$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa File: a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa (raw, json) Hash identifier: VrPqK3XmPqDq56Kq+v+39g34q/IgbFijUvr2Ae+Wdpo= Subject key identifier: E6:33:39:FC:31:B4:AD:29:BD:6B:75:68:6D:53:EF:A1:E8:31:39:53 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460780649F6D87A99A5740 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:07:80:64:9f:6d:87:a9:9a:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=44e0dadf-e032-400a-9ce0-522a6b01d321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:ae:9a:b3:0b:7a:fc:f7:1e:88:be:a2:d1: 70:8e:48:d5:a8:36:ce:a2:93:c1:31:e5:cc:18:fa: 5e:6b:ef:00:cd:d2:35:91:ee:f7:d5:bd:f3:be:13: 39:3f:df:ae:0b:44:8f:b1:c1:c2:9a:7d:fb:3e:66: 28:aa:52:f8:f1:b0:57:fb:f9:9e:6f:a0:f4:f4:c1: 04:97:08:8e:3e:73:23:2e:78:8d:aa:2b:ca:99:a6: 66:85:12:c5:2a:a3:7f:33:0e:f9:1e:c5:a6:a9:66: 7e:f1:32:2c:8a:b9:f6:6e:7f:0e:bf:3a:5d:46:e8: 31:15:28:1d:68:2c:6b:01:62:af:ed:2e:b6:88:74: 68:51:60:13:8d:11:b4:d5:8f:3c:54:b6:f1:f7:e4: 77:e3:8a:06:a3:a5:bf:39:1b:71:ba:32:60:9b:56: cb:08:34:6c:52:6e:18:b9:82:bc:ae:af:ee:63:c3: 0b:20:f6:1c:37:98:ff:33:9e:b7:24:6f:78:4c:68: 2f:77:cf:db:12:05:65:b9:f1:95:89:e2:07:12:f5: de:c1:d0:7f:23:ea:fc:ff:c2:b1:fb:08:19:22:6b: 7a:f1:5f:67:24:31:69:f2:8e:1c:8b:24:05:a5:e1: df:1e:88:7e:f5:3c:8f:0a:79:b4:19:60:e6:dc:69: a7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:33:39:FC:31:B4:AD:29:BD:6B:75:68:6D:53:EF:A1:E8:31:39:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:87:c9:47:ee:73:af:6a:32:b5:92:8f:a9:c3:fa:bb:51:b6: 03:a2:b1:98:29:1a:ba:33:ed:9f:79:5a:85:1a:52:b5:82:2a: 91:6f:a0:f5:ce:19:b7:81:09:c8:72:18:fe:fe:95:d2:9b:88: c6:d4:3d:1a:d1:a4:0e:ca:28:1b:a4:11:d0:72:2a:4c:6a:25: de:be:17:ea:af:db:ed:46:f6:24:1b:1b:fe:c7:6a:ce:81:d9: 1c:a1:d5:19:47:82:6a:30:84:52:0e:22:5b:b9:ab:69:0e:9b: 07:e4:af:bc:63:28:2a:8e:dc:3c:67:f2:65:2a:cf:18:a9:dd: e7:2c:c0:04:b5:b1:10:1e:f3:69:90:72:9f:c8:1b:86:eb:80: 6a:76:59:2d:06:95:e2:a6:24:b4:d0:3e:45:f5:b4:bc:b3:91: ec:5b:77:71:cb:54:77:cc:ce:6f:27:14:ef:f1:65:e4:d5:48: 37:40:86:73:59:95:a1:19:bc:84:bc:d0:b8:9c:8d:0c:f5:f2: 17:e0:88:25:27:05:58:4d:1c:c0:fa:3a:94:0a:fe:5a:53:f6: e7:92:b6:5a:41:17:89:47:22:6c:12:29:03:55:81:ee:d3:e4: b6:19:f1:8b:2c:49:f5:bb:9d:27:a0:1f:a3:24:ca:3b:81:68: 19:36:ed:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgeAZJ9th6maV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NDRlMGRhZGYtZTAzMi00MDBhLTljZTAtNTIyYTZiMDFkMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8iumrMLevz3Hoi+otFwjkjVqDbOopPBMeXM GPpea+8AzdI1ke731b3zvhM5P9+uC0SPscHCmn37PmYoqlL48bBX+/meb6D09MEE lwiOPnMjLniNqivKmaZmhRLFKqN/Mw75HsWmqWZ+8TIsirn2bn8OvzpdRugxFSgd aCxrAWKv7S62iHRoUWATjRG01Y88VLbx9+R344oGo6W/ORtxujJgm1bLCDRsUm4Y uYK8rq/uY8MLIPYcN5j/M563JG94TGgvd8/bEgVlufGVieIHEvXewdB/I+r8/8Kx +wgZImt68V9nJDFp8o4ciyQFpeHfHoh+9TyPCnm0GWDm3Gmn/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYzOfwxtK0pvWt1aG1T76HoMTlTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTFhZTFhNzctN2Y5OS0z YzJmLWE3ZjMtY2VlMTdjOTcwNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6HyUfuc69qMrWSj6nD+rtRtgOisZgpGroz7Z95WoUaUrWCKpFvoPXO GbeBCchyGP7+ldKbiMbUPRrRpA7KKBukEdByKkxqJd6+F+qv2+1G9iQbG/7Has6B 2Ryh1RlHgmowhFIOIlu5q2kOmwfkr7xjKCqO3Dxn8mUqzxip3ecswAS1sRAe82mQ cp/IG4brgGp2WS0GleKmJLTQPkX1tLyzkexbd3HLVHfMzm8nFO/xZeTVSDdAhnNZ laEZvIS80LicjQz18hfgiCUnBVhNHMD6OpQK/lpT9ueStlpBF4lHImwSKQNVge7T 5LYZ8YssSfW7nSegH6MkyjuBaBk27To= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:10 2025 by rpki-client