$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa File: 820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa (raw, json) Hash identifier: BbVyPv7QR9mSxKVPg8EtLMY8HwpMSYQ7X41prkuJ8+Y= Subject key identifier: E8:48:D0:9B:62:0D:8C:81:67:D2:BC:94:1B:7C:0F:FC:AE:3C:A0:C1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460E5CD325ADEA49E8D700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0e:5c:d3:25:ad:ea:49:e8:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=201a01e4-447e-4e44-b00e-627d2cca1ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:29:24:1d:c8:6f:e9:65:5c:74:7a:7a:3f: 27:d8:85:e4:1d:cc:76:8a:1a:70:2d:97:59:bb:4f: aa:b6:70:5d:b1:40:e7:d8:e2:8e:72:0a:53:eb:7c: a0:36:d5:87:16:2f:59:bf:33:ac:a6:47:8d:3a:0d: 96:b1:50:51:85:48:28:bb:6f:4a:d7:b7:90:d3:6b: 77:5f:cc:02:81:c1:ab:46:38:0d:fc:f8:5e:7e:3b: 43:91:65:17:99:a0:5a:d2:b4:f2:6e:bd:d8:6e:f7: 9d:a0:66:d0:2f:ec:36:4b:71:a4:32:a5:b9:4a:75: b0:85:ff:ca:e9:e2:06:19:f3:99:7f:8f:cd:94:32: 14:8d:a0:2d:e0:69:61:3e:6a:c9:67:3e:5d:a9:ab: f9:bc:25:da:6f:f7:1a:25:bd:e1:bc:d2:27:7d:40: 12:1b:79:79:6f:30:e4:8d:6a:bc:49:fa:b9:ce:70: f3:b4:7f:05:e2:97:9d:86:92:fb:8b:15:e3:3d:50: 1a:6c:58:61:be:47:be:06:3a:60:fd:06:fe:88:d1: 4e:21:a5:aa:09:ae:5d:05:a7:ad:16:a2:2e:55:73: 4a:3c:6f:2a:ed:ef:20:9f:2f:4a:cd:7a:56:0d:59: f7:ff:49:72:a0:1a:75:68:60:de:44:40:a8:6f:a9: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:48:D0:9B:62:0D:8C:81:67:D2:BC:94:1B:7C:0F:FC:AE:3C:A0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:23:5c:11:e7:f1:9d:6e:09:ea:89:45:ce:4b:16:ed:fe:ff: 3a:56:8a:81:98:1e:29:40:36:5b:ab:c5:12:03:a8:ce:cc:7e: c5:e3:40:d1:34:39:10:18:c4:a0:c9:59:b5:41:f1:6f:78:49: b5:b0:ca:d7:50:79:03:97:b5:df:08:b7:d7:80:25:b6:9b:74: 1c:11:06:7d:cf:ac:40:08:f8:c8:72:99:88:9f:d3:01:8c:31: 7d:a3:72:fb:6b:62:06:c9:d3:16:73:f6:b9:ca:7b:5e:e7:2f: 77:48:65:85:88:5e:d0:0b:61:3f:13:07:94:6c:10:2b:06:59: 24:38:e7:4c:78:a3:79:f4:62:d9:a3:21:8a:9f:90:f0:c6:7f: 36:b3:51:45:ff:b6:53:db:15:ab:43:f4:43:d0:5e:5b:06:62: 14:f1:8a:cb:96:ea:c7:d0:37:b0:87:bf:74:36:ad:ac:7b:d4: cd:26:ba:30:f6:21:7f:68:03:6c:31:f0:61:ba:7a:b2:48:e3: 62:ab:c7:37:2e:e8:d7:6d:8a:8e:c4:88:7a:7a:46:11:a0:36: 34:5b:f9:fa:95:8b:d1:ae:7a:b4:0c:4a:34:64:68:c5:b2:bc: c9:01:d4:5b:73:ec:3b:8f:d1:e2:3e:29:11:00:a5:7c:c1:20: 88:e3:26:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRg5c0yWt6kno1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MjAxYTAxZTQtNDQ3ZS00ZTQ0LWIwMGUtNjI3ZDJjY2ExYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoogpJB3Ib+llXHR6ej8n2IXkHcx2ihpwLZdZ u0+qtnBdsUDn2OKOcgpT63ygNtWHFi9ZvzOspkeNOg2WsVBRhUgou29K17eQ02t3 X8wCgcGrRjgN/PhefjtDkWUXmaBa0rTybr3YbvedoGbQL+w2S3GkMqW5SnWwhf/K 6eIGGfOZf4/NlDIUjaAt4GlhPmrJZz5dqav5vCXab/caJb3hvNInfUASG3l5bzDk jWq8Sfq5znDztH8F4pedhpL7ixXjPVAabFhhvke+Bjpg/Qb+iNFOIaWqCa5dBaet FqIuVXNKPG8q7e8gny9KzXpWDVn3/0lyoBp1aGDeRECob6lSJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhI0JtiDYyBZ9K8lBt8D/yuPKDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODIwYzE3ZDUtYWQzMS0z NDU4LWI5ZDYtY2UwZmUxNDNhMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8jXBHn8Z1uCeqJRc5LFu3+/zpWioGYHilANlurxRIDqM7MfsXjQNE0 ORAYxKDJWbVB8W94SbWwytdQeQOXtd8It9eAJbabdBwRBn3PrEAI+MhymYif0wGM MX2jcvtrYgbJ0xZz9rnKe17nL3dIZYWIXtALYT8TB5RsECsGWSQ450x4o3n0Ytmj IYqfkPDGfzazUUX/tlPbFatD9EPQXlsGYhTxisuW6sfQN7CHv3Q2rax71M0mujD2 IX9oA2wx8GG6erJI42Krxzcu6Ndtio7EiHp6RhGgNjRb+fqVi9GuerQMSjRkaMWy vMkB1Ftz7DuP0eI+KREApXzBIIjjJsI= -----END CERTIFICATE-----Generated at Thu Aug 7 03:26:10 2025 by rpki-client