$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebb0a0fa-ebae-31a9-85b4-135b86980952.roa File: ebb0a0fa-ebae-31a9-85b4-135b86980952.roa (raw, json) Hash identifier: Evqkvq+KXDXqFTlh7ovuZ5+pI6RWPdSbK47pBgu8LQM= Subject key identifier: 8D:CD:82:B5:CE:D8:C1:FB:95:25:FF:57:10:70:8F:26:89:8B:47:96 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D1A0046C1ED2E11FD3980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebb0a0fa-ebae-31a9-85b4-135b86980952.roa Signing time: Thu 06 Mar 2025 13:19:54 +0000 ROA not before: Thu 06 Mar 2025 13:19:54 +0000 ROA not after: Wed 04 Jun 2025 12:19:54 +0000 asID: 207266 IP address blocks: 65.22.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:1a:00:46:c1:ed:2e:11:fd:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:54 2025 GMT Not After : Jun 4 12:19:54 2025 GMT Subject: CN=b9b44da6-61e9-4b03-9082-9d6f125992e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:8e:69:0f:d7:1f:50:69:7a:0c:cd:05:33: d8:01:9f:3b:63:17:5a:5a:8c:f0:c8:54:c9:20:df: b9:cc:0e:9d:7b:30:81:ab:83:1c:af:d6:04:6a:65: 6b:73:71:b5:a5:6d:df:ac:d0:6f:e0:e2:75:89:c4: e7:07:7e:bc:44:e7:72:80:c3:e4:28:c2:96:69:d5: 51:52:80:fb:95:64:2c:20:e3:d1:81:24:13:7e:3d: aa:08:8a:57:fd:4e:93:e2:63:45:4e:6e:b8:31:ae: d0:e2:47:bd:88:af:6d:ba:ff:63:f1:4b:05:c3:2b: ff:04:63:d9:21:9e:27:77:65:6b:54:f8:df:82:57: f2:93:6a:0a:37:c4:76:9d:3f:ff:0a:84:e2:b6:d4: 62:11:b3:8b:61:df:9e:68:a2:b3:82:33:fd:73:88: 1c:8f:12:ba:1c:fb:3f:63:b5:b5:40:4e:18:68:57: 9f:94:04:54:1b:8b:80:b9:c2:50:3d:40:cf:28:fa: b5:fd:e8:d4:01:24:57:0b:9f:e9:c2:b5:07:44:25: 87:36:6e:48:7f:28:c3:f3:91:44:dd:4c:9e:4d:7c: 94:f9:41:a0:f0:58:af:bd:76:5a:6d:39:1e:a4:e8: e4:6d:86:dc:57:bd:e0:21:8e:54:af:17:33:b1:e2: 7c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CD:82:B5:CE:D8:C1:FB:95:25:FF:57:10:70:8F:26:89:8B:47:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebb0a0fa-ebae-31a9-85b4-135b86980952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d2:fb:63:54:ee:57:46:7d:6c:13:40:a0:09:9e:c0:53:68: 82:d6:81:ba:44:37:36:c3:6d:a3:6f:74:8a:00:c2:44:1b:2f: 75:2a:c7:66:91:01:c5:c3:f5:f0:ed:bd:07:a9:1d:0b:84:9e: 4a:64:d4:96:41:28:0e:f6:90:4d:d8:32:49:1f:fa:01:ee:ca: 71:2a:bf:02:44:14:7e:83:a4:cd:ed:c2:5f:4a:39:c6:ab:cb: 0e:9e:b9:5c:15:d0:62:a4:05:27:21:4c:51:e8:69:5c:df:be: 22:0f:8b:1f:28:6e:cd:5a:5b:36:22:8d:4c:71:03:be:17:1a: 5f:21:1e:33:52:aa:6f:13:b8:af:fb:08:d5:3e:52:aa:ef:f0: 19:e2:76:b6:d9:4d:99:10:89:15:62:13:2d:9e:4a:0a:e5:5d: 0d:96:7a:02:80:2d:eb:d6:86:4a:46:43:d3:c6:1f:6c:f1:e9: 9a:0d:24:aa:47:f9:45:cb:de:c6:63:e3:95:44:66:6d:58:0d: 6f:0c:75:68:ea:e0:e4:5e:b4:96:eb:ff:62:90:58:f6:03:45: 61:22:3a:56:dd:0b:f5:2d:34:5c:e4:f9:d0:4e:1a:37:86:cf: 65:ed:d7:9d:67:12:bf:0e:e0:a6:cd:f8:b0:95:62:9a:e4:32: d4:21:ae:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLRoARsHtLhH9OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1NFoXDTI1MDYwNDEyMTk1NFowLzEtMCsGA1UEAxMk YjliNDRkYTYtNjFlOS00YjAzLTkwODItOWQ2ZjEyNTk5MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXKOaQ/XH1BpegzNBTPYAZ87YxdaWozwyFTJ IN+5zA6dezCBq4Mcr9YEamVrc3G1pW3frNBv4OJ1icTnB368ROdygMPkKMKWadVR UoD7lWQsIOPRgSQTfj2qCIpX/U6T4mNFTm64Ma7Q4ke9iK9tuv9j8UsFwyv/BGPZ IZ4nd2VrVPjfglfyk2oKN8R2nT//CoTittRiEbOLYd+eaKKzgjP9c4gcjxK6HPs/ Y7W1QE4YaFeflARUG4uAucJQPUDPKPq1/ejUASRXC5/pwrUHRCWHNm5IfyjD85FE 3UyeTXyU+UGg8FivvXZabTkepOjkbYbcV73gIY5UrxczseJ83QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3NgrXO2MH7lSX/VxBwjyaJi0eWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWJiMGEwZmEtZWJhZS0z MWE5LTg1YjQtMTM1Yjg2OTgwOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTS+2NU7ldGfWwTQKAJnsBTaILWgbpENzbDbaNvdIoAwkQbL3Uqx2aR AcXD9fDtvQepHQuEnkpk1JZBKA72kE3YMkkf+gHuynEqvwJEFH6DpM3twl9KOcar yw6euVwV0GKkBSchTFHoaVzfviIPix8obs1aWzYijUxxA74XGl8hHjNSqm8TuK/7 CNU+Uqrv8BnidrbZTZkQiRViEy2eSgrlXQ2WegKALevWhkpGQ9PGH2zx6ZoNJKpH +UXL3sZj45VEZm1YDW8MdWjq4ORetJbr/2KQWPYDRWEiOlbdC/UtNFzk+dBOGjeG z2Xt151nEr8O4KbN+LCVYprkMtQhrns= -----END CERTIFICATE-----Generated at Sat Mar 15 06:20:01 2025 by rpki-client