$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa File: 4575c36b-b988-3070-998f-2c18e11901f4.roa (raw, json) Hash identifier: yEqgxN0iPlM8NtnRCGC0OXCBuIFyXRRSHgMXN4jC8SA= Subject key identifier: 08:09:BC:10:40:31:D3:28:5C:3E:46:9B:5E:B9:31:FA:F8:E3:8B:7F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460C369B55653EA8D0EC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0c:36:9b:55:65:3e:a8:d0:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=da56b688-1ea7-4021-a189-53a4f2f4a4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3f:0b:ec:2e:fb:3f:0e:64:18:6f:9e:f8:65: 23:c9:db:dc:e6:4e:59:d3:a6:e7:e5:76:90:a0:f5: d8:d0:a2:b1:48:9a:53:8d:3d:3c:14:01:e6:f1:fc: 6a:5b:c1:e3:e0:ab:26:bc:3f:ff:d5:0a:1e:e4:09: 68:dc:b1:20:bb:67:be:4e:b2:62:6a:78:8c:ea:89: bc:f8:63:53:6d:00:47:0d:33:01:09:62:88:c6:b0: 79:ef:17:ec:18:51:cf:d7:7a:56:81:77:ce:e0:16: 85:b9:24:ba:0d:d7:9c:d4:fe:70:e4:b1:60:bf:ef: 62:2e:2c:16:22:c1:b4:1b:f5:43:1e:a2:26:97:e8: 07:96:b5:59:cb:9a:42:70:7f:dc:7b:a4:cc:d3:a2: 19:b8:db:33:2a:8a:45:9b:4e:1f:d1:4c:0b:f1:60: 4b:0a:a0:9f:0b:3a:77:37:c0:75:5c:79:5d:08:0f: 0c:b7:b5:e9:0a:57:07:4c:39:36:d9:cf:3b:2a:44: d9:3a:97:bf:7b:59:ae:ea:03:7a:5c:4d:be:aa:9d: f3:48:5c:5b:00:76:bb:f1:e9:ac:5a:22:19:80:8d: 87:01:d6:1b:32:df:98:0f:43:ac:94:5f:8b:19:e1: ea:ca:4e:89:a2:22:0c:55:41:85:78:d5:d6:00:7d: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:09:BC:10:40:31:D3:28:5C:3E:46:9B:5E:B9:31:FA:F8:E3:8B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:22:94:2d:91:aa:9a:b1:70:87:ad:f6:e0:56:c6:9c:af:d8: 13:f7:26:3a:f8:bc:fa:a5:4c:d5:a2:09:14:8c:2b:24:3e:1d: 36:b4:e2:93:a2:29:bf:2f:6b:9b:95:23:3f:3b:40:51:60:de: 05:cc:83:b7:1d:61:11:10:a9:2f:79:48:4e:ef:56:60:d5:46: 78:ad:b0:28:0e:a0:d1:27:10:5f:8b:77:ce:af:a7:5b:1a:ab: ce:1b:16:c3:25:0d:b0:98:22:e4:e4:7d:61:39:e1:39:1b:60: df:d0:86:d7:7f:ec:78:c4:e1:f6:23:47:62:a9:c3:a5:39:ce: dd:3e:5f:33:38:6c:a4:69:6a:db:5a:3e:7b:05:1e:8e:8d:e6: dc:21:62:46:ad:12:a1:f6:8c:c6:1c:18:5d:5a:6d:40:ab:9e: 5b:89:d7:21:30:16:7c:8b:04:1f:ec:c4:51:94:82:2c:da:bb: 3b:cb:32:07:be:29:53:94:ea:04:13:00:e9:54:f7:f2:62:99: 2f:71:7e:3a:e2:4b:dc:e5:48:0c:80:50:e0:45:35:3b:62:2c: 5c:2e:b7:90:30:57:82:2a:0d:f9:62:b7:d1:88:a3:d6:92:3d: 26:f0:4f:d2:68:00:8a:2a:9e:c3:e9:9e:00:4e:1e:46:4f:31: 1e:72:49:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgw2m1VlPqjQ7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZGE1NmI2ODgtMWVhNy00MDIxLWExODktNTNhNGYyZjRhNGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz8L7C77Pw5kGG+e+GUjydvc5k5Z06bn5XaQ oPXY0KKxSJpTjT08FAHm8fxqW8Hj4KsmvD//1Qoe5Alo3LEgu2e+TrJianiM6om8 +GNTbQBHDTMBCWKIxrB57xfsGFHP13pWgXfO4BaFuSS6Ddec1P5w5LFgv+9iLiwW IsG0G/VDHqIml+gHlrVZy5pCcH/ce6TM06IZuNszKopFm04f0UwL8WBLCqCfCzp3 N8B1XHldCA8Mt7XpClcHTDk22c87KkTZOpe/e1mu6gN6XE2+qp3zSFxbAHa78ems WiIZgI2HAdYbMt+YD0OslF+LGeHqyk6JoiIMVUGFeNXWAH0PyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgJvBBAMdMoXD5Gm165Mfr444t/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDU3NWMzNmItYjk4OC0z MDcwLTk5OGYtMmMxOGUxMTkwMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIilC2RqpqxcIet9uBWxpyv2BP3Jjr4vPqlTNWiCRSMKyQ+HTa04pOi Kb8va5uVIz87QFFg3gXMg7cdYREQqS95SE7vVmDVRnitsCgOoNEnEF+Ld86vp1sa q84bFsMlDbCYIuTkfWE54TkbYN/Qhtd/7HjE4fYjR2Kpw6U5zt0+XzM4bKRpatta PnsFHo6N5twhYkatEqH2jMYcGF1abUCrnluJ1yEwFnyLBB/sxFGUgizauzvLMge+ KVOU6gQTAOlU9/JimS9xfjriS9zlSAyAUOBFNTtiLFwut5AwV4IqDflit9GIo9aS PSbwT9JoAIoqnsPpngBOHkZPMR5ySfk= -----END CERTIFICATE-----Generated at Thu Aug 7 01:16:04 2025 by rpki-client