$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa File: a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa (raw, json) Hash identifier: yfb1+16jx/ODnCsR7pROob+u0MhDDn5tcT27GDGwY/k= Subject key identifier: 22:92:5A:BA:02:3C:38:5C:CB:9F:0E:88:FF:25:65:5B:9E:3F:B5:60 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814617867A30F75222BCEC40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:17:86:7a:30:f7:52:22:bc:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=ba40a1c9-7c26-44e1-8f62-304731040a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:4b:46:19:c1:97:28:41:38:1c:cb:57:af: f2:0f:50:f4:67:b6:32:f4:f2:d4:c4:7e:cf:11:62: c9:80:a9:ac:af:f0:cd:e5:19:32:50:da:3a:4b:7a: 83:b9:a7:a9:39:71:cb:c9:d6:71:b3:e0:71:99:b5: de:d2:54:ef:27:3d:c2:82:cb:64:ef:f4:e5:4e:88: 04:00:c2:87:69:c5:09:a9:83:5e:7f:4e:28:38:15: 0a:85:8b:b0:94:11:e4:77:a7:d6:f8:bd:4a:8b:e8: 8b:2b:49:91:d5:df:eb:76:f5:84:ff:0e:ff:26:b1: d3:83:b3:99:4f:ed:c7:a3:ed:3d:ab:b7:7e:f8:6f: a8:ab:11:73:9e:f7:8b:46:1d:40:a4:95:e8:98:96: 1a:7f:20:63:21:e1:06:41:d1:55:6f:64:15:b7:11: f5:4e:8d:2d:f6:26:1c:4e:e4:64:0b:0c:5a:c9:fc: f6:f5:42:e5:46:aa:63:f3:b0:d8:db:30:91:33:ce: 2b:20:ac:4e:82:0f:e6:98:89:7f:fb:b5:31:04:bb: 31:a7:11:99:7c:91:3e:00:8b:4a:53:c4:23:20:73: 28:41:b3:61:30:e9:34:f4:e3:94:d7:0d:a9:63:ef: d9:dc:5c:c0:a3:cf:23:98:97:39:61:09:14:0b:1d: 00:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:92:5A:BA:02:3C:38:5C:CB:9F:0E:88:FF:25:65:5B:9E:3F:B5:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0d:39:0a:80:f3:18:5f:9b:d3:57:ed:6b:66:18:b9:39:5c: 2d:c9:eb:7c:6a:e2:58:8f:fe:84:85:89:73:41:32:30:36:fe: 92:5e:ab:66:f1:a8:03:91:91:9c:e0:d6:3f:48:55:0b:9e:1a: a3:c1:7e:04:80:13:ec:5b:a3:5f:dd:88:93:0d:44:5c:07:ac: 0c:60:8f:8d:1b:d4:7d:b8:ac:33:f7:1b:bb:45:d8:6a:80:42: fa:5c:d0:88:25:35:d0:6f:de:66:9e:53:f0:40:1a:98:ed:38: 83:d8:b5:15:01:a3:32:5d:0e:73:2f:51:fa:21:af:5e:dc:b6: 64:f4:c3:b8:31:13:22:07:46:a6:7d:b2:fc:16:02:36:84:ee: a0:40:65:2d:90:5c:46:3c:52:c2:71:f3:8b:9a:24:47:2d:f8: 6d:2a:ea:54:27:da:b5:88:ae:3c:3f:24:e8:50:32:3a:48:26: e7:31:22:52:a8:c0:c9:c0:2a:09:86:f1:68:b8:7c:59:7e:ef: f2:84:46:1a:6e:1f:03:62:44:6c:46:88:1b:be:a1:5b:ad:2d: d7:cd:ab:ff:bb:9b:1a:45:69:61:9b:94:65:be:e9:1a:86:d8: e0:6d:d4:d0:f7:fc:62:81:11:33:c0:6d:8e:c0:d6:87:cb:b9: 8c:fa:fa:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRheGejD3UiK87EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YmE0MGExYzktN2MyNi00NGUxLThmNjItMzA0NzMxMDQwYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMpLRhnBlyhBOBzLV6/yD1D0Z7Yy9PLUxH7P EWLJgKmsr/DN5RkyUNo6S3qDuaepOXHLydZxs+BxmbXe0lTvJz3Cgstk7/TlTogE AMKHacUJqYNef04oOBUKhYuwlBHkd6fW+L1Ki+iLK0mR1d/rdvWE/w7/JrHTg7OZ T+3Ho+09q7d++G+oqxFznveLRh1ApJXomJYafyBjIeEGQdFVb2QVtxH1To0t9iYc TuRkCwxayfz29ULlRqpj87DY2zCRM84rIKxOgg/mmIl/+7UxBLsxpxGZfJE+AItK U8QjIHMoQbNhMOk09OOU1w2pY+/Z3FzAo88jmJc5YQkUCx0AlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKSWroCPDhcy58OiP8lZVueP7VgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTg0ZDA0YjYtYzdmMS0z ZjNhLTk3ZTUtODk5MmM2ZGUzOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcNOQqA8xhfm9NX7WtmGLk5XC3J63xq4liP/oSFiXNBMjA2/pJeq2bx qAORkZzg1j9IVQueGqPBfgSAE+xbo1/diJMNRFwHrAxgj40b1H24rDP3G7tF2GqA Qvpc0IglNdBv3maeU/BAGpjtOIPYtRUBozJdDnMvUfohr17ctmT0w7gxEyIHRqZ9 svwWAjaE7qBAZS2QXEY8UsJx84uaJEct+G0q6lQn2rWIrjw/JOhQMjpIJucxIlKo wMnAKgmG8Wi4fFl+7/KERhpuHwNiRGxGiBu+oVutLdfNq/+7mxpFaWGblGW+6RqG 2OBt1ND3/GKBETPAbY7A1ofLuYz6+gA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:10 2025 by rpki-client