$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa File: d3d48afe-6908-31d4-958a-74f7b78b9069.roa (raw, json) Hash identifier: c+U7fQOTzah63lCG2mpgO29g6w5F2E04J+2H7kuqVRs= Subject key identifier: 59:8B:1A:67:5B:5F:98:5E:C5:D3:1A:EE:F3:EC:B8:CA:CA:3A:D0:D8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460AA1162F9CC65BDB0A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0a:a1:16:2f:9c:c6:5b:db:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=00034c9a-410a-46a3-b54f-13377ca2135d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:bc:99:b7:0b:48:66:f4:2b:c8:72:65:de: b9:07:34:55:bb:1b:a9:73:d0:e5:09:fe:3e:49:cb: 98:55:1c:2a:ac:38:e1:03:9c:76:a9:01:30:a2:89: 68:b1:ec:03:b7:19:01:9f:52:8c:42:87:48:aa:91: 2b:99:ab:cb:b4:1c:fe:19:80:9b:5e:d6:f2:9b:a2: fa:50:61:58:51:27:0c:1c:90:df:55:0b:8b:53:b9: 73:4d:30:b4:80:b2:e4:b7:cf:99:45:ec:91:0a:f0: 4e:34:c3:96:7b:a9:70:b9:a7:31:99:70:d5:cc:c5: 07:8f:9b:ac:d4:41:29:39:c5:77:1e:f5:77:7a:1b: 32:da:fc:33:a8:56:f3:29:46:36:c4:7c:95:83:bc: 27:b3:bb:bc:5d:95:59:4b:3e:75:bc:41:f3:e1:7f: d0:d6:cd:35:e9:f1:56:b2:94:fa:c1:4a:20:1d:fd: 58:53:19:58:8a:d8:7a:7a:0b:e1:ff:d1:77:ab:cf: 90:27:13:a9:a1:8a:bc:23:5a:df:89:a9:f7:2f:0f: 59:5f:04:71:c0:f7:85:ac:a3:d6:b7:3f:77:3d:0c: f2:48:f2:b0:aa:10:ce:88:e0:9c:6a:31:b6:c2:aa: 34:f3:c2:17:c6:ab:8e:48:ea:a7:7f:47:ac:76:28: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8B:1A:67:5B:5F:98:5E:C5:D3:1A:EE:F3:EC:B8:CA:CA:3A:D0:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:0d:74:dd:75:7e:33:4c:4e:77:12:8a:96:1e:7c:f3:fd:14: 9f:a9:89:94:5b:d5:19:bb:e2:22:69:b1:88:fe:61:7f:0e:dc: e7:09:1c:bb:8a:55:19:56:60:f0:f6:f8:e8:28:bb:e1:d3:3b: cc:f0:6d:3d:5e:b5:30:af:13:ea:3b:40:6e:eb:c5:35:fb:73: 2b:77:6d:9e:4c:c5:fb:de:13:4a:88:b9:8a:29:ab:00:83:94: 03:94:8f:70:56:1b:f9:d5:d8:9f:29:2d:22:7d:0c:7a:d8:42: 80:7b:28:c3:76:4b:94:42:ef:a4:09:a6:b8:bb:ab:51:d8:21: ba:e0:d8:55:ac:9f:31:d6:06:89:54:3e:54:ee:d0:80:22:91: 71:52:18:bd:93:c1:28:11:a6:67:16:ed:93:24:b5:36:26:0f: d9:6b:34:a4:f5:f7:6e:49:ef:b1:60:70:ae:14:65:f3:72:54: cc:c3:c0:ef:0a:94:0c:9a:da:eb:c9:3b:77:20:59:cd:42:09: f2:7d:05:ce:df:9a:0b:e5:9d:f7:53:f1:aa:dc:1c:8b:0c:d6: ef:2c:bb:f3:d2:a4:1a:5b:a9:8e:56:46:4c:58:a5:a3:4a:00: ad:af:ec:90:4b:05:fc:0a:da:0c:a0:9a:bc:36:99:1e:4c:7e: 1f:f9:3f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgqhFi+cxlvbCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MDAwMzRjOWEtNDEwYS00NmEzLWI1NGYtMTMzNzdjYTIxMzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimW8mbcLSGb0K8hyZd65BzRVuxupc9DlCf4+ ScuYVRwqrDjhA5x2qQEwoolosewDtxkBn1KMQodIqpErmavLtBz+GYCbXtbym6L6 UGFYUScMHJDfVQuLU7lzTTC0gLLkt8+ZReyRCvBONMOWe6lwuacxmXDVzMUHj5us 1EEpOcV3HvV3ehsy2vwzqFbzKUY2xHyVg7wns7u8XZVZSz51vEHz4X/Q1s016fFW spT6wUogHf1YUxlYith6egvh/9F3q8+QJxOpoYq8I1rfian3Lw9ZXwRxwPeFrKPW tz93PQzySPKwqhDOiOCcajG2wqo088IXxquOSOqnf0esdighOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmLGmdbX5hexdMa7vPsuMrKOtDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDNkNDhhZmUtNjkwOC0z MWQ0LTk1OGEtNzRmN2I3OGI5MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8NdN11fjNMTncSipYefPP9FJ+piZRb1Rm74iJpsYj+YX8O3OcJHLuK VRlWYPD2+Ogou+HTO8zwbT1etTCvE+o7QG7rxTX7cyt3bZ5MxfveE0qIuYopqwCD lAOUj3BWG/nV2J8pLSJ9DHrYQoB7KMN2S5RC76QJpri7q1HYIbrg2FWsnzHWBolU PlTu0IAikXFSGL2TwSgRpmcW7ZMktTYmD9lrNKT1925J77FgcK4UZfNyVMzDwO8K lAya2uvJO3cgWc1CCfJ9Bc7fmgvlnfdT8arcHIsM1u8su/PSpBpbqY5WRkxYpaNK AK2v7JBLBfwK2gygmrw2mR5Mfh/5P1o= -----END CERTIFICATE-----Generated at Thu Aug 7 03:23:10 2025 by rpki-client