$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e8d0b251-7ba5-3d57-a466-a01de36dbec7.roa File: e8d0b251-7ba5-3d57-a466-a01de36dbec7.roa (raw, json) Hash identifier: b3X8ZW3WIBB3w4w3aNSgPiqymfaRAz3JfknfV0VEURw= Subject key identifier: 85:5B:8C:9E:87:45:08:B9:4D:0D:F2:D1:B6:44:F1:77:69:89:D3:0A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461329354915008A33D440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e8d0b251-7ba5-3d57-a466-a01de36dbec7.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:13:29:35:49:15:00:8a:33:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=437165a9-8c80-4146-8e3a-97946f9dfa0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:5d:ae:6e:dc:84:08:68:1f:eb:b6:ca:0a: 20:22:fd:9b:34:e0:d1:55:10:0e:c7:e4:98:76:6e: c2:26:c3:a9:45:7e:30:a0:fb:fd:e4:58:d0:48:42: 87:09:00:51:73:d5:f1:5d:19:4a:cb:fb:97:48:35: 5f:2d:e9:94:46:b7:c7:cd:54:40:5e:00:4a:5d:f3: d0:52:8d:ab:90:25:20:4c:15:af:a8:8b:18:8a:20: 57:a5:07:9c:91:e2:f6:c1:6b:96:73:03:89:09:bd: ec:97:f4:ee:f8:fa:2b:5a:f1:ab:f6:65:e5:eb:4d: 69:52:23:8a:af:19:28:a4:dd:d5:05:1c:5f:b4:02: ec:c2:ff:d2:f6:d2:f3:db:5c:03:f1:c2:0d:e5:05: 04:4d:00:5d:9b:c3:88:df:5a:79:b3:27:cc:e1:79: 92:25:4a:bc:c0:a9:a8:ca:89:eb:3b:2d:89:b8:18: 33:12:95:a0:04:0c:67:ab:58:0a:9d:81:e6:4d:7b: 51:a6:65:7a:18:ee:8a:97:c5:e9:c5:71:71:fa:36: a4:84:4b:14:e1:c7:e5:57:95:c4:6b:0b:ca:97:e0: f0:9a:33:b5:51:32:0a:ba:f1:06:e4:7c:45:2c:0c: 6b:ea:72:43:16:a4:b1:67:d7:d0:9c:90:d8:39:22: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5B:8C:9E:87:45:08:B9:4D:0D:F2:D1:B6:44:F1:77:69:89:D3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e8d0b251-7ba5-3d57-a466-a01de36dbec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:28:7b:5d:f8:0c:ff:90:8e:23:8f:c5:c3:5c:59:76:8d:6e: bb:32:a2:77:ad:72:84:5f:6b:31:fd:0f:8b:79:c5:89:68:e9: 97:61:a9:d5:82:4d:6e:60:60:d5:6d:07:3c:f7:87:a7:94:cf: 10:38:c1:d2:07:4c:a7:09:26:24:7e:a6:ec:18:6c:21:1e:e9: d8:f2:1a:81:59:9d:07:56:16:ed:85:09:8e:33:a1:8b:18:67: ac:47:e5:7a:5d:56:d2:32:64:12:d4:3b:3d:d4:10:a8:75:20: 0f:68:da:5a:f3:16:71:5c:d1:ca:42:e4:78:47:de:58:86:2f: 07:0f:87:c7:0b:7e:a5:e6:93:81:e8:1f:e0:8c:0e:13:c1:41: 1d:21:78:96:d1:f4:4c:a1:30:52:2e:a2:89:4c:c3:b9:fe:14: c5:84:18:0f:4a:e5:ef:60:87:ff:d9:2a:77:49:c3:8d:c8:f3: ec:d9:ab:2c:51:c2:d8:aa:71:0a:60:25:8a:0a:ea:c5:4b:74: 3f:8b:a1:11:ef:20:51:26:45:95:88:91:ad:fa:57:22:c0:7e: 0f:d1:18:19:c6:3b:f4:67:a8:8c:34:61:b6:77:40:8f:f6:7b: 8a:af:4f:cb:0f:e3:72:fa:fd:3b:43:c1:76:65:3c:5b:98:a9: cf:40:4f:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhMpNUkVAIoz1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NDM3MTY1YTktOGM4MC00MTQ2LThlM2EtOTc5NDZmOWRmYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMddrm7chAhoH+u2ygogIv2bNODRVRAOx+SY dm7CJsOpRX4woPv95FjQSEKHCQBRc9XxXRlKy/uXSDVfLemURrfHzVRAXgBKXfPQ Uo2rkCUgTBWvqIsYiiBXpQeckeL2wWuWcwOJCb3sl/Tu+PorWvGr9mXl601pUiOK rxkopN3VBRxftALswv/S9tLz21wD8cIN5QUETQBdm8OI31p5syfM4XmSJUq8wKmo yonrOy2JuBgzEpWgBAxnq1gKnYHmTXtRpmV6GO6Kl8XpxXFx+jakhEsU4cflV5XE awvKl+DwmjO1UTIKuvEG5HxFLAxr6nJDFqSxZ9fQnJDYOSIQVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVbjJ6HRQi5TQ3y0bZE8XdpidMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZThkMGIyNTEtN2JhNS0z ZDU3LWE0NjYtYTAxZGUzNmRiZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwoe134DP+QjiOPxcNcWXaNbrsyonetcoRfazH9D4t5xYlo6ZdhqdWC TW5gYNVtBzz3h6eUzxA4wdIHTKcJJiR+puwYbCEe6djyGoFZnQdWFu2FCY4zoYsY Z6xH5XpdVtIyZBLUOz3UEKh1IA9o2lrzFnFc0cpC5HhH3liGLwcPh8cLfqXmk4Ho H+CMDhPBQR0heJbR9EyhMFIuoolMw7n+FMWEGA9K5e9gh//ZKndJw43I8+zZqyxR wtiqcQpgJYoK6sVLdD+LoRHvIFEmRZWIka36VyLAfg/RGBnGO/RnqIw0YbZ3QI/2 e4qvT8sP43L6/TtDwXZlPFuYqc9AT34= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:47 2025 by rpki-client