$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa File: d1ac60c5-9597-3dc6-96f9-a339051715df.roa (raw, json) Hash identifier: /pSNsf0JWfVE9B+/V0yZTbLvjdNGmVqQ8+y1knydw/I= Subject key identifier: 2B:63:3F:F6:37:7B:31:CC:59:92:EA:D3:1F:E7:C9:95:68:3A:F2:BC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814609377F09C6D3B9E0BDC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:09:37:7f:09:c6:d3:b9:e0:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=90462d95-c1d7-4679-a406-455f42f04286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:d1:86:67:e7:9d:e4:59:f3:b6:56:a0:81: 63:b9:64:a8:ad:1a:c5:5e:ec:d7:f5:2b:86:f4:a2: 5d:f7:57:e9:90:7e:c9:dd:bc:d2:7d:8a:88:09:ac: cd:f1:61:cb:95:eb:89:94:3d:db:e7:c9:75:db:2b: 39:69:d7:b0:58:2f:4b:02:42:3a:fb:d6:97:6e:4f: 24:d3:75:d6:46:51:e7:68:7f:3f:5b:b5:77:3b:a9: 81:52:10:3b:e6:f0:e9:f7:da:7b:df:40:1c:07:bb: ae:7a:0b:98:5f:7c:f5:fa:fc:95:e0:0a:5e:7e:fe: e7:50:f7:6a:6e:66:50:68:12:2f:96:8a:24:25:3c: da:35:68:b6:12:d6:0a:22:e5:ce:a3:3e:c3:4b:48: b9:e6:fa:bf:2a:f9:01:18:00:fa:46:c2:99:d7:fd: 85:ba:3c:55:dc:e3:a6:c1:84:c7:08:1f:a3:ea:ab: e0:d1:0f:a1:42:f6:66:e5:e0:2a:b1:90:99:6f:b8: 15:20:89:f1:7f:e1:e3:05:1d:ee:ee:94:23:15:dd: 41:03:74:6f:37:04:93:29:81:88:9b:41:fb:3f:35: 2c:fe:a1:7f:bb:6b:3b:d2:39:29:10:d3:3e:b6:70: 6c:5c:be:3d:21:37:10:9a:5a:c5:3a:13:37:b7:40: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:63:3F:F6:37:7B:31:CC:59:92:EA:D3:1F:E7:C9:95:68:3A:F2:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e3:dd:0e:2f:97:bf:b9:81:e1:7a:3d:78:9a:80:49:44:f7: 8a:c9:97:51:5a:50:26:ed:35:fa:53:4a:86:c9:7d:13:ec:5d: 8a:4b:95:b1:a6:97:7e:bc:55:bc:f8:6a:03:34:ab:d6:cf:f5: 07:4b:bb:a1:1c:d1:f9:39:a2:c5:ce:24:00:9d:dc:d4:82:89: 32:da:0b:90:e2:66:49:11:20:c0:b7:c6:de:c6:44:e6:2a:44: 86:80:a3:50:47:95:e6:85:b9:17:19:d6:27:42:e0:af:0d:d2: 04:00:2a:5c:87:50:63:b8:bb:b3:08:64:0b:36:dc:7c:9d:76: 9a:a0:9d:1c:fc:35:5d:08:77:a0:61:5a:1a:aa:5b:56:82:db: 79:ad:24:fa:9a:8b:03:d4:41:cc:93:4f:0d:50:7a:70:d7:fc: 51:56:2c:a2:4b:42:70:2f:be:49:68:9a:8e:7e:d4:a6:2a:70: d4:31:15:10:c2:8d:7f:4d:4e:34:91:6c:a0:c9:e5:8a:93:fe: 83:d5:12:f5:82:b2:c3:fd:ee:e8:e5:53:5c:07:65:f1:b8:83: 36:fa:b6:99:41:2b:ab:14:7e:8a:7d:77:9f:5b:41:c0:4a:94: d3:44:79:70:16:ff:fd:52:82:3c:79:04:a7:9c:3b:6b:5a:67: 14:f2:b3:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgk3fwnG07ngvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OTA0NjJkOTUtYzFkNy00Njc5LWE0MDYtNDU1ZjQyZjA0Mjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5PRhmfnneRZ87ZWoIFjuWSorRrFXuzX9SuG 9KJd91fpkH7J3bzSfYqICazN8WHLleuJlD3b58l12ys5adewWC9LAkI6+9aXbk8k 03XWRlHnaH8/W7V3O6mBUhA75vDp99p730AcB7uueguYX3z1+vyV4Apefv7nUPdq bmZQaBIvlookJTzaNWi2EtYKIuXOoz7DS0i55vq/KvkBGAD6RsKZ1/2FujxV3OOm wYTHCB+j6qvg0Q+hQvZm5eAqsZCZb7gVIInxf+HjBR3u7pQjFd1BA3RvNwSTKYGI m0H7PzUs/qF/u2s70jkpENM+tnBsXL49ITcQmlrFOhM3t0CdhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtjP/Y3ezHMWZLq0x/nyZVoOvK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDFhYzYwYzUtOTU5Ny0z ZGM2LTk2ZjktYTMzOTA1MTcxNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbj3Q4vl7+5geF6PXiagElE94rJl1FaUCbtNfpTSobJfRPsXYpLlbGm l368Vbz4agM0q9bP9QdLu6Ec0fk5osXOJACd3NSCiTLaC5DiZkkRIMC3xt7GROYq RIaAo1BHleaFuRcZ1idC4K8N0gQAKlyHUGO4u7MIZAs23HyddpqgnRz8NV0Id6Bh WhqqW1aC23mtJPqaiwPUQcyTTw1QenDX/FFWLKJLQnAvvklomo5+1KYqcNQxFRDC jX9NTjSRbKDJ5YqT/oPVEvWCssP97ujlU1wHZfG4gzb6tplBK6sUfop9d59bQcBK lNNEeXAW//1Sgjx5BKecO2taZxTys1w= -----END CERTIFICATE-----Generated at Thu Aug 7 01:06:39 2025 by rpki-client