$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa File: 3952f2df-c9da-34fd-b192-2e69549fdba1.roa (raw, json) Hash identifier: mOYaRfG06Vck4zBAYnrH3ihqHVb2y1/51iYqW3hK0O8= Subject key identifier: 72:44:C1:AB:FC:C8:E9:90:DC:65:2F:0B:4C:66:CF:1A:97:8D:C2:91 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814614A167D355A0AC153D5E Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:14:a1:67:d3:55:a0:ac:15:3d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a7da92b8-28c0-48c7-ab12-886dde9a5548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:9e:a8:52:b4:7a:da:6f:6b:e7:b2:ac:09: 46:9f:cd:7a:df:8d:ba:ab:7a:02:b2:da:d7:f7:34: ee:69:58:47:f9:df:43:a6:e8:de:1a:3a:fc:03:ec: 53:32:ef:4b:f7:93:1e:30:f5:59:c8:b2:78:b2:84: 1e:1c:af:ee:2d:6f:0b:5f:a2:d7:1c:e1:f3:ae:02: f6:bd:28:b3:78:2a:40:2e:15:d4:11:70:c1:5e:52: 6e:70:94:ad:6b:40:7c:b2:fc:4c:9f:90:6f:e4:94: a6:88:6e:e2:bd:a1:44:07:7c:b1:4c:6d:98:57:aa: ba:e5:55:7c:b4:af:88:a3:b2:fa:b9:10:05:12:45: 07:fe:c0:e0:36:c1:c0:42:1b:3f:d0:c4:30:f7:53: 8f:c8:ce:5f:f2:dd:e5:56:5f:8a:38:0f:74:de:b3: 49:11:21:ad:aa:f8:08:2e:a3:b5:a8:45:b7:df:34: c9:47:04:c4:69:1c:6c:7c:bf:d2:53:8d:1b:6f:93: 9e:20:ba:ba:95:08:67:56:8b:a6:e4:13:aa:11:38: 31:5a:aa:3b:f0:0e:d6:21:38:82:55:c8:ca:58:ed: 09:fe:8a:48:ae:16:7c:8a:c2:0a:3c:5a:88:d4:fc: b5:f2:94:77:6c:6f:9d:ca:dc:7a:62:72:de:52:b4: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:44:C1:AB:FC:C8:E9:90:DC:65:2F:0B:4C:66:CF:1A:97:8D:C2:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:83:e6:a3:9a:98:c0:f8:19:3d:e2:a3:71:6a:57:59:5a:17: 59:13:79:c8:63:f9:e4:93:f6:2c:70:4c:5d:9e:23:e6:fd:a1: 78:4f:08:03:40:c6:9b:77:fa:ff:9a:34:92:0a:61:bc:e4:86: cd:27:1d:32:26:72:ff:78:af:9d:41:7f:c7:c8:3e:c5:a9:0a: 2a:25:e2:03:b8:30:cc:d2:79:e1:9b:33:c2:9f:1f:3b:fb:7c: 58:70:d7:21:65:39:73:88:e7:27:10:d6:05:96:b9:ac:e3:32: 1d:0d:53:79:a5:4e:c6:70:0c:ae:57:1f:8d:d3:c3:7c:83:cc: 1f:52:88:d7:d5:da:46:b3:80:57:61:1f:3d:bd:55:60:aa:25: 07:d0:24:f2:6d:ed:cd:fe:ce:fe:68:fa:62:d0:5a:a8:08:62: fd:a8:6c:9f:c7:60:47:c7:36:9d:c9:14:14:14:90:da:cd:45: a6:fd:c5:6e:2c:29:15:ec:22:a8:03:48:e0:22:e2:b3:78:84: b8:06:6d:89:71:96:91:2a:84:40:ed:47:b2:f0:a0:f0:30:47: 8f:35:48:1b:4d:96:f4:fc:58:6e:dc:81:f9:2c:50:4a:54:c7: 24:3b:83:ca:a8:b0:09:3f:df:f3:fe:03:7e:ab:6e:f6:fc:f0: 60:c6:e2:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhShZ9NVoKwVPV4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YTdkYTkyYjgtMjhjMC00OGM3LWFiMTItODg2ZGRlOWE1NTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDaeqFK0etpva+eyrAlGn8163426q3oCstrX 9zTuaVhH+d9DpujeGjr8A+xTMu9L95MeMPVZyLJ4soQeHK/uLW8LX6LXHOHzrgL2 vSizeCpALhXUEXDBXlJucJSta0B8svxMn5Bv5JSmiG7ivaFEB3yxTG2YV6q65VV8 tK+Io7L6uRAFEkUH/sDgNsHAQhs/0MQw91OPyM5f8t3lVl+KOA903rNJESGtqvgI LqO1qEW33zTJRwTEaRxsfL/SU40bb5OeILq6lQhnVoum5BOqETgxWqo78A7WITiC VcjKWO0J/opIrhZ8isIKPFqI1Py18pR3bG+dytx6YnLeUrRtHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJEwav8yOmQ3GUvC0xmzxqXjcKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzk1MmYyZGYtYzlkYS0z NGZkLWIxOTItMmU2OTU0OWZkYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeD5qOamMD4GT3io3FqV1laF1kTechj+eST9ixwTF2eI+b9oXhPCANA xpt3+v+aNJIKYbzkhs0nHTImcv94r51Bf8fIPsWpCiol4gO4MMzSeeGbM8KfHzv7 fFhw1yFlOXOI5ycQ1gWWuazjMh0NU3mlTsZwDK5XH43Tw3yDzB9SiNfV2kazgFdh Hz29VWCqJQfQJPJt7c3+zv5o+mLQWqgIYv2obJ/HYEfHNp3JFBQUkNrNRab9xW4s KRXsIqgDSOAi4rN4hLgGbYlxlpEqhEDtR7LwoPAwR481SBtNlvT8WG7cgfksUEpU xyQ7g8qosAk/3/P+A36rbvb88GDG4g4= -----END CERTIFICATE-----Generated at Thu Aug 7 03:20:20 2025 by rpki-client