$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2a95230-8b12-3c90-b6be-dca2d8b741f4.roa File: e2a95230-8b12-3c90-b6be-dca2d8b741f4.roa (raw, json) Hash identifier: nki+z6Rhy/bdgbi38UuFn0EWHISXhXn9oVrf0CX9RJE= Subject key identifier: 25:3C:23:B5:C8:0B:B5:04:D9:46:24:D4:2B:F7:63:BB:89:F8:8F:47 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D1D70193456753E289280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2a95230-8b12-3c90-b6be-dca2d8b741f4.roa Signing time: Thu 06 Mar 2025 13:19:56 +0000 ROA not before: Thu 06 Mar 2025 13:19:56 +0000 ROA not after: Wed 04 Jun 2025 12:19:56 +0000 asID: 207266 IP address blocks: 65.22.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:1d:70:19:34:56:75:3e:28:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:56 2025 GMT Not After : Jun 4 12:19:56 2025 GMT Subject: CN=369a720d-3366-47c5-9b36-fbbcffe22999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:fd:5c:d9:d4:0c:10:82:2e:69:c7:d5:9e: 25:cd:e5:39:5c:f2:c5:73:9f:26:bb:85:7c:b4:68: f7:0c:0e:d7:0a:e2:21:31:66:fb:10:4d:e3:7e:5b: 60:a4:b1:d7:94:a9:18:30:74:07:5d:c0:ce:6c:4a: a8:0d:b2:ab:65:55:ed:64:00:27:ec:a4:b4:c5:e5: 16:88:b7:b4:14:df:95:df:45:9d:a2:ca:5c:a4:07: 23:fc:cc:ae:5a:b7:d9:17:08:3f:14:58:d9:46:4a: 9a:b5:0c:e4:31:99:95:ef:2f:a4:59:e7:b4:10:55: 29:31:8c:b6:ae:8f:3e:cd:c0:2a:02:68:c1:e1:47: 5b:de:82:20:7c:21:3e:d5:5f:95:d6:a5:0f:a9:82: 95:38:83:49:e0:6a:a0:91:25:ec:5b:43:83:55:4f: 2b:28:90:86:e6:0f:d4:9c:50:43:ac:9a:04:bd:3d: 99:87:f8:7c:c0:46:2e:71:7b:d4:e3:f7:03:d0:fd: fc:89:63:f6:3c:f4:34:a2:57:5e:ea:d8:6c:28:53: 68:2d:1c:b7:23:55:4a:a6:0a:be:2b:63:01:71:5f: fc:22:a1:9e:a4:47:9a:01:ba:bf:c7:e0:3b:ae:ba: 68:4d:c0:98:f8:0b:3e:04:d1:44:d3:bd:e4:cb:22: c9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3C:23:B5:C8:0B:B5:04:D9:46:24:D4:2B:F7:63:BB:89:F8:8F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2a95230-8b12-3c90-b6be-dca2d8b741f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:54:67:17:2f:f5:bb:cf:c6:b9:d4:c0:7e:a1:58:f4:a8:8f: 02:6e:1c:ba:28:af:11:81:6d:cc:2f:65:10:7f:c3:20:f5:09: a9:6b:f7:42:50:a2:f5:bf:3e:74:71:43:f0:7c:6b:c9:9d:49: d6:f8:97:07:0e:bb:6a:94:57:eb:6d:d9:15:ba:c7:4b:2e:e3: a1:bd:8c:5b:2e:45:55:6e:ae:82:e4:02:29:ab:59:95:af:c7: 87:ee:1e:e2:22:5a:d8:6e:c3:29:97:cf:fc:05:e9:cc:df:0c: 7b:0b:7c:89:40:4d:1e:31:b2:09:5b:d3:49:f2:98:63:43:da: cc:83:49:50:99:8b:2b:8c:9d:bc:a3:06:09:01:5d:1a:57:e9: b5:16:d8:b0:42:75:ad:d8:f0:17:82:49:52:e1:56:60:f4:43: f9:cb:27:f6:e2:72:bb:6c:c6:7d:7c:96:f2:c0:09:dd:1a:3a: 27:de:db:7c:9e:88:c6:e7:59:52:64:db:23:da:bb:e8:df:42: 0b:94:d8:46:67:be:33:cd:58:d8:d4:66:b0:cf:7d:a7:6d:c6: 03:f5:2b:4b:70:3c:fa:34:b1:fa:22:df:9c:5b:2c:59:35:44: 96:e7:e4:5e:75:86:bc:f3:f6:b2:8b:27:83:5a:3c:58:e1:a8: 7e:93:2d:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLR1wGTRWdT4okoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1NloXDTI1MDYwNDEyMTk1NlowLzEtMCsGA1UEAxMk MzY5YTcyMGQtMzM2Ni00N2M1LTliMzYtZmJiY2ZmZTIyOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwT9XNnUDBCCLmnH1Z4lzeU5XPLFc58mu4V8 tGj3DA7XCuIhMWb7EE3jfltgpLHXlKkYMHQHXcDObEqoDbKrZVXtZAAn7KS0xeUW iLe0FN+V30WdospcpAcj/MyuWrfZFwg/FFjZRkqatQzkMZmV7y+kWee0EFUpMYy2 ro8+zcAqAmjB4Udb3oIgfCE+1V+V1qUPqYKVOINJ4GqgkSXsW0ODVU8rKJCG5g/U nFBDrJoEvT2Zh/h8wEYucXvU4/cD0P38iWP2PPQ0olde6thsKFNoLRy3I1VKpgq+ K2MBcV/8IqGepEeaAbq/x+A7rrpoTcCY+As+BNFE073kyyLJOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCU8I7XIC7UE2UYk1Cv3Y7uJ+I9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTJhOTUyMzAtOGIxMi0z YzkwLWI2YmUtZGNhMmQ4Yjc0MWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhUZxcv9bvPxrnUwH6hWPSojwJuHLoorxGBbcwvZRB/wyD1Calr90JQ ovW/PnRxQ/B8a8mdSdb4lwcOu2qUV+tt2RW6x0su46G9jFsuRVVuroLkAimrWZWv x4fuHuIiWthuwymXz/wF6czfDHsLfIlATR4xsglb00nymGND2syDSVCZiyuMnbyj BgkBXRpX6bUW2LBCda3Y8BeCSVLhVmD0Q/nLJ/bicrtsxn18lvLACd0aOife23ye iMbnWVJk2yPau+jfQguU2EZnvjPNWNjUZrDPfadtxgP1K0twPPo0sfoi35xbLFk1 RJbn5F51hrzz9rKLJ4NaPFjhqH6TLfs= -----END CERTIFICATE-----Generated at Sat Mar 15 06:18:43 2025 by rpki-client