$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9dd52851-7a9c-36e5-a3a2-1862c61760b6.roa File: 9dd52851-7a9c-36e5-a3a2-1862c61760b6.roa (raw, json) Hash identifier: gkiJTbrU2PFQYYqBxa2T1Im9/g43w+ohFUcMDeElYxA= Subject key identifier: 86:09:30:E6:20:4D:19:F7:6C:E6:50:F1:0B:F9:AA:D7:57:B5:1E:65 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814616D30DF203A59C2D7E80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9dd52851-7a9c-36e5-a3a2-1862c61760b6.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:16:d3:0d:f2:03:a5:9c:2d:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=b23bdec9-bd78-4a8d-8d88-73628f53f3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:3c:f3:63:5a:a2:80:10:5b:c7:70:47:48: cb:53:89:77:44:c2:5d:c7:d4:a7:e8:5c:3a:8b:91: 6e:1f:28:65:e0:9e:18:e2:64:61:6c:4e:1e:5f:1e: c6:04:5a:05:4e:59:79:dd:5f:05:12:fd:33:b8:23: 7f:6f:cf:52:0f:cf:a7:a8:5a:d8:da:58:86:21:5a: 68:6b:c7:e1:e2:14:62:07:90:e1:d3:30:4f:ff:c1: 18:ae:b7:4e:a9:b2:25:3a:b9:ab:11:6b:ae:47:1f: 72:50:f9:c3:44:58:95:c2:4a:ab:9a:b1:6c:08:82: 47:64:6e:10:52:be:91:6d:75:1c:42:19:52:f1:3b: 4c:49:d9:cf:44:59:c2:f7:c3:96:c7:d1:42:13:b3: fe:f3:53:24:28:97:fb:67:62:11:af:d0:59:18:f1: a4:be:04:87:53:87:6c:d9:c8:ef:bc:36:5e:7d:4f: ca:69:97:ff:20:7b:96:b4:bc:0b:01:7d:fd:d8:fe: 34:20:b8:11:f2:27:77:d8:ee:8b:b3:90:b3:5e:00: a4:85:ed:f2:11:bc:85:fa:31:17:ae:ee:e1:7d:8b: 8b:12:d5:2e:6a:17:df:4a:b7:40:3d:06:37:11:dc: 9b:2d:7a:ae:89:63:d1:b3:84:79:6a:22:5c:97:7c: 68:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:09:30:E6:20:4D:19:F7:6C:E6:50:F1:0B:F9:AA:D7:57:B5:1E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9dd52851-7a9c-36e5-a3a2-1862c61760b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d9:e0:72:89:b0:af:b0:38:62:a6:e2:68:01:3f:95:3c:f0: b7:d4:fc:e5:ae:32:41:38:b3:c9:9a:fa:cd:dd:5e:a7:2e:07: a8:3b:79:67:be:2c:ec:2f:b8:47:88:46:6c:d7:9f:89:d5:81: 32:75:9f:87:b3:9d:f1:e1:d4:c8:8a:ea:9b:d2:db:55:6d:7c: 91:53:b1:f9:67:96:8a:53:f1:4b:02:1d:66:b9:b6:17:a0:5d: b4:6a:b2:36:3f:1f:7d:dc:0c:fc:9f:dc:13:e0:ec:60:2e:0c: 14:5a:9d:f9:8b:f1:83:ce:72:4e:5c:8a:e8:47:99:e7:18:a5: 38:bd:81:cc:df:02:93:33:1e:e7:b5:cf:5f:dd:d7:8e:b7:7a: 70:a1:24:f8:74:2d:f2:01:70:81:af:31:de:0c:5b:83:75:d0: 15:ad:04:87:90:7f:b0:cd:70:ca:b6:88:ae:74:ac:57:26:94: a5:1d:36:a2:14:47:bc:8a:87:68:ae:3b:f5:7c:21:0a:76:21: 29:4d:98:59:24:65:c1:ca:c8:0f:1b:78:37:74:4e:44:1c:a1: f9:01:07:9b:83:0c:93:c0:88:09:08:40:16:8f:8a:49:00:8d: 7f:79:9f:55:cc:1b:f6:51:1b:fd:91:1a:b4:d7:1a:76:3c:c7: 0a:b3:7c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhbTDfIDpZwtfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YjIzYmRlYzktYmQ3OC00YThkLThkODgtNzM2MjhmNTNmM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgts882NaooAQW8dwR0jLU4l3RMJdx9Sn6Fw6 i5FuHyhl4J4Y4mRhbE4eXx7GBFoFTll53V8FEv0zuCN/b89SD8+nqFrY2liGIVpo a8fh4hRiB5Dh0zBP/8EYrrdOqbIlOrmrEWuuRx9yUPnDRFiVwkqrmrFsCIJHZG4Q Ur6RbXUcQhlS8TtMSdnPRFnC98OWx9FCE7P+81MkKJf7Z2IRr9BZGPGkvgSHU4ds 2cjvvDZefU/KaZf/IHuWtLwLAX392P40ILgR8id32O6Ls5CzXgCkhe3yEbyF+jEX ru7hfYuLEtUuahffSrdAPQY3EdybLXquiWPRs4R5aiJcl3xo3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYJMOYgTRn3bOZQ8Qv5qtdXtR5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWRkNTI4NTEtN2E5Yy0z NmU1LWEzYTItMTg2MmM2MTc2MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXZ4HKJsK+wOGKm4mgBP5U88LfU/OWuMkE4s8ma+s3dXqcuB6g7eWe+ LOwvuEeIRmzXn4nVgTJ1n4eznfHh1MiK6pvS21VtfJFTsflnlopT8UsCHWa5theg XbRqsjY/H33cDPyf3BPg7GAuDBRanfmL8YPOck5ciuhHmecYpTi9gczfApMzHue1 z1/d1463enChJPh0LfIBcIGvMd4MW4N10BWtBIeQf7DNcMq2iK50rFcmlKUdNqIU R7yKh2iuO/V8IQp2ISlNmFkkZcHKyA8beDd0TkQcofkBB5uDDJPAiAkIQBaPikkA jX95n1XMG/ZRG/2RGrTXGnY8xwqzfJ0= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:13 2025 by rpki-client