$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa File: 1bea22db-543c-392b-894a-1a3fd5009750.roa (raw, json) Hash identifier: MNhFD8YpDMWMNJHQq7R1aa4CxcxlJ5RhvkZzhDA+r54= Subject key identifier: AF:C1:CF:10:92:74:65:0F:AB:FD:F3:33:03:D4:7E:1F:EE:2F:81:64 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8146112B1E8D431F077B2C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:11:2b:1e:8d:43:1f:07:7b:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a48c5a31-ed13-4129-8881-aad4b2224ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:db:9c:18:56:9f:04:e7:90:36:d5:f4:76: b0:cb:f0:4d:f0:04:3f:55:76:61:bc:4e:5d:12:fd: 99:15:5d:e3:41:90:e1:8b:aa:2c:5a:4c:17:11:6c: 2e:a2:5b:a5:7d:35:83:fd:3d:55:fa:6f:9f:4f:56: a4:76:76:b1:fd:dd:59:dd:3e:2f:28:f2:c4:77:46: a7:98:52:ae:49:fe:35:96:51:81:57:30:23:59:25: 79:10:5b:93:d2:dc:1c:f0:01:b7:06:d8:21:7b:d7: 53:e7:7b:5f:c3:01:a7:35:11:65:63:f7:db:56:23: 0d:c7:a2:c3:e6:6e:48:fc:9c:3d:91:f0:f6:1a:ab: 28:69:24:da:06:4c:34:dd:31:30:de:02:26:ca:4b: ee:f3:0f:52:02:74:31:0a:93:34:da:40:d4:27:4d: d6:54:8d:40:d0:32:32:f4:ff:cf:e1:10:8a:93:a1: b3:d1:91:07:3c:57:35:97:85:36:8e:d0:c2:c1:fc: 5a:c4:93:1b:89:ab:46:35:61:e8:1d:c2:95:5a:bb: dd:ac:ee:36:40:11:d7:ff:e7:ca:cf:47:7f:78:04: 79:c0:78:fd:2b:3c:de:ff:4f:ce:00:d9:f2:64:51: 66:b1:9f:ad:4f:e2:8f:6d:81:33:5e:4d:ec:af:c3: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C1:CF:10:92:74:65:0F:AB:FD:F3:33:03:D4:7E:1F:EE:2F:81:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:bd:16:e4:b7:ac:40:a1:ae:2e:f4:ec:7c:79:d0:9c:1d:5b: 86:da:80:07:4d:77:d6:df:0c:fe:93:8d:5d:a9:71:a8:05:6e: 35:a1:a8:bf:54:58:e1:c5:e0:c4:fc:6d:c0:eb:25:0a:3f:64: 07:b4:8c:60:5b:98:00:68:1d:b0:56:d1:32:71:2e:16:f2:92: fd:9b:57:d2:b3:4b:5e:88:36:ad:b5:bf:e9:52:b2:12:5c:8b: ba:b8:6f:6d:9b:e3:d6:f1:c0:d9:2d:48:46:2c:b3:b6:21:ed: b5:40:59:d8:5a:04:a7:69:99:4c:75:4e:32:60:77:9b:27:0c: ff:5c:d6:66:72:f1:46:fe:de:2f:6c:63:71:20:70:35:f0:db: 00:f7:87:17:75:54:88:c7:d6:a0:e1:49:49:d7:ee:b6:cd:9c: 7e:ca:ce:2e:19:f4:1d:21:ad:c1:9b:44:96:e5:af:df:96:3b: 6c:04:86:e8:c9:c5:d6:96:4b:4a:c7:27:7e:c1:44:45:cf:7c: 8d:93:dc:e5:c7:ea:84:ce:6c:23:97:ae:29:a8:de:cc:a0:9f: 1b:c4:5c:0d:5c:86:b2:fb:34:83:fa:f8:87:bc:f4:c7:b8:3a: f0:b4:78:9f:99:6b:99:cf:3b:19:8a:d4:a4:d8:5a:ba:26:99: 91:19:70:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhErHo1DHwd7LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YTQ4YzVhMzEtZWQxMy00MTI5LTg4ODEtYWFkNGIyMjI0YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4fbnBhWnwTnkDbV9Hawy/BN8AQ/VXZhvE5d Ev2ZFV3jQZDhi6osWkwXEWwuolulfTWD/T1V+m+fT1akdnax/d1Z3T4vKPLEd0an mFKuSf41llGBVzAjWSV5EFuT0twc8AG3Btghe9dT53tfwwGnNRFlY/fbViMNx6LD 5m5I/Jw9kfD2GqsoaSTaBkw03TEw3gImykvu8w9SAnQxCpM02kDUJ03WVI1A0DIy 9P/P4RCKk6Gz0ZEHPFc1l4U2jtDCwfxaxJMbiatGNWHoHcKVWrvdrO42QBHX/+fK z0d/eAR5wHj9Kzze/0/OANnyZFFmsZ+tT+KPbYEzXk3sr8M4BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/BzxCSdGUPq/3zMwPUfh/uL4FkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWJlYTIyZGItNTQzYy0z OTJiLTg5NGEtMWEzZmQ1MDA5NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW9FuS3rEChri707Hx50JwdW4bagAdNd9bfDP6TjV2pcagFbjWhqL9U WOHF4MT8bcDrJQo/ZAe0jGBbmABoHbBW0TJxLhbykv2bV9KzS16INq21v+lSshJc i7q4b22b49bxwNktSEYss7Yh7bVAWdhaBKdpmUx1TjJgd5snDP9c1mZy8Ub+3i9s Y3EgcDXw2wD3hxd1VIjH1qDhSUnX7rbNnH7Kzi4Z9B0hrcGbRJblr9+WO2wEhujJ xdaWS0rHJ37BREXPfI2T3OXH6oTObCOXrimo3sygnxvEXA1chrL7NIP6+Ie89Me4 OvC0eJ+Za5nPOxmK1KTYWrommZEZcAU= -----END CERTIFICATE-----Generated at Thu Aug 7 01:05:00 2025 by rpki-client