$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa File: 30218baa-fe66-3d19-aa8d-27ecd60001e3.roa (raw, json) Hash identifier: Onfd0E/cyS9RWdScssUMHLmxuVkM2XFywCk2yJqa1fE= Subject key identifier: 9D:58:09:98:D0:90:1F:ED:4B:10:61:5A:A3:6E:A9:72:0E:CA:CD:9A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB3D236BC1E9FD9CFE4B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 65.22.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:3d:23:6b:c1:e9:fd:9c:fe:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=14bbc378-bcaa-4e88-9b32-cb328a469467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:13:a2:d9:ec:32:55:60:f0:1a:34:f7:ac:ec: 11:85:d5:e2:3b:e4:a0:ad:97:b1:14:dd:7a:7b:7d: 3c:bd:c1:cf:0a:ea:f5:cc:d7:83:76:39:54:19:c7: 3c:ec:f7:20:41:b9:71:79:b6:4f:8b:b9:56:f4:11: 16:6e:93:36:b9:23:3e:7f:6d:14:50:6f:0c:4a:2d: 04:7d:4b:55:b4:aa:8a:40:c3:36:46:60:8f:4f:ac: 36:b1:e3:69:55:ed:85:8f:71:3d:07:3b:11:2d:4b: 0f:d1:1a:e3:f2:3d:45:2b:5b:11:50:38:4e:3e:a2: d9:8a:45:45:eb:cf:c6:1e:15:5b:f5:2c:2c:bb:fa: 43:15:8c:5a:30:b7:64:14:94:0b:35:d5:87:36:f2: 95:82:1e:e3:eb:31:bd:99:9c:4f:63:18:f2:1d:e1: b7:c5:6e:37:56:1d:6e:38:d5:8a:72:b1:18:c0:62: 38:45:b4:51:3b:62:cf:30:bc:dd:6a:8c:d6:d2:0b: 1e:3e:19:1e:85:83:0f:35:20:ed:56:f3:82:7a:80: c4:c9:2a:82:57:71:3b:27:15:b4:0f:32:d6:80:b2: 56:be:62:3b:29:77:a7:eb:ce:cd:66:3b:c1:d8:37: 4b:63:97:92:c7:6b:0d:4b:40:47:bc:fa:e9:30:5c: 87:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:58:09:98:D0:90:1F:ED:4B:10:61:5A:A3:6E:A9:72:0E:CA:CD:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8e:52:8a:b9:a1:87:c0:76:e3:56:66:e3:a6:f1:e3:af:12: 4a:72:ba:62:ff:c5:9f:79:c5:b7:71:41:5b:34:59:a4:1e:41: 91:f9:1e:d6:54:24:85:43:96:f4:3d:c1:a2:fc:a2:24:8a:c7: 9c:c4:de:ec:6e:30:b7:c3:b4:d4:3f:53:1b:da:6e:ee:9c:b5: 84:0d:05:d9:88:8a:e8:b8:7e:09:ab:15:f1:6f:41:c9:4c:cd: 63:05:3c:87:27:d6:8f:6f:df:ab:ba:83:d1:60:b2:7a:46:6f: e6:75:11:44:f1:ca:55:40:47:92:75:15:14:be:ac:9e:5d:29: 38:33:2c:26:54:29:3a:ce:23:63:fb:75:16:d5:56:a5:ae:2b: 0f:78:e3:ea:64:d2:97:c5:28:81:88:2e:29:23:9d:c8:d7:f6: b4:40:92:7a:c6:82:47:d4:aa:34:01:28:a9:1b:57:ef:f8:71: ee:8f:bd:68:e2:f6:35:5b:d2:78:24:4e:57:d9:bf:b8:6f:12: 9e:dc:83:60:30:d5:c4:c3:b5:e4:22:e5:05:44:ca:2a:c0:9f: bf:b1:d8:d5:1b:60:2a:7e:4d:de:09:07:a3:57:9e:ea:7f:7e: 82:08:67:5f:9e:07:c5:5f:2d:02:25:cf:7b:8c:d3:61:12:d1: e5:2c:9c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCqz0ja8Hp/Zz+S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk MTRiYmMzNzgtYmNhYS00ZTg4LTliMzItY2IzMjhhNDY5NDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxOi2ewyVWDwGjT3rOwRhdXiO+SgrZexFN16 e308vcHPCur1zNeDdjlUGcc87PcgQblxebZPi7lW9BEWbpM2uSM+f20UUG8MSi0E fUtVtKqKQMM2RmCPT6w2seNpVe2Fj3E9BzsRLUsP0Rrj8j1FK1sRUDhOPqLZikVF 68/GHhVb9Swsu/pDFYxaMLdkFJQLNdWHNvKVgh7j6zG9mZxPYxjyHeG3xW43Vh1u ONWKcrEYwGI4RbRRO2LPMLzdaozW0gsePhkehYMPNSDtVvOCeoDEySqCV3E7JxW0 DzLWgLJWvmI7KXen687NZjvB2DdLY5eSx2sNS0BHvPrpMFyHowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1YCZjQkB/tSxBhWqNuqXIOys2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzAyMThiYWEtZmU2Ni0z ZDE5LWFhOGQtMjdlY2Q2MDAwMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuOUoq5oYfAduNWZuOm8eOvEkpyumL/xZ95xbdxQVs0WaQeQZH5HtZU JIVDlvQ9waL8oiSKx5zE3uxuMLfDtNQ/Uxvabu6ctYQNBdmIiui4fgmrFfFvQclM zWMFPIcn1o9v36u6g9FgsnpGb+Z1EUTxylVAR5J1FRS+rJ5dKTgzLCZUKTrOI2P7 dRbVVqWuKw944+pk0pfFKIGILikjncjX9rRAknrGgkfUqjQBKKkbV+/4ce6PvWji 9jVb0ngkTlfZv7hvEp7cg2Aw1cTDteQi5QVEyirAn7+x2NUbYCp+Td4JB6NXnup/ foIIZ1+eB8VfLQIlz3uM02ES0eUsnJw= -----END CERTIFICATE-----Generated at Thu Aug 7 13:10:22 2025 by rpki-client