$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/22ec627c-aa84-3540-acff-80f50e93a6a0.roa File: 22ec627c-aa84-3540-acff-80f50e93a6a0.roa (raw, json) Hash identifier: Zwmo+/q93ily8jiKYC7H9ZZvmCqc0zjCP6KXYczu5mE= Subject key identifier: C6:3E:DA:D2:02:F4:E4:84:B0:7F:EE:C3:31:F7:12:E2:D7:3F:4B:30 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB3F4BD29689D384C8DE80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/22ec627c-aa84-3540-acff-80f50e93a6a0.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 65.22.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:3f:4b:d2:96:89:d3:84:c8:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=838a3ceb-0c1d-4ca3-9d66-51353d5f01a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:29:85:33:64:4f:b6:26:ae:22:50:e2:74:dc: d2:0e:d2:20:3f:b5:62:d6:cd:4c:1a:84:da:62:1d: ad:b0:18:ae:72:de:b4:9f:b3:73:ff:47:bc:9e:0c: c0:1f:b0:ff:fb:22:d7:7f:ac:d0:1a:e3:9f:92:35: cd:c5:bd:a5:aa:a4:3d:f8:20:fe:02:26:43:04:09: c0:0b:f3:ca:36:7c:ce:48:96:b6:05:14:83:d6:c1: 5b:4f:5c:df:06:04:0e:1d:9d:36:cb:44:ca:3a:6e: 23:23:f8:03:a3:ea:3b:85:62:af:aa:af:fb:32:99: 38:fd:fa:e5:b4:d9:ad:e1:86:88:38:79:84:bc:a3: 8e:b4:88:36:e2:7e:f7:51:1a:92:fe:15:be:5b:31: 31:d1:c5:c1:79:9e:36:81:25:af:98:9f:be:79:a2: 02:8d:da:20:3d:49:b7:1b:89:a6:db:43:46:ff:e7: 10:79:bc:ed:d9:d7:26:98:8b:23:2c:52:4d:e8:b0: 77:72:8e:fe:49:ae:08:51:b1:f9:96:87:14:ca:c6: 5e:45:36:7a:53:1a:c3:07:92:db:4b:74:11:af:d7: 89:14:81:aa:23:39:1c:2e:1e:f7:e3:40:51:30:cb: c0:c2:ec:67:de:20:d3:af:55:3c:0e:2d:3e:0a:e2: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3E:DA:D2:02:F4:E4:84:B0:7F:EE:C3:31:F7:12:E2:D7:3F:4B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/22ec627c-aa84-3540-acff-80f50e93a6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:97:82:66:f4:6b:12:b1:f7:37:54:a0:f6:ce:44:0e:1a:bd: 41:bd:d6:22:a5:2a:17:66:af:c8:06:59:c6:3e:ff:3d:54:9b: 61:9b:a3:05:38:28:60:28:1f:ed:19:87:13:49:1d:24:57:a5: c0:df:0b:c0:06:00:5c:e0:fa:87:51:e8:6c:5a:56:65:6d:29: 22:30:6b:cd:11:5b:a3:05:39:e5:61:ad:a7:62:93:ea:ec:64: da:14:b3:bc:8c:c2:f2:19:ef:fa:22:ab:84:22:ad:46:5e:62: 8f:83:9e:b2:1c:9e:c2:58:c6:b8:bb:5c:51:0c:ba:3a:e6:8c: ce:18:db:d0:c4:c8:af:07:45:41:40:86:c1:9a:e2:d1:36:81: 98:90:0e:5f:7b:62:ed:0d:18:b7:3d:05:ae:4b:a2:d6:7f:7d: 45:1a:e2:c3:1c:02:fd:84:c7:a6:d7:d3:a7:6c:62:3f:c8:d5: d1:af:46:c7:43:c9:6a:66:09:84:d4:10:28:bc:95:ae:63:e9: a0:58:2c:6d:c1:e1:e6:63:97:61:ba:46:9b:54:6a:9b:75:d3: 58:2c:6e:da:45:33:31:8b:12:f6:49:2d:66:9b:8f:c2:01:c5: 5a:6d:8f:8d:2c:26:e4:ac:75:e2:b8:cc:c1:78:46:86:30:c7: 6f:ae:8c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCqz9L0paJ04TI3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk ODM4YTNjZWItMGMxZC00Y2EzLTlkNjYtNTEzNTNkNWYwMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCmFM2RPtiauIlDidNzSDtIgP7Vi1s1MGoTa Yh2tsBiuct60n7Nz/0e8ngzAH7D/+yLXf6zQGuOfkjXNxb2lqqQ9+CD+AiZDBAnA C/PKNnzOSJa2BRSD1sFbT1zfBgQOHZ02y0TKOm4jI/gDo+o7hWKvqq/7Mpk4/frl tNmt4YaIOHmEvKOOtIg24n73URqS/hW+WzEx0cXBeZ42gSWvmJ++eaICjdogPUm3 G4mm20NG/+cQebzt2dcmmIsjLFJN6LB3co7+Sa4IUbH5locUysZeRTZ6UxrDB5Lb S3QRr9eJFIGqIzkcLh7340BRMMvAwuxn3iDTr1U8Di0+CuLRPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY+2tIC9OSEsH/uwzH3EuLXP0swMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjJlYzYyN2MtYWE4NC0z NTQwLWFjZmYtODBmNTBlOTNhNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOXgmb0axKx9zdUoPbORA4avUG91iKlKhdmr8gGWcY+/z1Um2GbowU4 KGAoH+0ZhxNJHSRXpcDfC8AGAFzg+odR6GxaVmVtKSIwa80RW6MFOeVhradik+rs ZNoUs7yMwvIZ7/oiq4QirUZeYo+DnrIcnsJYxri7XFEMujrmjM4Y29DEyK8HRUFA hsGa4tE2gZiQDl97Yu0NGLc9Ba5LotZ/fUUa4sMcAv2Ex6bX06dsYj/I1dGvRsdD yWpmCYTUECi8la5j6aBYLG3B4eZjl2G6RptUapt101gsbtpFMzGLEvZJLWabj8IB xVptj40sJuSsdeK4zMF4RoYwx2+ujEA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:02 2025 by rpki-client