$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7540b130-6fba-38b7-8963-c3b1a53f826e.roa File: 7540b130-6fba-38b7-8963-c3b1a53f826e.roa (raw, json) Hash identifier: 4jLPRzKlwmDH43E7eq05BnbzmHSdU01tdKUtqJHRJZs= Subject key identifier: 8E:A1:80:E8:05:EB:47:EF:9B:AA:B0:0B:38:00:17:CB:74:D2:7E:06 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460B4BDC68EA342B641A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7540b130-6fba-38b7-8963-c3b1a53f826e.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0b:4b:dc:68:ea:34:2b:64:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a24000b6-19bd-4669-8041-6119b1eef696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b1:92:29:df:96:d7:4a:b2:0f:cd:3e:6e:58: ca:91:07:44:48:34:46:55:50:4b:73:30:ce:29:e4: 31:9c:50:c9:40:41:4e:f0:84:82:47:20:c1:ee:ad: fa:4c:87:a9:ac:89:48:8d:6b:1a:1a:88:b5:ea:b6: 00:d3:8b:23:f2:d9:2d:1b:b5:85:bf:d6:fe:3f:97: d1:0c:c6:69:2b:47:9e:56:c0:bd:5b:ce:9c:6d:c5: 53:e6:c1:1b:af:03:ef:2e:9b:d4:2b:4e:53:3e:cd: ae:9e:9e:1b:07:2a:89:01:08:5f:36:d3:fe:f3:dd: 95:0b:40:6d:08:06:3f:32:07:03:15:cb:03:98:c5: ee:9b:e0:93:1d:9c:99:75:32:8b:95:7c:c4:4c:a4: 91:83:ad:b2:dc:b7:9f:1e:d7:a2:67:2d:4c:9a:f9: cb:e7:f2:61:58:44:76:29:71:4e:45:f6:b1:dc:66: 29:cb:8c:b3:52:ef:28:82:12:e2:fc:99:b8:f5:6c: 3e:72:88:5d:bf:88:6f:53:ba:d9:ba:c2:c3:50:08: b5:10:74:8b:82:2c:71:29:37:b2:24:c5:1e:64:34: cf:9c:c3:e2:c5:49:d9:46:04:0c:91:41:eb:3d:c5: fe:1b:b2:aa:da:72:ec:2d:c7:79:b4:ae:34:f9:7f: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A1:80:E8:05:EB:47:EF:9B:AA:B0:0B:38:00:17:CB:74:D2:7E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7540b130-6fba-38b7-8963-c3b1a53f826e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:37:31:e7:f6:e4:5e:cb:a0:03:d5:57:b8:9b:4c:2c:5b:6d: b2:4a:ea:25:e5:13:dc:97:fb:fb:24:8f:98:a2:11:ed:e6:a6: aa:93:5e:d5:1b:f2:d9:76:a5:b9:cd:97:81:4b:f9:cd:14:1d: b3:60:41:22:83:18:3e:a5:f0:63:d9:69:b3:c6:31:d5:60:8f: 8a:ab:48:1c:2c:34:7e:21:35:7b:df:ad:47:2d:d1:e8:d4:4d: 23:58:ba:8a:ec:55:8f:22:b9:ae:d1:2f:c0:65:4d:20:4b:c5: 1c:54:6c:c3:bd:65:31:a6:4f:33:a3:34:44:97:78:49:7f:a9: 1f:91:1f:d1:43:54:d0:e3:21:eb:09:37:98:a8:6f:61:3b:3d: b5:7c:43:b7:bb:8d:c9:38:fb:e9:79:b0:09:1f:c6:39:4b:3e: 09:06:37:24:f2:18:9f:71:92:4c:a5:5c:28:01:60:8e:0d:33: 2d:ea:6a:e4:f6:11:d5:d4:68:6c:68:2b:a7:c6:14:1d:10:55: 71:7c:29:2e:ca:a9:1d:a9:25:fa:0c:e9:89:e5:09:f9:5a:25: d3:6c:47:12:42:07:04:83:73:9f:b6:45:65:cf:a5:25:a9:2d: 0d:09:04:4e:86:da:4d:26:c8:db:fd:ad:06:0c:2c:2b:e3:ec: 65:a1:d8:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgtL3GjqNCtkGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YTI0MDAwYjYtMTliZC00NjY5LTgwNDEtNjExOWIxZWVmNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7GSKd+W10qyD80+bljKkQdESDRGVVBLczDO KeQxnFDJQEFO8ISCRyDB7q36TIeprIlIjWsaGoi16rYA04sj8tktG7WFv9b+P5fR DMZpK0eeVsC9W86cbcVT5sEbrwPvLpvUK05TPs2unp4bByqJAQhfNtP+892VC0Bt CAY/MgcDFcsDmMXum+CTHZyZdTKLlXzETKSRg62y3LefHteiZy1MmvnL5/JhWER2 KXFORfax3GYpy4yzUu8oghLi/Jm49Ww+cohdv4hvU7rZusLDUAi1EHSLgixxKTey JMUeZDTPnMPixUnZRgQMkUHrPcX+G7Kq2nLsLcd5tK40+X9jfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6hgOgF60fvm6qwCzgAF8t00n4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzU0MGIxMzAtNmZiYS0z OGI3LTg5NjMtYzNiMWE1M2Y4MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI3Mef25F7LoAPVV7ibTCxbbbJK6iXlE9yX+/skj5iiEe3mpqqTXtUb 8tl2pbnNl4FL+c0UHbNgQSKDGD6l8GPZabPGMdVgj4qrSBwsNH4hNXvfrUct0ejU TSNYuorsVY8iua7RL8BlTSBLxRxUbMO9ZTGmTzOjNESXeEl/qR+RH9FDVNDjIesJ N5iob2E7PbV8Q7e7jck4++l5sAkfxjlLPgkGNyTyGJ9xkkylXCgBYI4NMy3qauT2 EdXUaGxoK6fGFB0QVXF8KS7KqR2pJfoM6YnlCflaJdNsRxJCBwSDc5+2RWXPpSWp LQ0JBE6G2k0myNv9rQYMLCvj7GWh2IU= -----END CERTIFICATE-----Generated at Thu Aug 7 03:23:11 2025 by rpki-client