$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7853a56-d149-3813-830d-1895313d7aeb.roa File: f7853a56-d149-3813-830d-1895313d7aeb.roa (raw, json) Hash identifier: cdeFsWKqLn8iOy+gTJq1HQ5tBupFxBRauNWmouIVJXQ= Subject key identifier: 5D:B5:EB:8C:3D:B2:75:6F:3D:2D:B5:84:E7:FA:1E:FD:C6:14:11:C8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460A66871398B145054AE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7853a56-d149-3813-830d-1895313d7aeb.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0a:66:87:13:98:b1:45:05:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=f67d248d-8baf-4137-8ae0-c198ce68e6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:65:e0:13:30:82:a1:03:ca:fe:39:10:71: e4:b5:4e:64:08:01:2e:84:25:78:b1:75:12:db:e7: 77:80:0d:49:f9:30:90:1f:d6:0b:72:e9:3f:1a:08: 61:69:71:a4:8d:7b:d7:06:70:4c:fb:19:ef:4f:22: cd:1f:53:b4:50:70:1f:7a:ba:c0:78:b6:fe:bb:6e: f0:94:d7:59:ce:ce:8d:ca:7c:a5:4c:f4:57:39:fb: e2:23:db:9f:d0:53:07:c4:60:d9:d1:0d:49:25:47: d1:b8:54:7a:65:49:10:4e:f4:15:47:e1:aa:2d:96: 53:e3:06:50:89:2f:03:59:88:be:ce:4a:4e:2f:c9: 4a:56:ed:b5:68:25:0e:ac:76:3e:d1:9d:0e:db:8c: ef:40:97:76:b0:4b:72:c9:18:39:d5:03:29:bb:68: 3d:75:40:0f:82:78:b6:53:45:f5:03:c1:4b:98:c2: 87:2a:ad:ac:99:a2:12:70:d6:67:ca:43:c9:bd:23: 60:e5:fb:db:6d:04:4e:0c:75:79:0b:39:0f:21:6d: d7:04:44:08:96:da:a0:f9:28:ba:c9:d8:f6:a6:fb: a2:c4:97:e4:4c:d2:34:3c:cc:61:a0:8b:ae:2a:cd: f6:b7:e2:c4:d6:4d:73:68:c8:8b:bd:d6:91:c5:54: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B5:EB:8C:3D:B2:75:6F:3D:2D:B5:84:E7:FA:1E:FD:C6:14:11:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7853a56-d149-3813-830d-1895313d7aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:0c:27:5a:19:bd:86:ce:46:7d:a6:46:48:0d:35:53:eb:ed: 6b:af:97:a4:de:37:04:5d:a6:f4:32:0a:a9:32:04:3b:af:4c: 5b:21:d9:34:48:c9:3e:57:92:1d:22:de:a4:a9:a2:80:93:49: 4e:2e:da:02:84:1f:25:2f:d3:5c:f7:0d:98:f7:c6:c6:e3:e5: 4b:fb:3b:3e:01:97:96:e7:53:bc:2c:38:dd:72:e3:4a:7b:0a: 23:8b:f8:9f:f7:1f:c8:be:3b:60:68:a9:94:59:ff:d3:b8:a5: ff:64:de:8a:f2:33:59:62:5b:7b:53:ac:40:13:59:ad:b4:cf: 48:e3:5d:4d:f3:5b:8a:3b:36:9d:45:da:9d:59:11:d5:75:22: c2:23:ed:51:33:ee:e6:b8:37:90:88:5a:5b:e5:7d:41:7f:90: 91:96:80:ea:12:59:0f:d1:a7:32:fa:c1:ac:d9:a2:80:35:d0: 92:2f:9e:e1:62:46:3d:f3:49:89:df:34:63:c8:99:b2:26:68: 50:54:8a:2b:ba:db:a5:3b:33:bf:1b:db:ae:06:67:cf:0d:aa: ca:de:ec:2e:dc:a3:e2:8e:f9:16:54:08:05:0f:6b:e1:5b:5e: 73:db:07:8b:57:01:51:44:12:46:03:2b:86:6d:d0:5a:f8:95: f9:c0:3f:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgpmhxOYsUUFSuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZjY3ZDI0OGQtOGJhZi00MTM3LThhZTAtYzE5OGNlNjhlNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLdl4BMwgqEDyv45EHHktU5kCAEuhCV4sXUS 2+d3gA1J+TCQH9YLcuk/GghhaXGkjXvXBnBM+xnvTyLNH1O0UHAferrAeLb+u27w lNdZzs6NynylTPRXOfviI9uf0FMHxGDZ0Q1JJUfRuFR6ZUkQTvQVR+GqLZZT4wZQ iS8DWYi+zkpOL8lKVu21aCUOrHY+0Z0O24zvQJd2sEtyyRg51QMpu2g9dUAPgni2 U0X1A8FLmMKHKq2smaIScNZnykPJvSNg5fvbbQRODHV5CzkPIW3XBEQIltqg+Si6 ydj2pvuixJfkTNI0PMxhoIuuKs32t+LE1k1zaMiLvdaRxVTcJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2164w9snVvPS21hOf6Hv3GFBHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjc4NTNhNTYtZDE0OS0z ODEzLTgzMGQtMTg5NTMxM2Q3YWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEMJ1oZvYbORn2mRkgNNVPr7Wuvl6TeNwRdpvQyCqkyBDuvTFsh2TRI yT5Xkh0i3qSpooCTSU4u2gKEHyUv01z3DZj3xsbj5Uv7Oz4Bl5bnU7wsON1y40p7 CiOL+J/3H8i+O2BoqZRZ/9O4pf9k3oryM1liW3tTrEATWa20z0jjXU3zW4o7Np1F 2p1ZEdV1IsIj7VEz7ua4N5CIWlvlfUF/kJGWgOoSWQ/RpzL6wazZooA10JIvnuFi Rj3zSYnfNGPImbImaFBUiiu626U7M78b264GZ88Nqsre7C7co+KO+RZUCAUPa+Fb XnPbB4tXAVFEEkYDK4Zt0Fr4lfnAPz8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:59:57 2025 by rpki-client