$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8a0e7eca-6b29-3bd1-a8ac-5dac3a0c253e.roa File: 8a0e7eca-6b29-3bd1-a8ac-5dac3a0c253e.roa (raw, json) Hash identifier: nQRstf11K4qSjnZuUUerRHHd7aeZ0eA+5oN0nAuzTIw= Subject key identifier: F8:E0:EB:C2:53:12:58:ED:C5:F9:D0:DC:7F:F7:3F:4C:50:59:F0:D0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8146181C169A167BAEFB71E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8a0e7eca-6b29-3bd1-a8ac-5dac3a0c253e.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:18:1c:16:9a:16:7b:ae:fb:71:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=6fb21f8e-2ba5-4bb0-b768-a53bbfd0926b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a7:d3:b9:12:7d:af:ef:ff:98:e4:4f:75:9c: 11:a2:d8:35:b8:81:42:e1:4d:8c:39:af:17:14:b9: fd:92:f5:c0:aa:80:cb:4a:66:ec:07:dc:d1:eb:a3: ad:ab:d6:47:34:cb:4e:28:67:b4:4f:af:2c:8b:2e: ac:6c:6d:28:e8:8c:48:22:7c:ac:f3:06:93:7c:33: b3:2c:e1:00:01:b9:e5:9b:54:48:1f:f8:54:41:07: 41:8c:07:8e:3e:d8:06:b4:1a:86:77:74:64:85:71: 43:4f:06:58:03:32:79:a6:9c:30:f4:ea:d9:f7:7d: 66:c0:3d:06:65:fc:43:05:c7:b0:9b:b1:8c:fd:14: 9a:0f:66:47:18:13:c8:8e:f0:f4:94:dc:e1:45:7c: 09:13:c4:19:8d:56:9c:9c:9a:d7:6f:fe:2a:cd:21: fc:3c:21:18:4c:aa:ae:3a:9f:41:46:15:c0:5f:0f: 69:75:c5:4d:26:3e:85:70:64:b1:49:c6:60:3a:97: 48:eb:0e:88:3d:0a:33:2d:c3:b8:08:28:38:e3:d9: e6:cd:55:b1:b6:ec:23:f7:11:78:7d:35:7d:38:68: b9:00:18:f0:56:7e:c1:2c:57:63:2a:7d:95:07:7b: 2b:b0:55:a8:fc:31:b1:cf:a3:80:5e:ea:e0:21:f9: b7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E0:EB:C2:53:12:58:ED:C5:F9:D0:DC:7F:F7:3F:4C:50:59:F0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8a0e7eca-6b29-3bd1-a8ac-5dac3a0c253e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:66:96:a4:8e:21:7e:9c:6b:a3:e4:7d:79:ca:ed:59:05:7c: 76:15:54:97:bb:a4:8e:01:a5:e9:47:f3:93:a1:99:29:c5:ab: 0d:63:ec:e6:a3:5b:d4:18:90:88:59:d2:dd:e9:99:96:03:f4: d5:e9:60:97:24:c2:23:ba:84:b0:47:16:3a:f2:94:17:4d:eb: 19:c2:85:52:95:d5:30:a3:51:4e:c6:87:ab:38:ea:94:85:d2: 4c:10:3f:5e:a4:78:09:1c:14:82:8e:d4:ac:c7:bc:39:c6:88: 2f:ff:bc:cd:ee:31:2b:c1:ae:47:6b:d1:14:9f:19:07:e6:90: 25:64:7e:0f:98:8b:6d:ed:61:db:f2:36:b4:c1:f4:ac:ab:58: d7:5f:6b:21:7d:20:55:64:bf:dd:9d:54:a0:8d:16:c1:64:60: 9c:8f:cf:3c:dd:9e:cb:6d:24:c1:68:e3:62:fe:05:59:1f:a6: a7:8c:c4:ab:ce:65:ed:28:84:2a:bd:00:49:ef:83:be:c7:92: b1:e7:f1:41:63:93:56:81:4c:c1:96:81:91:09:3f:33:6e:d4: 21:f8:d7:fe:5c:2c:5e:cd:d7:94:f6:76:fe:ad:8a:36:6f:29: 89:ab:0a:b0:1b:ae:0f:10:ef:a3:70:1c:fd:75:fd:85:aa:94: 5c:0a:70:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhgcFpoWe677ceAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NmZiMjFmOGUtMmJhNS00YmIwLWI3NjgtYTUzYmJmZDA5MjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qfTuRJ9r+//mORPdZwRotg1uIFC4U2MOa8X FLn9kvXAqoDLSmbsB9zR66Otq9ZHNMtOKGe0T68siy6sbG0o6IxIInys8waTfDOz LOEAAbnlm1RIH/hUQQdBjAeOPtgGtBqGd3RkhXFDTwZYAzJ5ppww9OrZ931mwD0G ZfxDBcewm7GM/RSaD2ZHGBPIjvD0lNzhRXwJE8QZjVacnJrXb/4qzSH8PCEYTKqu Op9BRhXAXw9pdcVNJj6FcGSxScZgOpdI6w6IPQozLcO4CCg449nmzVWxtuwj9xF4 fTV9OGi5ABjwVn7BLFdjKn2VB3srsFWo/DGxz6OAXurgIfm3XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjg68JTEljtxfnQ3H/3P0xQWfDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGEwZTdlY2EtNmIyOS0z YmQxLWE4YWMtNWRhYzNhMGMyNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZmlqSOIX6ca6PkfXnK7VkFfHYVVJe7pI4BpelH85OhmSnFqw1j7Oaj W9QYkIhZ0t3pmZYD9NXpYJckwiO6hLBHFjrylBdN6xnChVKV1TCjUU7Gh6s46pSF 0kwQP16keAkcFIKO1KzHvDnGiC//vM3uMSvBrkdr0RSfGQfmkCVkfg+Yi23tYdvy NrTB9KyrWNdfayF9IFVkv92dVKCNFsFkYJyPzzzdnsttJMFo42L+BVkfpqeMxKvO Ze0ohCq9AEnvg77HkrHn8UFjk1aBTMGWgZEJPzNu1CH41/5cLF7N15T2dv6tijZv KYmrCrAbrg8Q76NwHP11/YWqlFwKcJM= -----END CERTIFICATE-----Generated at Thu Aug 7 01:08:16 2025 by rpki-client