff:4e:65:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:53 2025 GMT Not After : Jun 4 12:19:53 2025 GMT Subject: CN=f8e0f07e-45ee-42cd-82bc-e8d5634d6228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:ac:7e:60:0c:39:b1:b2:64:96:e7:e0:a5: b6:f5:2e:96:80:6a:e9:3d:9d:25:3e:d9:6e:49:9a: 70:7a:4c:73:fe:2e:b9:a1:93:c2:fa:f8:fd:c7:96: 32:03:db:d1:27:95:32:e0:40:28:7e:26:38:01:89: 63:fb:a7:ab:73:27:66:fd:06:91:ca:d0:bf:14:85: 10:93:69:95:de:11:7c:4a:3c:de:5a:75:8f:f0:c2: 91:34:8c:ed:56:e3:3e:5c:ef:0d:47:99:23:2a:74: dd:17:c9:51:30:d0:39:9c:eb:81:4a:86:a9:c6:94: 08:54:0d:eb:e0:fc:97:74:3d:ce:cc:a0:03:5c:df: ec:13:21:48:7e:b4:5c:e7:55:89:c3:01:2b:f5:61: 13:72:34:3c:db:e6:2e:f7:67:3f:ed:0f:ae:4d:ac: ad:de:3a:63:99:ce:a8:b0:69:99:f2:5e:60:9a:86: 6f:60:95:44:bc:df:57:c4:87:d0:ed:54:54:41:7e: 90:80:55:d3:b8:7d:38:39:3f:e4:8c:43:12:d8:ea: 9e:e9:4a:29:ef:a3:1f:71:bc:80:6e:60:ff:5a:0f: a7:c6:bd:aa:a5:9f:18:67:de:47:e2:c4:72:16:5e: b4:f1:17:f0:54:d2:d4:c1:4a:cb:76:9e:7e:a4:24: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C7:70:35:70:53:E6:39:B4:61:B5:5C:22:68:DA:72:48:D0:EF:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca8f8977-80be-36c4-8622-b7b51b1f7d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b7:93:d4:46:94:5d:76:cc:9a:64:c5:33:ba:a7:b9:af:68: 35:94:cd:5c:a2:84:44:24:ef:8e:4e:bd:2a:ec:1b:db:e0:28: fa:8c:7c:a4:6b:23:17:a1:a0:b3:be:4d:99:dd:02:9c:ce:7b: fa:5d:da:6c:a7:4b:02:aa:0c:3d:9a:8d:bb:2a:75:b7:43:5b: 0b:34:08:8e:fd:2c:dd:47:d8:93:97:7c:c9:30:10:95:fe:e3: 85:46:6a:f9:dd:20:ab:8c:68:20:1d:3a:da:bb:00:26:58:ce: e6:7e:d0:dc:62:80:8c:5c:de:e4:29:a8:11:e8:62:77:f2:c1: 3c:60:d0:17:b5:87:2a:b0:82:61:66:a2:1d:cc:a9:03:f9:b3: 24:8e:b9:b1:22:2c:0a:f7:cd:fd:6a:ca:fc:2c:58:48:c4:23: 15:28:29:f7:17:4b:87:49:61:6b:b6:a6:f3:57:72:34:c0:10: 9e:01:b6:5f:c1:f1:8c:7c:3a:64:99:f4:91:d8:f3:9b:4b:70: 21:d1:50:a4:fd:8d:09:ee:6b:e5:88:41:fb:38:81:c6:33:72: d8:09:e8:3f:dc:d3:1e:58:1b:a1:c4:61:f5:de:5a:76:ea:57: e8:ec:5a:f2:55:04:70:c3:68:97:79:df:43:c4:05:0b:06:29: 95:3a:d9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLRew1lLC/05lF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1M1oXDTI1MDYwNDEyMTk1M1owLzEtMCsGA1UEAxMk ZjhlMGYwN2UtNDVlZS00MmNkLTgyYmMtZThkNTYzNGQ2MjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ECsfmAMObGyZJbn4KW29S6WgGrpPZ0lPtlu SZpwekxz/i65oZPC+vj9x5YyA9vRJ5Uy4EAofiY4AYlj+6ercydm/QaRytC/FIUQ k2mV3hF8SjzeWnWP8MKRNIztVuM+XO8NR5kjKnTdF8lRMNA5nOuBSoapxpQIVA3r 4PyXdD3OzKADXN/sEyFIfrRc51WJwwEr9WETcjQ82+Yu92c/7Q+uTayt3jpjmc6o sGmZ8l5gmoZvYJVEvN9XxIfQ7VRUQX6QgFXTuH04OT/kjEMS2Oqe6Uop76MfcbyA bmD/Wg+nxr2qpZ8YZ95H4sRyFl608RfwVNLUwUrLdp5+pCQRRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzHcDVwU+Y5tGG1XCJo2nJI0O+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2E4Zjg5NzctODBiZS0z NmM0LTg2MjItYjdiNTFiMWY3ZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu3k9RGlF12zJpkxTO6p7mvaDWUzVyihEQk745OvSrsG9vgKPqMfKRr IxehoLO+TZndApzOe/pd2mynSwKqDD2ajbsqdbdDWws0CI79LN1H2JOXfMkwEJX+ 44VGavndIKuMaCAdOtq7ACZYzuZ+0NxigIxc3uQpqBHoYnfywTxg0Be1hyqwgmFm oh3MqQP5sySOubEiLAr3zf1qyvwsWEjEIxUoKfcXS4dJYWu2pvNXcjTAEJ4Btl/B 8Yx8OmSZ9JHY85tLcCHRUKT9jQnua+WIQfs4gcYzctgJ6D/c0x5YG6HEYfXeWnbq V+jsWvJVBHDDaJd530PEBQsGKZU62Sw= -----END CERTIFICATE-----Generated at Sat Mar 15 06:16:11 2025 by rpki-client