$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa File: 08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa (raw, json) Hash identifier: v9qyjik8lpxgH1thN6bMVpsewyT3EHhnW1r2MDJZSps= Subject key identifier: 23:E4:A6:8D:CD:35:C3:24:72:D3:85:F8:0E:E2:0B:95:52:25:A9:43 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460F84CB36C4F33DC909C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0f:84:cb:36:c4:f3:3d:c9:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=4bc63ee5-1d1e-4cc7-90b3-898955b3120c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:df:4f:ff:71:31:0e:c6:77:bc:83:32:50: 8c:69:6d:ab:a7:c6:18:19:3f:c3:04:9d:43:4a:ef: 47:74:de:00:68:f9:9f:1c:94:13:a9:a5:05:f3:f8: d8:d0:04:d3:1b:c5:79:0d:2b:65:a2:90:08:7b:b1: 21:6a:9a:bf:54:2d:9c:a2:1a:97:7a:5e:29:12:2e: cb:ae:b4:09:ff:34:6d:40:56:0e:26:13:c7:67:b2: 58:96:3e:eb:7f:60:d1:18:ea:46:14:2c:97:90:fc: ef:e1:9c:46:de:1e:5d:9b:2c:ac:8c:b6:b4:81:6d: 90:01:44:83:0d:4e:3e:ce:2f:6c:fd:5c:c5:f9:ed: da:a0:89:5b:e0:8e:ff:00:e2:f0:7d:a8:4b:f3:e9: 00:4c:6c:2d:99:d1:a8:5a:4e:9d:fc:eb:de:af:20: ad:20:0e:dd:7c:69:67:b7:b9:34:16:f0:e1:0e:23: 75:51:0e:cc:16:87:dd:c0:1d:6e:0c:0a:98:a7:02: 50:16:94:84:56:4a:72:ae:69:fb:f3:7c:f2:01:5d: 9d:c2:e9:ab:b7:fc:a4:e4:fb:e6:2b:4e:8d:ef:30: 49:5b:4d:0b:0d:d0:52:28:72:a6:aa:5b:14:bd:5a: ee:4f:da:5b:0f:fe:25:b6:64:5b:89:b8:3a:13:ac: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E4:A6:8D:CD:35:C3:24:72:D3:85:F8:0E:E2:0B:95:52:25:A9:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d4:05:41:6a:2e:b4:9c:54:51:83:81:8d:95:2d:ca:a2:8f: 84:e7:ac:1f:f8:10:c9:39:b6:68:ea:b1:90:fe:0a:82:b7:2b: fb:11:9f:a6:78:b6:86:65:fb:8e:5f:2e:a3:c2:c0:22:a3:06: 45:39:23:7c:87:8b:cb:9c:55:2e:37:c2:f6:40:0b:6c:a1:c2: b3:b5:86:26:fc:46:c6:21:42:25:be:6b:5a:f2:4d:45:f5:19: f4:cb:f0:2a:0d:e5:5f:15:d9:cd:ed:5b:9f:86:2d:64:3f:c1: 16:98:31:32:90:20:41:5f:57:5b:aa:4d:ca:ef:88:4a:46:66: 98:86:8d:19:fb:ec:0c:5d:9d:a8:fd:23:d7:3f:e1:3f:25:d2: 74:90:80:5e:36:04:ad:c9:8a:c1:a9:b3:51:18:d7:47:48:3b: 3c:a8:c0:bb:df:46:ef:da:78:e0:21:12:a4:f4:75:8c:f8:3d: 11:39:d4:3f:c1:72:e2:12:a6:8a:d2:97:a7:92:7e:6c:8c:ee: 2f:1c:73:de:04:9a:cb:79:7f:a3:59:5f:4c:4a:eb:db:82:07: 49:c5:38:9e:50:fc:4c:50:bd:0d:d7:a6:cb:78:e2:6c:ef:60: 02:82:21:da:66:83:99:0e:57:e7:f9:8b:59:d4:64:ee:6c:4b: 55:0b:2e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRg+EyzbE8z3JCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NGJjNjNlZTUtMWQxZS00Y2M3LTkwYjMtODk4OTU1YjMxMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5LfT/9xMQ7Gd7yDMlCMaW2rp8YYGT/DBJ1D Su9HdN4AaPmfHJQTqaUF8/jY0ATTG8V5DStlopAIe7Ehapq/VC2cohqXel4pEi7L rrQJ/zRtQFYOJhPHZ7JYlj7rf2DRGOpGFCyXkPzv4ZxG3h5dmyysjLa0gW2QAUSD DU4+zi9s/VzF+e3aoIlb4I7/AOLwfahL8+kATGwtmdGoWk6d/OveryCtIA7dfGln t7k0FvDhDiN1UQ7MFofdwB1uDAqYpwJQFpSEVkpyrmn783zyAV2dwumrt/yk5Pvm K06N7zBJW00LDdBSKHKmqlsUvVruT9pbD/4ltmRbibg6E6xizwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPkpo3NNcMkctOF+A7iC5VSJalDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDhlMzZiYTMtODYyMC0z YjhlLWI2M2EtMzBmZTZhMzdmOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7UBUFqLrScVFGDgY2VLcqij4TnrB/4EMk5tmjqsZD+CoK3K/sRn6Z4 toZl+45fLqPCwCKjBkU5I3yHi8ucVS43wvZAC2yhwrO1hib8RsYhQiW+a1ryTUX1 GfTL8CoN5V8V2c3tW5+GLWQ/wRaYMTKQIEFfV1uqTcrviEpGZpiGjRn77Axdnaj9 I9c/4T8l0nSQgF42BK3JisGps1EY10dIOzyowLvfRu/aeOAhEqT0dYz4PRE51D/B cuISporSl6eSfmyM7i8cc94Emst5f6NZX0xK69uCB0nFOJ5Q/ExQvQ3Xpst44mzv YAKCIdpmg5kOV+f5i1nUZO5sS1ULLmc= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:15 2025 by rpki-client