$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa File: 4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa (raw, json) Hash identifier: BrYQUfDAtEb3yfK3I8Jdzc74+CAJvkpAPcDVj1eGkCA= Subject key identifier: CE:BC:C0:CE:D4:2B:A8:09:76:D2:88:4C:72:E8:2C:2B:1E:0C:B5:E9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814614E309F3FBC84DABFF80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:14:e3:09:f3:fb:c8:4d:ab:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=c008a670-1967-46a6-a578-bd57dc2c7346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:da:bd:db:0c:79:f1:d7:19:0b:4c:d0:1a:dd: 60:70:7d:35:cc:42:bf:7c:11:5d:06:7b:11:a1:2c: 83:34:b2:af:da:af:a3:57:6f:fd:98:20:3f:3d:eb: 38:c1:db:36:6d:21:52:e0:24:83:8b:e1:8f:8a:fe: 93:80:fd:e8:64:8a:eb:1c:52:a8:97:07:e5:26:2b: 9f:e1:07:90:79:c7:a9:bb:ff:c3:f0:db:8e:3d:09: 73:5e:31:5b:c8:bc:e1:e5:80:fd:d3:69:97:b6:a4: 26:55:ef:a3:4b:e7:d4:1f:c4:ad:6f:36:4d:7a:bf: 2f:04:e0:bc:17:e7:f4:ef:de:41:f9:fe:5d:93:8c: 98:e0:75:79:67:db:93:3d:dd:3b:9d:a2:61:7e:e8: e2:09:4a:f4:70:ff:bc:b7:3f:2b:39:ba:49:a4:45: 7b:a0:de:99:a8:49:af:d9:cb:8b:39:58:c5:ef:d4: 41:77:6b:9e:d3:27:f4:a9:ff:14:e4:d3:44:8d:a1: e9:dd:10:0f:49:4c:82:52:dd:ca:cf:11:55:01:7f: ca:f2:4f:85:f2:fc:07:0c:cf:44:36:3a:9d:0f:df: 15:f9:e0:32:33:92:14:e6:99:26:b0:7e:c5:aa:67: e5:b4:99:77:38:aa:60:82:94:ab:7b:f6:8d:16:d9: 18:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BC:C0:CE:D4:2B:A8:09:76:D2:88:4C:72:E8:2C:2B:1E:0C:B5:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:30:17:ef:20:a1:05:fe:b9:7a:c3:bb:aa:50:6f:43:f9:0a: b3:90:1a:7b:ce:e2:8d:50:bf:3d:f8:14:26:d9:92:a0:6f:58: 71:e4:10:7b:a5:2c:70:09:06:93:53:a7:df:a6:d9:17:4b:15: dc:32:38:76:aa:8b:44:33:00:e2:76:9a:c1:a7:cc:fa:df:f8: 47:0e:d0:8a:ca:86:d2:a8:f9:49:04:62:e2:2d:dc:f0:2d:28: a2:75:80:30:3e:e2:da:28:ac:50:80:72:7e:a2:17:b7:e4:6d: da:57:b1:40:ee:41:83:a9:fa:91:16:e9:eb:45:6f:98:a7:b4: ce:dc:c1:dc:ba:08:a2:24:9c:3d:2f:c9:6c:28:b6:ca:a7:24: 3f:26:8d:1d:6a:48:8b:04:5a:e9:81:c8:c9:44:8d:09:ed:17: 88:51:48:94:7b:3f:04:c4:f2:2a:57:2b:6f:41:34:a2:5c:df: 69:69:f1:67:20:39:26:f8:4b:eb:a4:d9:5d:77:9a:5f:1f:83: 8d:4f:c2:e7:a1:ba:e8:cc:e6:4e:8e:9a:42:dd:44:68:d7:32: 67:08:9e:c7:1f:a7:33:07:fa:04:c0:cc:85:fe:e2:f0:b2:a7: d6:0f:d2:2e:8d:b8:54:c5:a4:28:fc:0c:93:27:2d:96:66:2f: a6:94:d2:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhTjCfP7yE2r/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YzAwOGE2NzAtMTk2Ny00NmE2LWE1NzgtYmQ1N2RjMmM3MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9q92wx58dcZC0zQGt1gcH01zEK/fBFdBnsR oSyDNLKv2q+jV2/9mCA/Pes4wds2bSFS4CSDi+GPiv6TgP3oZIrrHFKolwflJiuf 4QeQecepu//D8NuOPQlzXjFbyLzh5YD902mXtqQmVe+jS+fUH8StbzZNer8vBOC8 F+f0795B+f5dk4yY4HV5Z9uTPd07naJhfujiCUr0cP+8tz8rObpJpEV7oN6ZqEmv 2cuLOVjF79RBd2ue0yf0qf8U5NNEjaHp3RAPSUyCUt3KzxFVAX/K8k+F8vwHDM9E NjqdD98V+eAyM5IU5pkmsH7FqmfltJl3OKpggpSre/aNFtkYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM68wM7UK6gJdtKITHLoLCseDLXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGJkMmYwMTMtNjU2OC0z OWU4LTljZTMtMWExMDY4ZjI4MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0wF+8goQX+uXrDu6pQb0P5CrOQGnvO4o1Qvz34FCbZkqBvWHHkEHul LHAJBpNTp9+m2RdLFdwyOHaqi0QzAOJ2msGnzPrf+EcO0IrKhtKo+UkEYuIt3PAt KKJ1gDA+4toorFCAcn6iF7fkbdpXsUDuQYOp+pEW6etFb5intM7cwdy6CKIknD0v yWwotsqnJD8mjR1qSIsEWumByMlEjQntF4hRSJR7PwTE8ipXK29BNKJc32lp8Wcg OSb4S+uk2V13ml8fg41PwuehuujM5k6OmkLdRGjXMmcInscfpzMH+gTAzIX+4vCy p9YP0i6NuFTFpCj8DJMnLZZmL6aU0pU= -----END CERTIFICATE-----Generated at Thu Aug 7 01:20:11 2025 by rpki-client