$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa File: f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa (raw, json) Hash identifier: H3AKH4vEfQfdhfIShjwH9wo6AJ6RWfX2NQNpnBXpCqQ= Subject key identifier: D2:4C:8A:9C:74:BB:33:73:43:02:8F:80:EF:43:32:C9:15:48:92:70 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814613CC651BE808707E8C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:13:cc:65:1b:e8:08:70:7e:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=b40d1055-cc6e-4cc1-88b8-9244be3108a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a6:4e:64:a6:3a:82:6b:ce:99:34:07:ab:e6: 1b:25:5f:ce:05:2f:63:23:d9:2e:7f:af:32:34:d5: 18:bd:d4:c7:78:14:97:0a:04:fd:d9:e7:26:c8:cb: 11:ff:52:4a:69:23:50:8f:61:1d:80:ef:a7:8c:6c: db:2d:d6:f4:9f:4f:83:1d:77:78:5c:68:f5:d2:b3: 6e:1b:49:c5:6c:04:7b:d1:32:03:5f:2c:1d:07:b9: d9:b2:3d:5a:03:5f:30:84:c0:bf:33:24:fe:99:87: 91:0d:9d:ac:af:36:0a:f3:fc:3b:62:7d:7b:fd:be: b5:df:d9:cc:07:90:fd:02:12:ed:58:d9:b8:4e:b9: d4:2f:9f:0f:95:0e:54:f5:71:ad:8a:c4:5f:33:ae: 1f:e2:8a:79:b0:51:99:04:76:1b:20:3d:cb:52:56: 70:b9:99:3e:4f:47:80:e5:2d:02:49:7e:eb:0d:23: 83:69:ee:09:c6:b6:33:be:e6:c1:e7:7e:ef:b4:12: 6b:e7:d5:8c:c4:fd:46:d1:18:79:a7:c0:7d:ca:4c: d1:1d:00:a5:c6:ce:33:83:3e:b1:87:1a:15:3c:d7: 90:7b:0e:20:5d:b9:cf:d4:62:84:8b:e0:be:ef:7e: 00:ad:2e:20:2e:4c:89:97:8b:0c:9c:21:0c:aa:ae: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4C:8A:9C:74:BB:33:73:43:02:8F:80:EF:43:32:C9:15:48:92:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ee:b1:b0:a7:eb:45:db:22:1e:8e:a8:d1:5b:85:60:6a:1c: 5f:0c:7a:4f:f4:06:46:45:17:b4:45:57:40:e8:7a:36:29:68: b2:6f:2e:70:34:f9:ed:06:f7:d1:d3:60:96:03:ad:a8:09:9e: db:2c:f1:bd:cb:75:d8:16:01:5a:bc:32:92:63:2f:69:be:25: 3c:f4:03:65:79:a0:8b:41:ea:ce:ee:6b:4b:48:c6:5a:f3:64: 1f:2b:e5:e1:07:7b:dc:c0:7a:46:7e:26:95:cf:45:eb:20:1c: 97:7e:a1:72:09:1b:7e:e3:3b:08:05:b2:85:b7:7e:b3:f5:9d: 89:7a:3c:10:35:03:a6:8f:0c:30:ae:91:59:09:37:0b:53:6e: b1:9b:92:57:94:1b:ab:ad:f4:46:b4:9e:1f:67:b2:a3:20:16: 75:20:75:14:67:ac:a7:63:17:77:43:a7:c1:9a:11:ad:d2:31: 57:62:a9:f0:d5:a0:6f:df:8b:b3:b0:ee:d0:0e:a1:23:06:a8: 79:84:a5:db:ad:a6:2d:ce:2b:0f:8f:15:18:d7:19:4d:d7:26: 1b:f4:9d:15:fe:f0:f8:d6:ec:07:84:d5:f0:21:50:b1:86:e6: 77:7b:1b:c9:0e:a2:bf:5b:76:44:72:e8:60:c3:c4:5d:de:41: 4e:78:2d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhPMZRvoCHB+jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YjQwZDEwNTUtY2M2ZS00Y2MxLTg4YjgtOTI0NGJlMzEwOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKZOZKY6gmvOmTQHq+YbJV/OBS9jI9kuf68y NNUYvdTHeBSXCgT92ecmyMsR/1JKaSNQj2EdgO+njGzbLdb0n0+DHXd4XGj10rNu G0nFbAR70TIDXywdB7nZsj1aA18whMC/MyT+mYeRDZ2srzYK8/w7Yn17/b6139nM B5D9AhLtWNm4TrnUL58PlQ5U9XGtisRfM64f4op5sFGZBHYbID3LUlZwuZk+T0eA 5S0CSX7rDSODae4JxrYzvubB537vtBJr59WMxP1G0Rh5p8B9ykzRHQClxs4zgz6x hxoVPNeQew4gXbnP1GKEi+C+734ArS4gLkyJl4sMnCEMqq5TrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJMipx0uzNzQwKPgO9DMskVSJJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjc0Y2YyMTctMWUyNy0z Yzg4LWE2ZDItZjc0M2I3YmJmZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPusbCn60XbIh6OqNFbhWBqHF8Mek/0BkZFF7RFV0DoejYpaLJvLnA0 +e0G99HTYJYDragJntss8b3LddgWAVq8MpJjL2m+JTz0A2V5oItB6s7ua0tIxlrz ZB8r5eEHe9zAekZ+JpXPResgHJd+oXIJG37jOwgFsoW3frP1nYl6PBA1A6aPDDCu kVkJNwtTbrGbkleUG6ut9Ea0nh9nsqMgFnUgdRRnrKdjF3dDp8GaEa3SMVdiqfDV oG/fi7Ow7tAOoSMGqHmEpdutpi3OKw+PFRjXGU3XJhv0nRX+8PjW7AeE1fAhULGG 5nd7G8kOor9bdkRy6GDDxF3eQU54LQo= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:20 2025 by rpki-client