$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9fd3590c-6f43-3237-b280-d27e5de7c188.roa File: 9fd3590c-6f43-3237-b280-d27e5de7c188.roa (raw, json) Hash identifier: 9rTOtpip66hMXzKQ4FTWw3b7i+3geAxA4K+6MV/0Azc= Subject key identifier: 9B:F0:B3:8A:0C:A0:AD:07:31:6F:0A:0D:89:B6:94:2E:05:92:33:2A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814608D10BF2970042AFA700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9fd3590c-6f43-3237-b280-d27e5de7c188.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:08:d1:0b:f2:97:00:42:af:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=d3ee4e8b-388d-4576-98c9-ebdf5cc93750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fd:50:ad:e6:aa:ac:52:8d:3e:f0:22:d3:b4: 1b:92:fb:16:e1:d2:9b:31:b1:4d:5b:db:27:46:2e: c5:53:82:d5:ed:40:8f:ef:2d:7e:7d:f9:65:2a:e9: 4a:44:78:ed:4c:5c:19:44:39:a6:84:6e:58:2f:97: 40:4c:be:1a:11:d6:2e:c0:82:0b:3f:04:39:42:9d: 99:13:3f:5b:00:41:5f:61:d5:d4:fa:52:2a:47:4e: ea:b9:02:c3:2c:77:bd:8b:93:e4:09:79:dc:0c:5c: 08:1a:5b:47:82:d4:7f:e0:e7:5c:66:62:6c:2c:11: 1d:a0:34:d7:bc:d1:00:96:9a:00:89:a6:11:70:0c: a1:f8:43:40:fa:20:ef:25:0b:09:0f:64:7b:63:dd: 5b:82:7c:0d:e6:ed:69:6b:ee:4a:69:5f:c8:29:51: 34:e3:6e:04:c3:c9:89:7c:76:61:83:4b:7a:27:1c: b6:be:54:3d:5f:3a:62:ba:ba:71:29:f1:4f:5e:22: 7b:62:50:4b:62:b8:18:3c:7b:33:0b:0f:8c:54:71: 92:53:20:98:91:01:3e:b1:a2:95:8d:a0:9f:c2:49: a8:65:9e:0f:c4:37:3e:7e:c7:44:25:ad:22:83:7f: 69:e5:c0:7a:64:6a:70:cb:12:17:ee:a2:e6:99:0d: d9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F0:B3:8A:0C:A0:AD:07:31:6F:0A:0D:89:B6:94:2E:05:92:33:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9fd3590c-6f43-3237-b280-d27e5de7c188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:41:c0:22:37:35:04:89:71:d2:ef:af:2a:82:a3:c2:d9:96: d9:21:49:59:31:db:64:ad:f5:64:86:b4:aa:f7:1a:f0:fd:c8: 14:3f:e5:4f:5c:bd:59:c3:c7:0c:3d:04:2d:3b:04:91:54:25: f9:4e:16:4d:e4:dc:a0:69:8f:03:3b:0f:15:de:9e:e3:b1:2e: 1f:46:47:3a:6f:f8:47:d6:89:c8:03:81:39:ca:29:4d:c3:f5: 28:b0:19:33:34:8e:5e:cf:4e:2c:ad:25:f4:33:d5:ca:68:67: 62:d8:93:9f:f5:ee:e3:cf:8a:9b:a2:77:04:74:56:36:a7:d1: 37:63:6d:f7:07:ef:ce:51:46:a3:33:7d:52:a1:d7:a3:7b:5f: 2a:7a:24:a7:49:c2:8f:15:8d:49:20:8b:55:c5:c5:40:d6:ea: 62:77:e0:c1:23:fe:b9:30:59:dc:60:63:ce:d1:a6:e5:77:84: b9:63:17:8d:e8:9c:4c:86:53:f6:b0:70:35:dd:d8:98:45:fd: b7:dd:a4:71:4e:3c:cf:d7:97:e2:fc:4f:c1:b3:f4:06:7a:e0: d1:72:bd:7d:2f:f9:42:04:08:40:02:6b:1b:77:42:24:91:94: 45:b3:3d:6f:7e:0e:9d:56:53:59:11:90:6c:ff:8d:74:fa:c1: 93:d8:18:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgjRC/KXAEKvpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDNlZTRlOGItMzg4ZC00NTc2LTk4YzktZWJkZjVjYzkzNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v1QreaqrFKNPvAi07QbkvsW4dKbMbFNW9sn Ri7FU4LV7UCP7y1+ffllKulKRHjtTFwZRDmmhG5YL5dATL4aEdYuwIILPwQ5Qp2Z Ez9bAEFfYdXU+lIqR07quQLDLHe9i5PkCXncDFwIGltHgtR/4OdcZmJsLBEdoDTX vNEAlpoAiaYRcAyh+ENA+iDvJQsJD2R7Y91bgnwN5u1pa+5KaV/IKVE0424Ew8mJ fHZhg0t6Jxy2vlQ9XzpiurpxKfFPXiJ7YlBLYrgYPHszCw+MVHGSUyCYkQE+saKV jaCfwkmoZZ4PxDc+fsdEJa0ig39p5cB6ZGpwyxIX7qLmmQ3ZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvws4oMoK0HMW8KDYm2lC4FkjMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWZkMzU5MGMtNmY0My0z MjM3LWIyODAtZDI3ZTVkZTdjMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5BwCI3NQSJcdLvryqCo8LZltkhSVkx22St9WSGtKr3GvD9yBQ/5U9c vVnDxww9BC07BJFUJflOFk3k3KBpjwM7DxXenuOxLh9GRzpv+EfWicgDgTnKKU3D 9SiwGTM0jl7PTiytJfQz1cpoZ2LYk5/17uPPipuidwR0Vjan0TdjbfcH785RRqMz fVKh16N7Xyp6JKdJwo8VjUkgi1XFxUDW6mJ34MEj/rkwWdxgY87RpuV3hLljF43o nEyGU/awcDXd2JhF/bfdpHFOPM/Xl+L8T8Gz9AZ64NFyvX0v+UIECEACaxt3QiSR lEWzPW9+Dp1WU1kRkGz/jXT6wZPYGBc= -----END CERTIFICATE-----Generated at Thu Aug 7 01:10:56 2025 by rpki-client