$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7b10ad56-19b4-3d60-97da-19aa34d4c863.roa File: 7b10ad56-19b4-3d60-97da-19aa34d4c863.roa (raw, json) Hash identifier: ZHo+EdnkU6mSuH8oR6Ob4a+oEsw4oeeW0m0KQA2J1Tc= Subject key identifier: 67:E5:7C:F7:74:10:3A:76:3D:A3:3D:D6:45:40:6E:48:88:EF:DD:82 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814609CDAEFB1843F6AD7680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7b10ad56-19b4-3d60-97da-19aa34d4c863.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:09:cd:ae:fb:18:43:f6:ad:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=36684357-deee-42d3-877a-4c18de3c30f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:d8:bf:87:fc:f2:37:a1:d9:03:d6:78:49: 24:7c:9c:3d:02:7e:6c:53:0b:21:fa:5d:0e:25:bb: 18:8e:a3:90:06:80:db:67:0c:6e:2d:a5:9a:d1:12: da:ba:81:56:e6:bd:06:22:9f:87:0f:9d:9c:19:aa: 00:86:de:f8:d0:69:5c:5e:c5:0a:78:86:20:24:6b: 3c:13:93:69:a9:5b:f4:cd:05:97:af:4d:85:fa:e9: 36:c5:67:d7:ee:05:6e:84:ae:c7:d7:71:77:d2:e9: 20:f9:3d:b0:64:77:2b:e5:0d:60:ee:c0:d8:b8:c5: 08:e3:cc:60:a9:94:0c:da:48:d7:b5:73:a2:1d:bf: 99:64:24:13:f0:41:5f:28:9b:a2:f2:b7:ff:c1:e0: 4f:4c:5e:ef:a0:4f:c2:9c:95:b6:0b:7f:e8:b2:a8: 5c:c1:86:c5:1f:9b:9c:c2:d5:98:be:da:25:7b:3e: e3:3a:d2:20:58:28:d3:e0:5c:1f:68:43:09:a3:40: 36:bc:a1:a6:7f:fd:26:dc:4a:03:4f:77:3a:cc:9a: 9e:7c:1b:59:2e:a9:2b:f0:fe:6d:7b:32:b8:9b:54: 38:a5:cf:c3:c6:ed:1d:d1:cb:43:7a:85:0f:69:f5: c1:19:1f:61:28:be:4a:ae:a7:a3:e9:de:bc:0e:33: 6f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E5:7C:F7:74:10:3A:76:3D:A3:3D:D6:45:40:6E:48:88:EF:DD:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7b10ad56-19b4-3d60-97da-19aa34d4c863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:4a:b7:1b:fa:b5:a5:fd:45:7d:2c:b0:97:9f:af:74:ed:b7: d7:14:6b:b1:4f:00:b4:7e:c4:2b:01:b3:e9:f2:eb:8a:cb:12: be:29:d0:4e:14:69:70:d3:6c:c2:44:49:58:62:14:a3:bf:32: a5:36:75:99:80:e8:da:c0:80:cd:e7:0b:3b:e0:58:30:5d:23: e1:1d:5f:03:f2:1b:bd:59:b7:62:6b:2e:01:d0:df:0e:97:78: 9e:8b:09:88:ad:f3:31:75:3d:7d:b4:f0:18:e2:58:80:c5:67: 80:a0:ee:7a:fb:40:e7:d3:e6:65:b9:e8:d2:a6:15:a9:d3:d4: 7d:7f:53:09:88:9f:60:4a:b3:89:3d:14:1c:28:c6:ce:36:e4: 23:c7:23:a3:71:0c:92:fa:cd:21:bb:90:66:85:03:3b:f6:5c: 62:24:7c:98:30:0f:bd:7f:ec:83:0a:d5:50:7f:21:51:72:64: 3f:a7:12:9a:56:4c:99:f1:f4:4b:7c:5d:c7:3c:99:35:93:30: 69:79:7c:8f:e2:f6:3e:49:c7:74:db:db:06:c5:2d:e6:d0:74: b8:0a:2d:79:74:e8:a7:f0:74:ce:54:c3:bb:b3:21:87:0c:c4: a7:17:4e:c8:50:db:45:ff:8a:a2:22:07:d7:15:ef:ec:81:3b: 4a:06:38:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgnNrvsYQ/atdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MzY2ODQzNTctZGVlZS00MmQzLTg3N2EtNGMxOGRlM2MzMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAownYv4f88jeh2QPWeEkkfJw9An5sUwsh+l0O JbsYjqOQBoDbZwxuLaWa0RLauoFW5r0GIp+HD52cGaoAht740GlcXsUKeIYgJGs8 E5NpqVv0zQWXr02F+uk2xWfX7gVuhK7H13F30ukg+T2wZHcr5Q1g7sDYuMUI48xg qZQM2kjXtXOiHb+ZZCQT8EFfKJui8rf/weBPTF7voE/CnJW2C3/osqhcwYbFH5uc wtWYvtolez7jOtIgWCjT4FwfaEMJo0A2vKGmf/0m3EoDT3c6zJqefBtZLqkr8P5t ezK4m1Q4pc/Dxu0d0ctDeoUPafXBGR9hKL5Krqej6d68DjNvrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGflfPd0EDp2PaM91kVAbkiI792CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2IxMGFkNTYtMTliNC0z ZDYwLTk3ZGEtMTlhYTM0ZDRjODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVKtxv6taX9RX0ssJefr3Ttt9cUa7FPALR+xCsBs+ny64rLEr4p0E4U aXDTbMJESVhiFKO/MqU2dZmA6NrAgM3nCzvgWDBdI+EdXwPyG71Zt2JrLgHQ3w6X eJ6LCYit8zF1PX208BjiWIDFZ4Cg7nr7QOfT5mW56NKmFanT1H1/UwmIn2BKs4k9 FBwoxs425CPHI6NxDJL6zSG7kGaFAzv2XGIkfJgwD71/7IMK1VB/IVFyZD+nEppW TJnx9Et8Xcc8mTWTMGl5fI/i9j5Jx3Tb2wbFLebQdLgKLXl06KfwdM5Uw7uzIYcM xKcXTshQ20X/iqIiB9cV7+yBO0oGOLk= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:06 2025 by rpki-client