$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7efc59f6-78c5-31c5-8751-efe178de2b1d.roa File: 7efc59f6-78c5-31c5-8751-efe178de2b1d.roa (raw, json) Hash identifier: d0cHfSJqKG6KVOMeHFptWM0rlxg4m8IH14vm4UjRAN4= Subject key identifier: BC:98:C4:86:CF:DC:4E:FD:28:E5:E4:68:F0:04:A0:20:B9:0F:1D:5E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461B3161DB90D260F3A090 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7efc59f6-78c5-31c5-8751-efe178de2b1d.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1b:31:61:db:90:d2:60:f3:a0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=22b120c8-d3df-4588-9b4a-0e512e3f654f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f8:b0:4e:8c:40:e4:e1:19:ce:2a:a6:db:0e: 89:b5:29:6d:b9:73:fe:5b:96:cb:67:8c:1a:ca:50: 5a:2c:b0:73:9b:e8:dc:ac:aa:63:95:2c:e1:af:6d: 80:7c:e2:20:94:e4:67:7b:cb:9b:03:72:77:9a:e8: 51:d4:cb:8f:ec:fa:6a:ef:86:4a:4f:a0:06:94:be: c9:36:45:0b:a4:a2:16:d1:2f:c3:4a:5f:24:fa:68: 18:24:50:da:8b:f3:c2:88:92:9a:92:b3:4b:ed:54: cb:d3:0c:dd:b7:b5:9f:6b:b9:59:b3:84:73:5a:51: da:39:be:bc:68:17:ed:05:e9:ed:ce:74:31:52:62: 54:b6:37:84:c2:5c:3b:f9:18:30:5f:27:17:a2:8c: 3c:07:a7:ac:ae:cf:4d:02:0d:7c:71:d3:53:9c:b7: a2:18:fb:62:9b:e5:f6:b8:95:96:29:ee:02:30:54: 80:a9:00:be:1a:85:c8:84:49:ca:6f:05:ce:66:b3: cb:b1:38:63:da:e5:ce:5c:4c:ee:f8:fa:4a:eb:ad: f5:40:0d:91:5e:83:ef:ec:8c:34:dc:3b:17:21:af: a4:c8:b2:c4:03:09:da:74:a9:d7:12:b0:bd:17:84: 16:a2:d2:2b:a4:07:97:19:46:7b:39:13:54:2b:fd: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:98:C4:86:CF:DC:4E:FD:28:E5:E4:68:F0:04:A0:20:B9:0F:1D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7efc59f6-78c5-31c5-8751-efe178de2b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:6d:df:c8:c7:ae:75:fc:85:ef:43:4d:4b:5a:71:7b:f4:78: 79:d9:37:94:e5:55:98:5d:ff:12:c3:c3:cf:16:0c:4a:e7:dc: 31:60:4d:cf:b1:91:b7:dd:8b:7f:ae:e6:47:29:55:03:ff:37: 94:b8:73:4f:f0:9a:ec:4c:38:a9:86:96:26:58:76:a6:5e:1c: ff:a1:db:87:54:d0:98:ae:90:8b:2e:53:99:53:e9:4e:b9:a8: 41:f9:b3:69:a9:5c:c0:6c:3f:f2:6a:9e:e0:ea:5e:e1:9d:b7: aa:d6:b7:d7:fa:f3:12:4f:99:5d:ba:64:2f:f4:ab:bd:66:c8: 1d:4a:e6:a6:58:0b:5b:66:9c:10:f4:44:88:59:4a:4d:35:cc: 79:44:a2:4e:f1:7b:a4:a7:8d:8e:e5:d1:c3:ea:41:b7:2a:e3: bf:a6:6c:de:5f:0f:64:31:3a:79:d4:a9:89:35:a5:a9:00:d3: cc:0d:bd:7b:37:cd:d6:04:3b:ab:06:a1:5f:58:f8:23:a9:64: 7f:ce:3b:ce:05:19:9e:bd:26:3e:9f:52:4f:0b:8a:88:1f:b4: ab:3e:f0:43:99:59:fb:6d:c1:65:b1:70:a7:2f:bd:7d:75:fc: d6:13:38:7c:58:57:7a:ab:d7:2e:d1:1c:44:99:bf:b0:53:9a: 76:15:ff:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhsxYduQ0mDzoJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MjJiMTIwYzgtZDNkZi00NTg4LTliNGEtMGU1MTJlM2Y2NTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPiwToxA5OEZziqm2w6JtSltuXP+W5bLZ4wa ylBaLLBzm+jcrKpjlSzhr22AfOIglORne8ubA3J3muhR1MuP7Ppq74ZKT6AGlL7J NkULpKIW0S/DSl8k+mgYJFDai/PCiJKakrNL7VTL0wzdt7Wfa7lZs4RzWlHaOb68 aBftBentznQxUmJUtjeEwlw7+RgwXycXoow8B6esrs9NAg18cdNTnLeiGPtim+X2 uJWWKe4CMFSAqQC+GoXIhEnKbwXOZrPLsThj2uXOXEzu+PpK6631QA2RXoPv7Iw0 3DsXIa+kyLLEAwnadKnXErC9F4QWotIrpAeXGUZ7ORNUK/1IDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyYxIbP3E79KOXkaPAEoCC5Dx1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2VmYzU5ZjYtNzhjNS0z MWM1LTg3NTEtZWZlMTc4ZGUyYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtt38jHrnX8he9DTUtacXv0eHnZN5TlVZhd/xLDw88WDErn3DFgTc+x kbfdi3+u5kcpVQP/N5S4c0/wmuxMOKmGliZYdqZeHP+h24dU0JiukIsuU5lT6U65 qEH5s2mpXMBsP/JqnuDqXuGdt6rWt9f68xJPmV26ZC/0q71myB1K5qZYC1tmnBD0 RIhZSk01zHlEok7xe6SnjY7l0cPqQbcq47+mbN5fD2QxOnnUqYk1pakA08wNvXs3 zdYEO6sGoV9Y+COpZH/OO84FGZ69Jj6fUk8LiogftKs+8EOZWfttwWWxcKcvvX11 /NYTOHxYV3qr1y7RHESZv7BTmnYV/5Q= -----END CERTIFICATE-----Generated at Thu Aug 7 03:25:00 2025 by rpki-client