$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c20b394-a054-3946-adfb-28bee79b3dc3.roa File: 8c20b394-a054-3946-adfb-28bee79b3dc3.roa (raw, json) Hash identifier: MWaO1hHJ8hUSj73ycF7k0idBEMxT1/a4yIz4C/5p9CE= Subject key identifier: D5:BD:D4:EC:32:72:CA:27:BB:11:C7:38:19:DE:BC:F2:50:2B:90:92 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460F3D423F7583E6B54A80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c20b394-a054-3946-adfb-28bee79b3dc3.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0f:3d:42:3f:75:83:e6:b5:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=9e231d20-e680-45c6-a740-c0b5b6438501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:22:f8:7a:41:d3:2b:fc:67:df:19:c0:5d: 72:3e:cb:c9:bb:2d:5e:c1:1a:5f:89:67:0e:48:43: c8:28:2b:0b:6b:f5:4f:4f:1a:87:21:50:71:ed:7b: 40:48:4b:d2:ba:6e:c4:ef:5e:41:37:5d:48:1e:33: 26:0c:68:27:69:81:f5:02:4e:37:76:9d:66:c1:3c: 1a:d7:cd:ff:36:88:0c:f9:50:99:73:b1:c2:4c:c5: 1c:d6:64:82:ca:6b:57:c9:13:2b:0a:84:44:eb:ef: 6a:f7:bc:ca:cf:9b:4b:ea:41:1b:3f:b3:06:3b:1f: 1d:d9:47:67:f3:b6:4d:a7:65:1e:b0:65:f2:54:c7: 2e:8b:bd:9d:19:d5:12:73:e0:fe:c1:30:71:40:50: c3:ad:ef:de:12:fb:4b:79:ae:1f:6e:86:ed:3b:67: bd:2d:6a:ec:5b:61:21:db:e2:06:cd:d1:84:1b:57: fc:24:d1:3e:24:95:e9:78:6e:13:42:54:4a:07:11: df:47:d1:05:8b:24:f9:97:6f:69:9f:2a:51:45:96: ac:4a:a5:ef:c8:f2:34:1b:71:67:00:01:2e:1e:56: f8:3f:97:19:88:56:c5:22:5d:91:9a:75:5c:9b:be: f9:b6:a5:c1:2d:85:e3:34:e0:d7:76:10:67:68:00: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BD:D4:EC:32:72:CA:27:BB:11:C7:38:19:DE:BC:F2:50:2B:90:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c20b394-a054-3946-adfb-28bee79b3dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:75:a7:32:13:bb:a2:b1:3e:c2:85:a7:9d:5d:0d:2a:84:53: d4:5e:0e:51:f5:df:e3:de:29:1e:cb:09:b7:8a:fb:1f:85:87: d5:6f:74:b3:d6:cd:a4:35:65:bd:98:bd:ab:5b:90:30:76:ac: 5f:c3:63:85:d9:64:2d:11:e3:a0:2b:fa:9f:82:03:1b:71:6a: d8:59:3b:e8:64:07:8d:4b:f6:b3:a5:76:a1:13:0d:d9:f0:8e: cf:2f:d5:d9:88:e6:9d:53:81:3e:c9:23:fc:e3:95:f3:63:b7: 3d:89:b5:66:75:b4:32:24:2e:52:73:24:99:20:9b:89:cd:91: 7c:b0:b1:83:a9:ff:a8:67:fd:73:28:e9:94:75:91:5f:d2:77: 0e:8b:9c:77:ec:9c:44:f5:57:de:0e:78:98:85:a8:18:b4:f3: 3d:47:8b:16:ef:4a:95:81:ee:16:9e:12:92:a3:81:52:c3:ef: 7e:b4:43:32:27:07:50:40:23:5b:1b:17:91:30:ef:61:4c:1e: ad:81:9b:82:85:dd:72:82:bd:a0:d0:12:71:6a:4c:49:cf:c5: cb:0e:f7:72:21:0c:3d:9f:27:14:7d:7e:00:68:22:c1:90:26: d4:7c:03:79:3d:3c:6b:c3:2f:11:01:64:e9:eb:de:ce:cd:91: 4a:26:84:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRg89Qj91g+a1SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OWUyMzFkMjAtZTY4MC00NWM2LWE3NDAtYzBiNWI2NDM4NTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKci+HpB0yv8Z98ZwF1yPsvJuy1ewRpfiWcO SEPIKCsLa/VPTxqHIVBx7XtASEvSum7E715BN11IHjMmDGgnaYH1Ak43dp1mwTwa 183/NogM+VCZc7HCTMUc1mSCymtXyRMrCoRE6+9q97zKz5tL6kEbP7MGOx8d2Udn 87ZNp2UesGXyVMcui72dGdUSc+D+wTBxQFDDre/eEvtLea4fbobtO2e9LWrsW2Eh 2+IGzdGEG1f8JNE+JJXpeG4TQlRKBxHfR9EFiyT5l29pnypRRZasSqXvyPI0G3Fn AAEuHlb4P5cZiFbFIl2RmnVcm775tqXBLYXjNODXdhBnaACDfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW91OwycsonuxHHOBnevPJQK5CSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGMyMGIzOTQtYTA1NC0z OTQ2LWFkZmItMjhiZWU3OWIzZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF1pzITu6KxPsKFp51dDSqEU9ReDlH13+PeKR7LCbeK+x+Fh9VvdLPW zaQ1Zb2YvatbkDB2rF/DY4XZZC0R46Ar+p+CAxtxathZO+hkB41L9rOldqETDdnw js8v1dmI5p1TgT7JI/zjlfNjtz2JtWZ1tDIkLlJzJJkgm4nNkXywsYOp/6hn/XMo 6ZR1kV/Sdw6LnHfsnET1V94OeJiFqBi08z1HixbvSpWB7haeEpKjgVLD7360QzIn B1BAI1sbF5Ew72FMHq2Bm4KF3XKCvaDQEnFqTEnPxcsO93IhDD2fJxR9fgBoIsGQ JtR8A3k9PGvDLxEBZOnr3s7NkUomhJw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:40 2025 by rpki-client