$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/df48ad85-aa81-3940-aa43-ad476c1ec3e9.roa File: df48ad85-aa81-3940-aa43-ad476c1ec3e9.roa (raw, json) Hash identifier: mCmbb6/FCAHKZWaXs17w97acq4N/5D2i+1M1XVynO1s= Subject key identifier: 70:F3:CA:21:47:F9:29:9A:96:6C:1E:A4:91:51:CE:CF:46:E1:BD:23 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D19D8AB27C7AABE509570 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/df48ad85-aa81-3940-aa43-ad476c1ec3e9.roa Signing time: Thu 06 Mar 2025 13:19:54 +0000 ROA not before: Thu 06 Mar 2025 13:19:54 +0000 ROA not after: Wed 04 Jun 2025 12:19:54 +0000 asID: 207266 IP address blocks: 65.22.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:19:d8:ab:27:c7:aa:be:50:95:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:54 2025 GMT Not After : Jun 4 12:19:54 2025 GMT Subject: CN=05cdd47e-697f-46d6-9882-8f0fd5c5c042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:80:19:2b:05:5a:51:75:17:c3:2d:4d:26: 36:b2:ec:20:3e:db:8a:ea:2e:e1:9a:35:b0:b9:ae: 67:ec:5c:14:7c:6e:bc:02:95:ac:29:e6:f6:cc:8c: 90:e5:96:81:f7:7e:5c:2c:a3:da:e3:47:7e:c0:ea: df:59:18:2c:d4:fd:53:2a:b6:b4:de:33:5e:62:fe: 45:dd:4f:00:5e:32:17:8e:be:51:c7:90:ac:13:f3: 72:00:49:49:f0:06:30:73:f2:f4:f2:7e:06:88:1f: 1b:d2:0e:72:31:ed:0e:bc:ac:b1:fb:5d:f5:27:c1: ac:07:f2:70:7a:cd:f3:88:a4:ff:07:47:38:0d:d2: 0c:ff:bd:7c:f9:cf:55:13:8c:0e:17:f5:36:28:43: 02:24:0b:35:32:90:dc:db:94:d6:8f:52:8b:d4:3c: cc:78:60:0d:30:9c:ab:5b:d0:29:cd:d7:68:91:83: 85:21:6f:0d:15:53:6a:35:a3:85:56:a5:46:c1:09: 5d:2f:24:62:7b:3e:43:b4:30:56:eb:a8:50:7f:fd: 72:97:22:79:5d:1c:6b:4d:ec:9c:b3:c6:a9:52:f2: 04:96:25:3d:e5:93:5a:63:db:74:49:df:7d:8a:38: b6:57:65:97:2b:02:4a:63:5c:f4:1f:ae:2d:17:cc: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F3:CA:21:47:F9:29:9A:96:6C:1E:A4:91:51:CE:CF:46:E1:BD:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/df48ad85-aa81-3940-aa43-ad476c1ec3e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f0:7a:8a:60:47:8d:f4:a8:ff:51:46:a3:ed:0d:bf:5a:2a: b7:84:a0:00:ec:db:5c:e0:1b:03:02:0f:0c:2a:01:9a:62:2a: f2:e8:2b:6f:90:60:4e:cd:d7:e2:d0:4e:bb:9e:54:97:eb:b8: fd:39:93:d5:aa:41:63:12:57:cd:26:64:8f:8b:5a:97:4b:5e: 4f:6b:fd:e8:92:2e:eb:09:ee:9d:6f:77:b9:22:78:e1:4a:9e: 2f:f1:dc:e9:af:e0:e7:dd:a8:b4:5b:df:de:03:81:77:a2:4f: e8:31:da:f6:77:96:1f:36:f5:7f:84:7e:76:67:1d:a5:72:b9: 83:23:fa:de:83:ff:a7:88:aa:14:f8:e3:17:d5:20:dd:95:cc: 9b:08:e8:66:2c:4e:b0:44:d2:07:fc:df:f9:95:84:8e:ef:e2: 14:ca:ad:82:17:d5:33:09:db:00:95:bf:07:77:21:f9:0d:59: ae:85:fa:e5:76:83:d8:a3:a2:fc:ee:15:f2:bf:53:9d:49:38: 5a:88:0a:32:0c:47:6b:8c:d2:00:88:fb:8f:d8:73:99:3d:cd: bd:c2:af:7c:68:f8:4a:8c:d1:96:63:c1:11:76:29:8c:8b:fd: 65:12:66:e0:ea:76:3c:82:da:74:cb:b8:9e:fa:96:a7:6b:57: ad:85:37:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLRnYqyfHqr5QlXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1NFoXDTI1MDYwNDEyMTk1NFowLzEtMCsGA1UEAxMk MDVjZGQ0N2UtNjk3Zi00NmQ2LTk4ODItOGYwZmQ1YzVjMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDmAGSsFWlF1F8MtTSY2suwgPtuK6i7hmjWw ua5n7FwUfG68ApWsKeb2zIyQ5ZaB935cLKPa40d+wOrfWRgs1P1TKra03jNeYv5F 3U8AXjIXjr5Rx5CsE/NyAElJ8AYwc/L08n4GiB8b0g5yMe0OvKyx+131J8GsB/Jw es3ziKT/B0c4DdIM/718+c9VE4wOF/U2KEMCJAs1MpDc25TWj1KL1DzMeGANMJyr W9ApzddokYOFIW8NFVNqNaOFVqVGwQldLyRiez5DtDBW66hQf/1ylyJ5XRxrTeyc s8apUvIEliU95ZNaY9t0Sd99iji2V2WXKwJKY1z0H64tF8xm0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDzyiFH+SmalmwepJFRzs9G4b0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGY0OGFkODUtYWE4MS0z OTQwLWFhNDMtYWQ0NzZjMWVjM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPweopgR430qP9RRqPtDb9aKreEoADs21zgGwMCDwwqAZpiKvLoK2+Q YE7N1+LQTrueVJfruP05k9WqQWMSV80mZI+LWpdLXk9r/eiSLusJ7p1vd7kieOFK ni/x3Omv4OfdqLRb394DgXeiT+gx2vZ3lh829X+EfnZnHaVyuYMj+t6D/6eIqhT4 4xfVIN2VzJsI6GYsTrBE0gf83/mVhI7v4hTKrYIX1TMJ2wCVvwd3IfkNWa6F+uV2 g9ijovzuFfK/U51JOFqICjIMR2uM0gCI+4/Yc5k9zb3Cr3xo+EqM0ZZjwRF2KYyL /WUSZuDqdjyC2nTLuJ76lqdrV62FN/g= -----END CERTIFICATE-----Generated at Sat Mar 15 06:11:12 2025 by rpki-client