$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d8ba6982-d75e-33e5-a960-aba6c0606434.roa File: d8ba6982-d75e-33e5-a960-aba6c0606434.roa (raw, json) Hash identifier: 0tDrpW0vOlcflNfwTlXMK7j+bz4RWj0sAHK6v/8EgzI= Subject key identifier: 2E:8B:32:72:9D:B6:A7:60:19:C4:EF:E1:48:A0:20:81:7E:0C:63:FA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB3D8DA7E97B8606CEAE80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d8ba6982-d75e-33e5-a960-aba6c0606434.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 65.22.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:3d:8d:a7:e9:7b:86:06:ce:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=ff7d880d-10fe-41f3-b9cc-e7d729496d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:15:63:a9:43:e8:56:1e:fd:f8:32:89:d8:eb: ee:73:82:e5:22:7b:d9:ed:20:a3:81:d9:dd:3a:9e: ed:7b:d1:a3:c4:62:e9:87:d8:ca:58:8e:d6:67:25: ac:77:4c:ad:4f:83:06:52:e7:63:1f:1f:63:e0:fd: 23:0c:f5:c5:7a:b9:fa:da:30:6e:94:df:87:b5:38: bf:47:e4:44:ec:fa:98:84:72:c3:e2:4b:bd:3f:23: 14:8d:06:1d:10:12:25:b9:ce:c9:13:0d:65:28:88: 5a:01:45:cb:08:1c:c4:a8:24:fd:8f:18:d0:5a:98: 2e:20:88:89:dd:51:01:cd:3c:91:32:58:28:98:37: 9d:de:28:ff:c7:c3:05:0e:e0:e7:29:5b:96:49:e2: 81:7f:5e:18:fb:ac:63:ff:35:e3:29:6a:3d:e0:24: 29:c0:7c:35:06:ca:18:29:c5:1c:54:de:68:ca:c1: f4:11:a8:ad:eb:ef:ed:9d:64:a6:a2:dc:4a:4d:41: 53:a6:cd:ed:e9:4c:23:18:1a:26:1b:72:58:8a:c4: 37:4d:d7:d6:15:42:9c:63:7a:47:4c:21:b0:c7:70: e2:10:57:83:39:fe:d9:2d:d2:6a:2c:56:d4:0e:1c: ed:38:1a:29:9d:42:56:32:27:72:4d:fe:22:6e:65: 84:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8B:32:72:9D:B6:A7:60:19:C4:EF:E1:48:A0:20:81:7E:0C:63:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d8ba6982-d75e-33e5-a960-aba6c0606434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b6:78:5a:7f:9c:5a:e4:e9:e6:10:7e:c6:e8:9d:02:51:e5: ef:34:80:fe:04:c9:e2:01:c9:d1:2c:03:dd:02:3b:b7:62:1d: d6:f2:14:c2:d0:a6:3c:f6:b2:f2:16:5c:18:a9:b5:1d:ef:6b: 1c:b0:2a:7f:bf:2f:d4:a2:fa:46:3c:30:e8:0d:d4:11:82:2e: d1:13:48:3e:2a:ec:cc:45:a1:03:c0:1d:a1:99:10:24:e5:6b: 1b:46:da:d7:bb:7b:84:b8:7c:a9:35:e6:09:d1:c2:99:f9:da: 2f:32:1c:82:b4:90:c3:31:39:07:f8:d0:8f:01:ff:a1:be:cb: 3f:12:0a:07:ed:82:00:34:6c:c8:86:9c:9c:2d:ac:40:39:0e: 22:3b:8c:e1:3f:1d:9a:f3:ee:e5:3b:ca:1a:2a:54:43:b7:e6: ed:70:24:08:36:bd:67:a0:d8:d9:74:1e:00:3d:45:a7:44:6a: 3e:fb:89:ac:d1:fe:58:db:5a:20:2b:4e:d4:ea:21:03:4e:f6: e1:35:6c:11:26:f2:da:65:50:a6:33:5b:d2:f9:fb:7b:f1:07: c3:61:ba:49:6b:6b:5e:31:48:2e:52:dc:f1:a4:0b:f6:18:c0: 79:74:59:6e:82:e3:b1:8b:3e:4e:a4:c1:bd:d0:e2:fa:06:b5: 5e:ff:c8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCqz2Np+l7hgbOroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk ZmY3ZDg4MGQtMTBmZS00MWYzLWI5Y2MtZTdkNzI5NDk2ZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhVjqUPoVh79+DKJ2Ovuc4LlInvZ7SCjgdnd Op7te9GjxGLph9jKWI7WZyWsd0ytT4MGUudjHx9j4P0jDPXFern62jBulN+HtTi/ R+RE7PqYhHLD4ku9PyMUjQYdEBIluc7JEw1lKIhaAUXLCBzEqCT9jxjQWpguIIiJ 3VEBzTyRMlgomDed3ij/x8MFDuDnKVuWSeKBf14Y+6xj/zXjKWo94CQpwHw1BsoY KcUcVN5oysH0Eait6+/tnWSmotxKTUFTps3t6UwjGBomG3JYisQ3TdfWFUKcY3pH TCGwx3DiEFeDOf7ZLdJqLFbUDhztOBopnUJWMidyTf4ibmWEjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6LMnKdtqdgGcTv4UigIIF+DGP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDhiYTY5ODItZDc1ZS0z M2U1LWE5NjAtYWJhNmMwNjA2NDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK2eFp/nFrk6eYQfsbonQJR5e80gP4EyeIBydEsA90CO7diHdbyFMLQ pjz2svIWXBiptR3vaxywKn+/L9Si+kY8MOgN1BGCLtETSD4q7MxFoQPAHaGZECTl axtG2te7e4S4fKk15gnRwpn52i8yHIK0kMMxOQf40I8B/6G+yz8SCgftggA0bMiG nJwtrEA5DiI7jOE/HZrz7uU7yhoqVEO35u1wJAg2vWeg2Nl0HgA9RadEaj77iazR /ljbWiArTtTqIQNO9uE1bBEm8tplUKYzW9L5+3vxB8Nhuklra14xSC5S3PGkC/YY wHl0WW6C47GLPk6kwb3Q4voGtV7/yME= -----END CERTIFICATE-----Generated at Thu Aug 7 05:00:16 2025 by rpki-client