$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa File: 3785b371-e802-3801-bd81-df056b6e23ae.roa (raw, json) Hash identifier: QSUDFXPj8OCXM8XmBR4EkXHA1GYyZrzuYqxHVTYAVrY= Subject key identifier: CF:B0:4F:37:40:9C:86:09:7E:C6:FB:9D:5C:4B:09:4E:97:64:25:1F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460D766574530945AFEB50 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0d:76:65:74:53:09:45:af:eb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=0b728b46-83f8-4d99-9a5b-e546e8514e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:2a:bc:03:f8:23:b9:8e:ee:b0:ad:ae:1b: 56:a0:39:f5:db:a3:aa:0b:3a:4d:87:38:a5:8d:09: 6e:c8:71:f0:81:57:c9:2d:27:f3:07:25:b4:be:0e: b8:68:f8:20:6c:fe:4b:5d:e2:95:5c:39:e6:bf:01: de:29:69:27:9f:5a:34:88:77:61:a0:1c:a0:62:4c: c2:b7:01:e5:43:b9:f5:df:1e:74:23:8b:14:a8:af: cd:91:e2:13:72:0e:f5:e2:c8:1b:48:16:00:01:e6: 07:ad:34:b1:a4:64:47:e9:4b:66:38:35:39:76:1c: da:43:79:35:70:bc:a1:1a:e0:53:39:84:db:c2:ca: 5b:0c:6e:2f:4c:77:7e:09:24:d8:d4:0c:4f:a9:7c: 70:97:60:2b:4b:17:73:7d:13:54:b2:ba:d1:b9:8a: 62:f7:94:f0:4b:2d:de:66:31:7f:be:69:f2:08:aa: 4b:ea:ec:dd:fb:28:89:b4:a4:5d:e0:de:7b:48:31: de:07:0f:2b:03:05:8d:61:eb:21:db:37:a0:f7:cc: 78:9d:10:6a:b8:65:e1:e1:1d:ed:61:1f:0b:8f:30: 6d:c7:e3:0b:71:03:c3:48:8c:7c:bc:36:1d:05:44: 42:2e:89:5d:db:0f:37:1a:75:ab:d9:eb:bc:60:2c: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B0:4F:37:40:9C:86:09:7E:C6:FB:9D:5C:4B:09:4E:97:64:25:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3785b371-e802-3801-bd81-df056b6e23ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:5f:1d:ab:12:5a:95:c2:b7:ae:fa:e1:2a:1f:f6:bc:9b:ab: 1a:c1:b9:23:7f:91:68:60:5a:e5:07:bd:f0:e5:48:8a:6d:aa: bc:60:e3:56:1a:6b:ea:6a:95:4c:ec:b7:e9:02:f9:ab:70:d8: 50:69:07:3d:36:7b:cd:9c:51:8f:12:13:d9:d9:62:62:dd:17: b8:dd:1c:e8:5c:6b:af:9b:59:fa:f2:05:3a:fd:bb:2a:49:51: 96:ee:db:98:07:67:44:b8:ab:40:0f:74:4f:67:a5:ba:22:1a: a6:51:cf:4f:37:9b:20:32:e9:7d:57:31:1d:7c:b8:70:2a:75: 87:46:35:6d:c2:46:03:f3:68:bf:dd:bf:0e:d4:65:13:30:a1: b4:be:67:aa:8f:1b:c5:d3:a6:80:59:b6:28:a6:ac:50:7b:7c: a3:2f:0d:79:d7:b3:2c:37:28:af:b2:2b:ad:a6:29:d8:d5:30: 49:30:67:7e:6a:b3:a5:43:cd:84:5b:7d:2d:85:7c:5f:2a:ef: b3:eb:d1:07:4e:99:53:fa:1c:37:a4:af:98:65:38:7f:bd:91: fb:e8:e5:0b:53:a3:fb:61:a4:57:a8:d7:4d:d4:19:ac:46:74: fb:b8:13:b5:82:79:87:dc:bc:3d:94:6e:37:ce:c6:64:c9:81: cb:0b:03:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRg12ZXRTCUWv61AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MGI3MjhiNDYtODNmOC00ZDk5LTlhNWItZTU0NmU4NTE0ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02MqvAP4I7mO7rCtrhtWoDn126OqCzpNhzil jQluyHHwgVfJLSfzByW0vg64aPggbP5LXeKVXDnmvwHeKWknn1o0iHdhoBygYkzC twHlQ7n13x50I4sUqK/NkeITcg714sgbSBYAAeYHrTSxpGRH6UtmODU5dhzaQ3k1 cLyhGuBTOYTbwspbDG4vTHd+CSTY1AxPqXxwl2ArSxdzfRNUsrrRuYpi95TwSy3e ZjF/vmnyCKpL6uzd+yiJtKRd4N57SDHeBw8rAwWNYesh2zeg98x4nRBquGXh4R3t YR8LjzBtx+MLcQPDSIx8vDYdBURCLold2w83GnWr2eu8YCyW4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+wTzdAnIYJfsb7nVxLCU6XZCUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzc4NWIzNzEtZTgwMi0z ODAxLWJkODEtZGYwNTZiNmUyM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJfHasSWpXCt6764Sof9rybqxrBuSN/kWhgWuUHvfDlSIptqrxg41Ya a+pqlUzst+kC+atw2FBpBz02e82cUY8SE9nZYmLdF7jdHOhca6+bWfryBTr9uypJ UZbu25gHZ0S4q0APdE9npboiGqZRz083myAy6X1XMR18uHAqdYdGNW3CRgPzaL/d vw7UZRMwobS+Z6qPG8XTpoBZtiimrFB7fKMvDXnXsyw3KK+yK62mKdjVMEkwZ35q s6VDzYRbfS2FfF8q77Pr0QdOmVP6HDekr5hlOH+9kfvo5QtTo/thpFeo103UGaxG dPu4E7WCeYfcvD2UbjfOxmTJgcsLA70= -----END CERTIFICATE-----Generated at Thu Aug 7 01:20:03 2025 by rpki-client