$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa File: 043392a1-76c7-3951-b215-fe1dd38b254d.roa (raw, json) Hash identifier: S6fPdH8m6wmjiuYN8pTwAvZlZ7Ku3SToHvhpny9ed+4= Subject key identifier: 4A:F9:4E:AE:8D:B8:13:9C:F3:97:98:C8:F5:8F:E7:A2:9C:F1:D4:10 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814613AE0C4F2E989162EC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:13:ae:0c:4f:2e:98:91:62:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=c89333f2-d34d-4dbe-8d41-4c0260c85bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:5d:01:fd:27:3b:a7:dd:5e:a9:98:6a:a3: 37:9d:ec:61:12:53:db:4a:13:d0:35:f9:4c:17:12: 93:20:2e:95:80:c1:59:b9:85:92:b0:2e:98:c4:2e: d8:19:ae:87:66:10:b7:fb:d0:51:2d:82:c2:6b:18: c0:24:5f:dc:d5:ac:c6:31:34:90:cd:76:86:5e:0b: 1f:00:17:10:f0:08:91:f1:e4:72:5c:52:c3:16:e0: 48:5c:85:fa:16:2f:a0:15:3d:f0:1c:68:81:8c:87: f4:bb:dd:c8:34:e8:3a:8b:7d:20:ed:23:60:ef:9d: ad:df:57:17:30:ed:5a:ec:21:ea:90:8a:d0:71:00: f3:ff:2f:3c:a2:8a:33:1e:96:ad:1f:7d:88:e6:e5: 7d:9f:db:17:0a:82:c9:f5:89:24:7d:2f:fe:da:83: be:3f:08:ec:1a:cd:c2:68:44:81:69:bd:8d:a9:41: 0d:a5:09:b3:ce:4e:80:70:6c:5b:23:14:5f:f2:ef: 03:3c:02:32:bd:37:52:4b:89:f4:8d:50:79:de:2e: ca:fe:c8:a2:7e:2f:3d:84:b7:07:01:38:41:b3:e2: 60:eb:b0:b7:cd:5c:b3:af:8c:b7:15:c3:d5:d6:cf: ef:09:44:b6:6f:85:45:b8:1d:b4:f2:a1:59:7b:0e: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F9:4E:AE:8D:B8:13:9C:F3:97:98:C8:F5:8F:E7:A2:9C:F1:D4:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:8b:aa:41:02:cd:a3:42:41:d8:c8:53:93:0f:f0:99:be:e1: bb:9e:85:cf:e6:b3:cd:45:b1:28:6d:ce:96:aa:35:61:28:ea: 96:fb:fe:4d:7b:80:ce:7a:11:cc:e4:a2:61:01:3c:e0:8c:08: 40:cf:52:7d:7a:98:57:d7:40:5d:57:89:e7:db:1f:65:7d:a0: b2:27:5a:89:59:e2:3d:98:2d:f3:0c:33:cd:e0:df:58:f1:08: 32:9f:a2:42:4a:4e:f4:75:ec:58:a9:5b:5a:45:3d:23:bb:d5: cb:56:1c:2a:9c:f2:16:61:fb:77:73:cb:47:e2:fd:aa:cf:15: 26:be:fd:91:22:9e:1f:6b:d6:fe:dc:e8:74:eb:ce:4b:53:90: 96:65:86:21:60:be:ff:20:2d:0a:f6:c2:d1:82:8d:c7:07:9c: 9f:c6:2d:45:1f:ed:74:78:e9:51:a1:fb:1a:db:49:92:e6:94: 3c:fd:27:10:49:ed:27:7a:22:7d:2f:5b:5c:c6:85:9e:95:e1: f3:08:c6:5f:ac:84:b4:52:bc:68:f6:22:67:4e:15:e1:d6:78: f4:26:1e:95:b4:29:3d:8a:d6:11:be:1f:e8:f8:2b:bf:e5:58: b9:15:f7:9a:7c:96:fb:25:89:6f:cb:a9:18:9b:33:ac:13:ed: 53:60:ed:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhOuDE8umJFi7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk Yzg5MzMzZjItZDM0ZC00ZGJlLThkNDEtNGMwMjYwYzg1YmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiChdAf0nO6fdXqmYaqM3nexhElPbShPQNflM FxKTIC6VgMFZuYWSsC6YxC7YGa6HZhC3+9BRLYLCaxjAJF/c1azGMTSQzXaGXgsf ABcQ8AiR8eRyXFLDFuBIXIX6Fi+gFT3wHGiBjIf0u93INOg6i30g7SNg752t31cX MO1a7CHqkIrQcQDz/y88ooozHpatH32I5uV9n9sXCoLJ9YkkfS/+2oO+PwjsGs3C aESBab2NqUENpQmzzk6AcGxbIxRf8u8DPAIyvTdSS4n0jVB53i7K/siifi89hLcH AThBs+Jg67C3zVyzr4y3FcPV1s/vCUS2b4VFuB208qFZew6QywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr5Tq6NuBOc85eYyPWP56Kc8dQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDQzMzkyYTEtNzZjNy0z OTUxLWIyMTUtZmUxZGQzOGIyNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqLqkECzaNCQdjIU5MP8Jm+4buehc/ms81FsShtzpaqNWEo6pb7/k17 gM56EczkomEBPOCMCEDPUn16mFfXQF1XiefbH2V9oLInWolZ4j2YLfMMM83g31jx CDKfokJKTvR17FipW1pFPSO71ctWHCqc8hZh+3dzy0fi/arPFSa+/ZEinh9r1v7c 6HTrzktTkJZlhiFgvv8gLQr2wtGCjccHnJ/GLUUf7XR46VGh+xrbSZLmlDz9JxBJ 7Sd6In0vW1zGhZ6V4fMIxl+shLRSvGj2ImdOFeHWePQmHpW0KT2K1hG+H+j4K7/l WLkV95p8lvsliW/LqRibM6wT7VNg7X8= -----END CERTIFICATE-----Generated at Thu Aug 7 01:12:24 2025 by rpki-client