$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2c6bf089-7cdb-3e31-8307-e6c5ce091627.roa File: 2c6bf089-7cdb-3e31-8307-e6c5ce091627.roa (raw, json) Hash identifier: 3kJO/4pEYwTs0lLaI2OL7ky5A60LydGkZ+w1M/kiTQI= Subject key identifier: 8A:D0:D7:CA:FA:6D:CE:E7:CD:62:BA:59:AD:87:E8:DE:EE:7D:81:0F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB3D53AD6641AB61464480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2c6bf089-7cdb-3e31-8307-e6c5ce091627.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 65.22.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:3d:53:ad:66:41:ab:61:46:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=1e12a018-c0e1-4779-86fc-e370e4605058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:f8:fc:a6:e9:1f:f9:e5:2c:0e:dd:f0:88: 0b:bd:5f:f3:6b:32:2b:ef:68:fe:9d:10:89:26:94: 98:d7:39:4a:f9:8a:05:0c:bd:a5:85:28:b1:b4:e4: 13:e2:a2:76:0a:b0:8d:35:f7:6e:62:82:34:51:3f: 0d:16:57:2d:89:ac:f4:ca:12:7b:91:55:ca:34:38: 2c:13:60:35:5c:14:20:e1:1d:4a:a5:c9:84:64:35: 77:9c:0b:1f:82:ea:fe:ad:e2:99:47:f7:2d:4f:28: c8:97:07:3a:11:59:01:2d:76:83:43:eb:6b:d7:82: aa:c0:3e:0c:a3:39:cf:20:d2:8f:94:e0:9e:25:1d: 0e:ca:60:e9:65:10:3f:d7:98:02:b1:ce:45:98:04: 8c:d7:7c:2a:96:e4:99:3b:29:c9:b7:3e:05:f8:58: 5e:96:b1:0e:7e:17:a7:8b:f0:be:42:80:50:52:ac: d6:a9:ba:c4:ef:15:5f:72:3e:68:de:80:e0:1d:32: 90:ef:fd:dd:ce:98:4f:e3:ed:13:b3:42:2a:b9:9d: de:77:60:8d:9b:85:ea:dd:18:dc:7f:83:a2:53:de: 20:da:46:1c:4a:43:a6:5d:95:63:2b:c0:34:db:3a: 2b:6c:fe:5b:8e:1e:7e:0e:17:7d:cd:32:f9:b0:9a: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D0:D7:CA:FA:6D:CE:E7:CD:62:BA:59:AD:87:E8:DE:EE:7D:81:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2c6bf089-7cdb-3e31-8307-e6c5ce091627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d8:e5:b8:5e:c5:4d:3d:4a:c3:be:b0:b9:e8:09:f1:dd:b8: c7:11:f7:1d:f2:6e:fe:5e:30:7f:76:88:4f:d3:75:5e:f5:f7: 76:03:4b:31:fb:db:4d:d6:84:af:bf:a9:9e:18:c6:3a:1c:55: cc:56:81:60:b2:c2:63:1b:27:cc:8c:fb:95:e9:53:99:6d:3c: 03:79:9e:12:19:fa:01:92:06:6c:57:8d:de:f0:d9:d6:3e:77: 43:7d:b4:26:69:b3:f0:68:4d:d8:f2:a8:35:16:2e:61:fb:f7: 94:31:83:cb:3b:ff:11:e4:73:9b:02:ac:1f:77:34:84:e1:e7: 79:6f:38:3f:dd:1e:87:ff:c4:e7:4e:b4:1b:be:78:c7:9a:41: ec:ba:26:ff:cb:26:ef:98:99:e6:ac:96:99:c7:6f:ce:fd:68: 4c:8e:44:15:a9:94:85:05:fd:f8:16:25:09:23:41:8a:d5:e1: 7d:8d:5a:5a:dd:e4:27:64:e1:56:bc:49:ec:41:86:75:38:22: f8:57:bf:c4:58:bb:13:ef:c3:26:84:ad:7e:57:c9:f4:63:1d: da:c3:3c:0b:a3:81:ec:3d:ca:ee:e8:ab:ec:9d:d6:1e:b5:6a: 72:4f:8a:f8:18:d3:45:bf:71:0b:1e:b4:70:e9:c3:27:d2:d8: be:76:cf:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCqz1TrWZBq2FGRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk MWUxMmEwMTgtYzBlMS00Nzc5LTg2ZmMtZTM3MGU0NjA1MDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeX4/KbpH/nlLA7d8IgLvV/zazIr72j+nRCJ JpSY1zlK+YoFDL2lhSixtOQT4qJ2CrCNNfduYoI0UT8NFlctiaz0yhJ7kVXKNDgs E2A1XBQg4R1KpcmEZDV3nAsfgur+reKZR/ctTyjIlwc6EVkBLXaDQ+tr14KqwD4M oznPINKPlOCeJR0OymDpZRA/15gCsc5FmASM13wqluSZOynJtz4F+FhelrEOfhen i/C+QoBQUqzWqbrE7xVfcj5o3oDgHTKQ7/3dzphP4+0Ts0IquZ3ed2CNm4Xq3Rjc f4OiU94g2kYcSkOmXZVjK8A02zorbP5bjh5+Dhd9zTL5sJrQHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrQ18r6bc7nzWK6Wa2H6N7ufYEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmM2YmYwODktN2NkYi0z ZTMxLTgzMDctZTZjNWNlMDkxNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/Y5bhexU09SsO+sLnoCfHduMcR9x3ybv5eMH92iE/TdV7193YDSzH7 203WhK+/qZ4YxjocVcxWgWCywmMbJ8yM+5XpU5ltPAN5nhIZ+gGSBmxXjd7w2dY+ d0N9tCZps/BoTdjyqDUWLmH795Qxg8s7/xHkc5sCrB93NITh53lvOD/dHof/xOdO tBu+eMeaQey6Jv/LJu+YmeaslpnHb879aEyORBWplIUF/fgWJQkjQYrV4X2NWlrd 5Cdk4Va8SexBhnU4IvhXv8RYuxPvwyaErX5XyfRjHdrDPAujgew9yu7oq+yd1h61 anJPivgY00W/cQsetHDpwyfS2L52z4s= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:43 2025 by rpki-client