$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa File: 37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa (raw, json) Hash identifier: Y6YfBBNggCs+I8UoOWd3RV1Rj3vNpKdzjWODEBeb7cg= Subject key identifier: 20:84:85:44:F8:75:00:C3:1C:94:A6:8A:2E:F7:B0:37:47:09:73:B4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461A555212387EC55D3680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1a:55:52:12:38:7e:c5:5d:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a68ae8c0-e37b-4c31-9485-a0dd9af00d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b0:16:c2:a8:91:6b:24:06:77:8d:13:1e:ef: cc:d7:d1:cd:e6:b2:aa:ae:fc:c9:0a:70:c5:3d:49: 0e:ff:a0:26:1a:86:ef:4b:81:27:b1:09:23:c4:c0: 65:79:9c:9e:78:58:d7:ad:a2:ab:46:3d:3b:e2:a8: ec:8a:62:72:13:11:70:22:f1:c9:78:98:dd:d4:8f: 03:6f:00:42:ff:f6:87:72:85:83:e0:c1:20:85:10: 29:05:e1:b4:a2:a8:c3:e9:83:7d:6d:7b:19:e6:b5: ca:97:99:45:3b:a7:3f:bb:fd:82:3b:0a:50:99:78: 0d:8a:d8:6c:0c:e1:bf:94:c4:9c:b7:4a:b7:c2:0b: a0:65:a8:5a:48:ff:dc:be:53:24:0f:e7:05:48:23: e8:77:4f:c0:66:75:e1:51:a2:2a:36:b0:d5:29:38: 5b:50:27:2c:6e:73:f4:42:68:64:43:10:2c:ad:b3: 07:b5:18:aa:f7:3e:0c:33:7b:89:70:9b:97:d2:5b: d3:db:5c:2b:df:8b:63:00:28:45:36:97:67:1a:ae: f3:3c:bd:50:36:15:46:7a:0f:a7:6d:65:ad:fc:2a: 5b:90:82:b4:f9:3a:a6:a8:0d:4c:69:79:fc:97:ae: 34:d6:87:6e:db:49:cf:ef:3d:b9:85:3f:ff:6c:07: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:84:85:44:F8:75:00:C3:1C:94:A6:8A:2E:F7:B0:37:47:09:73:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0b:3c:ff:ab:ee:1e:c0:0e:36:63:cd:8d:ba:54:7d:d0:3e: a9:d3:34:79:2f:3c:b0:88:3c:16:c9:8d:01:bf:29:26:b9:a0: e3:91:40:d4:9d:98:9d:c8:3d:89:59:3f:74:e6:83:5b:ae:db: a7:40:8a:b3:cd:63:5b:22:b4:d6:70:f9:1d:b1:67:7c:dc:f5: 69:fc:7d:5d:7f:5e:71:cf:4e:49:6f:ab:e5:aa:56:53:5f:ee: 08:67:0c:0d:7d:83:24:c0:37:f3:46:56:f5:1f:3e:3a:45:86: cf:29:14:f2:0a:35:49:c9:1a:aa:5c:6c:b5:a7:6f:70:02:67: 5e:34:c4:b3:4d:18:e0:f0:83:ad:85:6d:15:2e:59:3c:fa:b8: bd:0b:48:58:fd:fd:4e:c4:c7:aa:dc:47:3b:ee:a4:c8:90:2b: bd:83:30:5c:e0:42:e2:1f:f4:2f:65:6a:1b:bc:6d:80:5e:cd: 82:f1:07:a0:e4:da:61:3d:54:c9:b8:5b:19:7e:81:d0:e6:08: 64:d8:af:b4:89:eb:3a:94:ef:77:c1:67:7f:f1:d0:e8:50:eb: eb:ad:1f:31:cf:d9:b4:e7:af:d9:21:f3:7f:b4:4e:ff:e7:64: fc:44:9a:ad:bc:57:5b:ca:d9:78:0e:b7:57:96:3d:3e:33:09: bb:cf:f7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhpVUhI4fsVdNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YTY4YWU4YzAtZTM3Yi00YzMxLTk0ODUtYTBkZDlhZjAwZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbAWwqiRayQGd40THu/M19HN5rKqrvzJCnDF PUkO/6AmGobvS4EnsQkjxMBleZyeeFjXraKrRj074qjsimJyExFwIvHJeJjd1I8D bwBC//aHcoWD4MEghRApBeG0oqjD6YN9bXsZ5rXKl5lFO6c/u/2COwpQmXgNiths DOG/lMSct0q3wgugZahaSP/cvlMkD+cFSCPod0/AZnXhUaIqNrDVKThbUCcsbnP0 QmhkQxAsrbMHtRiq9z4MM3uJcJuX0lvT21wr34tjAChFNpdnGq7zPL1QNhVGeg+n bWWt/CpbkIK0+TqmqA1MaXn8l6401odu20nP7z25hT//bAfDmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCEhUT4dQDDHJSmii73sDdHCXO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzdhMWZkZTgtNjQ5NC0z YTJkLThjMmYtN2ZhNjdlNWNiOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgLPP+r7h7ADjZjzY26VH3QPqnTNHkvPLCIPBbJjQG/KSa5oOORQNSd mJ3IPYlZP3Tmg1uu26dAirPNY1sitNZw+R2xZ3zc9Wn8fV1/XnHPTklvq+WqVlNf 7ghnDA19gyTAN/NGVvUfPjpFhs8pFPIKNUnJGqpcbLWnb3ACZ140xLNNGODwg62F bRUuWTz6uL0LSFj9/U7Ex6rcRzvupMiQK72DMFzgQuIf9C9lahu8bYBezYLxB6Dk 2mE9VMm4Wxl+gdDmCGTYr7SJ6zqU73fBZ3/x0OhQ6+utHzHP2bTnr9kh83+0Tv/n ZPxEmq28V1vK2XgOt1eWPT4zCbvP99Y= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:25 2025 by rpki-client