$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa File: d5b724de-9f61-31f2-b085-181a0a9d1526.roa (raw, json) Hash identifier: pygOB+c/EIdeWb5eSuXh5MM3BJ4uuMpxTh5cydJZYO4= Subject key identifier: 41:E0:01:2C:F4:6F:1D:2A:2D:C5:80:1D:1E:3A:89:B7:BF:8B:80:25 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8146123771DF496201110280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:12:37:71:df:49:62:01:11:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=f26edd02-59de-4118-b71a-612f1ede148f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:40:79:9d:ad:6f:ac:1d:8f:6b:0a:d3:3d: 7c:af:74:d5:b8:45:b5:75:eb:91:eb:0c:93:6c:96: 39:43:28:09:f5:14:f9:5e:ef:48:f9:3b:f5:b9:2d: 37:1f:13:5a:00:9c:d7:0f:e4:f7:4f:48:c2:d0:55: 2f:62:37:15:8b:e6:6a:6c:15:84:85:29:1d:bb:01: e7:1c:76:02:1e:07:34:28:4e:60:78:d5:e7:b4:22: 2f:3a:90:83:1d:65:4d:63:d2:96:b8:94:3e:af:65: 88:0a:4b:c7:2c:62:bf:3b:70:57:06:57:69:52:f3: a4:76:95:fc:62:9b:4c:0f:8f:fb:01:6e:47:2d:04: 0a:85:64:ec:b9:09:45:98:49:1e:2f:82:e4:8b:66: 6b:e6:da:b6:5e:1a:6c:7a:08:79:bf:73:d3:2e:42: cc:43:6b:b4:1c:e0:65:bb:27:1a:a0:26:60:82:40: 58:67:98:3f:f4:43:c6:10:79:7f:00:c6:eb:74:8e: 10:28:ed:4e:ca:66:85:bb:19:a7:25:d5:db:e3:34: ee:36:e4:0b:3a:7c:96:49:90:58:ed:45:8d:df:b7: 09:6c:9b:81:c5:d0:f5:7d:e3:4e:25:23:8c:2a:1c: 43:ad:e1:52:ed:9f:e2:50:a4:ee:a7:07:81:70:b2: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E0:01:2C:F4:6F:1D:2A:2D:C5:80:1D:1E:3A:89:B7:BF:8B:80:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2d:ff:39:6c:25:0a:d2:49:35:ef:50:73:69:31:ba:69:7f: 58:8c:fc:47:9e:61:0e:e1:01:c9:b2:e6:8d:37:11:a4:66:17: b3:7c:1e:9c:99:7c:7f:4d:ac:f6:ac:88:8b:45:db:ab:04:54: bb:08:23:4a:8e:bc:c3:fe:de:2d:70:d3:89:e5:f6:01:40:22: 3c:2e:bd:57:75:7d:b9:8c:32:5b:cc:e4:2d:52:f6:67:fd:17: b1:1e:bb:19:1a:50:8a:bf:ee:40:31:a3:44:9b:ac:50:fd:86: 96:74:33:7e:84:45:96:53:7e:e0:92:98:b3:21:3f:f5:62:fa: 01:e3:99:81:df:06:8d:39:51:bf:37:c3:18:af:0e:02:a0:70: ed:de:da:7a:ca:d1:d5:81:78:7d:4d:70:5e:0b:94:66:22:88: 08:ca:9c:31:25:fb:e3:69:df:e9:18:50:94:47:fe:82:1a:b1: 72:5c:3d:5a:e2:55:38:fd:75:88:f8:54:6b:eb:2a:0e:f7:79: 2a:1e:6f:12:18:b9:94:ed:45:a3:ae:38:08:32:fc:41:ac:ff: 83:d0:9a:cb:b3:0c:56:e7:b5:06:76:15:ba:69:58:da:07:fd: a5:91:9c:bf:a0:09:35:65:64:63:92:d7:ea:e9:f7:1b:48:69: 05:4c:c5:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhI3cd9JYgERAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZjI2ZWRkMDItNTlkZS00MTE4LWI3MWEtNjEyZjFlZGUxNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvVAeZ2tb6wdj2sK0z18r3TVuEW1deuR6wyT bJY5QygJ9RT5Xu9I+Tv1uS03HxNaAJzXD+T3T0jC0FUvYjcVi+ZqbBWEhSkduwHn HHYCHgc0KE5geNXntCIvOpCDHWVNY9KWuJQ+r2WICkvHLGK/O3BXBldpUvOkdpX8 YptMD4/7AW5HLQQKhWTsuQlFmEkeL4Lki2Zr5tq2Xhpsegh5v3PTLkLMQ2u0HOBl uycaoCZggkBYZ5g/9EPGEHl/AMbrdI4QKO1OymaFuxmnJdXb4zTuNuQLOnyWSZBY 7UWN37cJbJuBxdD1feNOJSOMKhxDreFS7Z/iUKTupweBcLL+zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHgASz0bx0qLcWAHR46ibe/i4AlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDViNzI0ZGUtOWY2MS0z MWYyLWIwODUtMTgxYTBhOWQxNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIt/zlsJQrSSTXvUHNpMbppf1iM/EeeYQ7hAcmy5o03EaRmF7N8HpyZ fH9NrPasiItF26sEVLsII0qOvMP+3i1w04nl9gFAIjwuvVd1fbmMMlvM5C1S9mf9 F7EeuxkaUIq/7kAxo0SbrFD9hpZ0M36ERZZTfuCSmLMhP/Vi+gHjmYHfBo05Ub83 wxivDgKgcO3e2nrK0dWBeH1NcF4LlGYiiAjKnDEl++Np3+kYUJRH/oIasXJcPVri VTj9dYj4VGvrKg73eSoebxIYuZTtRaOuOAgy/EGs/4PQmsuzDFbntQZ2FbppWNoH /aWRnL+gCTVlZGOS1+rp9xtIaQVMxf4= -----END CERTIFICATE-----Generated at Thu Aug 7 01:06:51 2025 by rpki-client