$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa File: 594c4987-02d1-3bc5-a8c0-729e094b6649.roa (raw, json) Hash identifier: iT4v82q2LK8ab3lVc3Qxq9T5KXZhV60NXVoeIZ5QPaM= Subject key identifier: 6A:96:D0:74:AD:55:77:A8:7F:C4:B9:DC:30:97:7E:A9:CD:F9:CD:EC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461A65971871EF474FB500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1a:65:97:18:71:ef:47:4f:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=4b44197a-a4c3-47db-943f-197a21397aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:f8:5a:4a:69:b5:1e:ad:59:8c:c3:50:c3: 39:80:c3:a3:a5:49:ec:19:47:aa:ea:4d:5e:93:ff: 9f:cb:08:a4:91:e2:28:8d:35:3f:53:79:83:8c:8d: 4a:32:e2:b7:d2:b5:72:2a:fc:7e:51:2d:e2:57:10: 0d:a5:48:73:61:12:2c:8d:9b:42:b1:07:8b:fb:b0: e0:98:2c:c1:0d:8a:f6:e1:c2:c6:eb:65:24:0d:df: 3c:5a:96:d7:e3:e3:70:1b:ba:b4:2a:f1:83:fd:78: 4a:94:53:6e:40:54:7a:88:f6:4b:e0:fb:9f:37:59: de:45:b0:21:0b:8e:ff:af:76:39:f3:57:c8:e1:bd: 3f:e8:41:d5:6e:b9:c7:ce:8a:d3:84:be:40:10:a4: 21:82:bc:e8:5b:f8:cf:f0:e8:9a:ae:fc:37:83:ca: 4b:fa:c2:dc:c1:38:1c:06:4d:2e:66:19:38:8d:12: bc:13:a4:7b:06:2a:29:d1:1f:45:3d:13:89:ac:70: bb:ad:78:91:73:d6:89:65:23:eb:07:11:00:0d:0e: 7b:e4:18:e2:38:e0:ba:0d:ef:3d:1c:41:c5:1b:d1: 27:eb:f9:a3:7e:d9:c1:84:5d:6b:25:c9:be:fb:74: 07:cb:9f:41:2f:ea:d9:a7:72:fd:4b:e5:a7:3f:e3: 99:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:96:D0:74:AD:55:77:A8:7F:C4:B9:DC:30:97:7E:A9:CD:F9:CD:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5a:5a:d6:cd:16:18:1b:a5:c3:1f:4b:70:cc:80:a9:3f:62: f5:c6:56:af:48:f4:48:02:5c:8b:9a:77:9e:45:69:62:de:af: a0:95:02:c7:dd:27:b9:5d:45:28:7a:8b:e8:43:31:50:f2:38: c4:16:b4:b0:6e:cc:1f:65:a5:a0:85:ce:99:d1:be:fb:3a:53: 20:09:f5:50:17:02:a1:b1:e7:22:96:49:5a:cc:66:ce:53:c4: ec:ea:48:00:7b:13:9b:3f:ff:44:f7:7a:5c:db:95:ba:3b:38: 9c:9b:aa:a0:c4:f9:99:91:ec:97:9f:b3:38:f4:f2:ad:15:e7: 39:54:72:ed:53:ac:d7:fc:d0:79:ec:00:17:d4:45:c1:66:36: 15:1b:0a:cc:ce:95:33:46:20:c7:50:b0:59:60:04:8f:33:e6: cf:ce:6f:ac:60:14:61:96:64:f3:49:f5:a6:76:51:6f:a0:7d: 23:97:13:50:7b:df:cb:ae:38:1a:1a:eb:e6:ab:01:a2:6b:21: ea:3e:cf:01:13:b3:e8:81:95:48:68:14:a0:90:92:5c:97:53: 42:9d:35:77:e5:e8:31:f4:5f:68:a0:fc:1f:2c:c9:78:94:f8: 12:86:0f:bc:12:93:71:ee:12:2f:ad:28:dd:33:f8:76:24:3a: 9c:f9:6c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhpllxhx70dPtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NGI0NDE5N2EtYTRjMy00N2RiLTk0M2YtMTk3YTIxMzk3YWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis/4WkpptR6tWYzDUMM5gMOjpUnsGUeq6k1e k/+fywikkeIojTU/U3mDjI1KMuK30rVyKvx+US3iVxANpUhzYRIsjZtCsQeL+7Dg mCzBDYr24cLG62UkDd88WpbX4+NwG7q0KvGD/XhKlFNuQFR6iPZL4PufN1neRbAh C47/r3Y581fI4b0/6EHVbrnHzorThL5AEKQhgrzoW/jP8Oiarvw3g8pL+sLcwTgc Bk0uZhk4jRK8E6R7Biop0R9FPROJrHC7rXiRc9aJZSPrBxEADQ575BjiOOC6De89 HEHFG9En6/mjftnBhF1rJcm++3QHy59BL+rZp3L9S+WnP+OZ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqW0HStVXeof8S53DCXfqnN+c3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTk0YzQ5ODctMDJkMS0z YmM1LWE4YzAtNzI5ZTA5NGI2NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5aWtbNFhgbpcMfS3DMgKk/YvXGVq9I9EgCXIuad55FaWLer6CVAsfd J7ldRSh6i+hDMVDyOMQWtLBuzB9lpaCFzpnRvvs6UyAJ9VAXAqGx5yKWSVrMZs5T xOzqSAB7E5s//0T3elzblbo7OJybqqDE+ZmR7Jefszj08q0V5zlUcu1TrNf80Hns ABfURcFmNhUbCszOlTNGIMdQsFlgBI8z5s/Ob6xgFGGWZPNJ9aZ2UW+gfSOXE1B7 38uuOBoa6+arAaJrIeo+zwETs+iBlUhoFKCQklyXU0KdNXfl6DH0X2ig/B8syXiU +BKGD7wSk3HuEi+tKN0z+HYkOpz5bO4= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:18 2025 by rpki-client