$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa File: 4376d315-6a36-3312-aa90-2c446e1e3899.roa (raw, json) Hash identifier: WTmQCUeig+fksFuxwgbUYs+vt6lLZABOERjQ9akHd+A= Subject key identifier: 03:5E:A1:40:E3:16:69:83:E0:16:54:00:D6:07:53:1A:37:86:60:A7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB3D66152FC6B7C49C5100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 65.22.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:3d:66:15:2f:c6:b7:c4:9c:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=654105f4-3693-41f7-ae4a-5796b5e67c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:27:ef:5b:44:50:e1:d2:45:7d:15:81:f7: ec:49:a8:2f:37:8c:90:76:19:71:31:28:e0:71:b5: 61:d7:6a:76:b2:66:61:f8:ed:dc:fb:0b:6b:f0:c4: 39:6d:21:95:1f:50:43:d3:76:fb:9b:c0:49:16:4c: 3e:17:1c:4b:77:bf:dc:20:10:3a:13:fb:0f:3b:20: 76:40:10:0c:c7:83:d6:30:a3:a0:de:e0:3d:10:7d: 49:30:3f:b6:8f:47:da:14:5c:20:3f:57:b5:27:4f: 5d:c6:22:34:d9:32:e1:db:6e:5e:90:ef:72:4f:fd: e4:bb:58:fe:b6:70:1c:73:a2:10:85:e4:c7:16:6c: 8f:a4:66:fb:76:b2:ee:2e:b1:65:18:90:d6:0e:84: 8f:c3:2d:ef:94:6b:c1:31:c6:fb:c2:9a:e1:16:e2: e9:6b:ce:5d:3a:65:fc:66:1b:1e:46:1d:33:18:01: d2:43:7f:7d:de:79:c7:1d:43:57:a1:c9:cc:0d:38: 22:1a:cc:a8:8d:e2:dc:83:8c:82:1b:94:8d:95:cd: 29:43:39:af:e6:5b:35:9d:f8:39:dd:46:1d:37:da: 30:84:4f:86:03:2e:f9:70:56:b0:c3:24:6b:b7:93: 21:36:91:fe:c8:54:f1:fb:51:ca:f3:49:d9:86:64: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5E:A1:40:E3:16:69:83:E0:16:54:00:D6:07:53:1A:37:86:60:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e3:b8:d3:5e:2a:f3:35:6a:88:1b:3d:b4:46:31:8c:b6:6a: ef:3c:6f:e1:39:58:c1:1c:8e:97:a0:71:6d:95:7e:bd:b0:dd: c7:cc:51:07:27:e1:57:9a:14:7f:f5:2e:d2:27:1c:38:ce:35: f0:ca:b6:db:0f:b3:97:71:cb:f2:49:2c:37:81:c1:e3:53:5c: c1:63:ac:65:61:9b:58:08:bf:36:2f:0c:ed:5d:e3:ea:47:a9: 38:0b:e6:40:a1:35:e6:81:33:84:95:c0:80:64:e1:be:91:f9: 11:8c:df:36:5f:78:a5:8c:f3:9d:54:f8:1a:cf:ce:d2:54:1b: ed:7c:19:b3:b4:1f:57:42:df:a6:2f:8a:31:85:fb:cf:ef:79: 4c:8e:2b:48:1b:10:dc:d0:1f:5d:e9:4c:ea:cb:a3:14:11:f7: 39:67:63:07:0f:46:7e:8b:47:39:ef:21:46:78:0e:f8:22:92: c2:6d:df:18:5b:3e:bc:d3:69:e8:38:bb:3b:d8:ab:cc:1b:9e: b6:1b:ef:95:4c:2d:73:9c:97:85:b2:1b:58:d9:11:f1:94:e2: a4:d5:e1:5d:e4:88:47:fc:03:da:04:88:22:a4:8b:b4:d5:bd: ef:b0:94:f5:91:6a:58:63:8f:7e:d8:89:c5:f3:e1:b7:95:70: 8b:6a:aa:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCqz1mFS/Gt8ScUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk NjU0MTA1ZjQtMzY5My00MWY3LWFlNGEtNTc5NmI1ZTY3Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6kn71tEUOHSRX0VgffsSagvN4yQdhlxMSjg cbVh12p2smZh+O3c+wtr8MQ5bSGVH1BD03b7m8BJFkw+FxxLd7/cIBA6E/sPOyB2 QBAMx4PWMKOg3uA9EH1JMD+2j0faFFwgP1e1J09dxiI02TLh225ekO9yT/3ku1j+ tnAcc6IQheTHFmyPpGb7drLuLrFlGJDWDoSPwy3vlGvBMcb7wprhFuLpa85dOmX8 ZhseRh0zGAHSQ3993nnHHUNXocnMDTgiGsyojeLcg4yCG5SNlc0pQzmv5ls1nfg5 3UYdN9owhE+GAy75cFawwyRrt5MhNpH+yFTx+1HK80nZhmRm8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANeoUDjFmmD4BZUANYHUxo3hmCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDM3NmQzMTUtNmEzNi0z MzEyLWFhOTAtMmM0NDZlMWUzODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPjuNNeKvM1aogbPbRGMYy2au88b+E5WMEcjpegcW2Vfr2w3cfMUQcn 4VeaFH/1LtInHDjONfDKttsPs5dxy/JJLDeBweNTXMFjrGVhm1gIvzYvDO1d4+pH qTgL5kChNeaBM4SVwIBk4b6R+RGM3zZfeKWM851U+BrPztJUG+18GbO0H1dC36Yv ijGF+8/veUyOK0gbENzQH13pTOrLoxQR9zlnYwcPRn6LRznvIUZ4DvgiksJt3xhb PrzTaeg4uzvYq8wbnrYb75VMLXOcl4WyG1jZEfGU4qTV4V3kiEf8A9oEiCKki7TV ve+wlPWRalhjj37YicXz4beVcItqqgA= -----END CERTIFICATE-----Generated at Thu Aug 7 02:00:05 2025 by rpki-client