$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa File: 58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa (raw, json) Hash identifier: FeOF25kG/xn2BenhGglAyabGBZ+XQ/AG9E9FyqystCA= Subject key identifier: 30:8D:08:DA:9A:4D:9F:C2:7D:1A:19:86:9F:CC:32:63:C9:4A:55:3C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814615A14A8FB210689CEB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:15:a1:4a:8f:b2:10:68:9c:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=e99c10da-e2e5-4058-b1c2-a7173c0315bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:42:3d:f7:9a:81:77:c0:97:d3:52:13:b8: 60:66:69:6e:c5:26:87:2b:ce:ee:03:9c:eb:cd:28: 49:00:7f:0d:5d:ad:76:ad:db:35:de:79:24:65:a9: e0:b1:b7:40:aa:84:17:e9:2a:56:a4:8f:61:61:49: 62:d1:7b:7b:74:7d:82:be:09:28:10:21:c2:cd:6f: ef:fe:d5:fe:24:44:a2:3a:8b:46:31:fe:d4:98:d2: ee:4f:6f:38:e8:b4:37:d3:d9:c3:10:09:77:cb:51: fa:8f:3e:83:7b:6f:66:44:63:5a:ab:d1:cc:34:ad: f9:26:c4:d6:8a:89:e3:db:d0:2d:a0:c6:f7:44:d1: 73:05:a9:22:eb:0e:78:7a:9f:af:6e:80:63:cd:14: 18:3e:c1:7c:36:0f:3b:43:82:a1:66:74:77:11:92: bc:60:d3:ce:c7:e3:ce:20:5f:f4:9b:85:4b:8f:77: 09:19:2c:75:4e:84:4b:41:52:9b:d8:3f:b2:5a:f7: 1f:b6:34:af:5b:e3:17:ea:b9:80:6f:71:4f:19:93: 0b:5c:ab:28:df:90:ce:94:5a:74:76:1f:38:c6:49: 83:f8:5c:00:77:9e:92:15:15:50:9b:5d:fb:d2:43: 0f:ea:48:42:ed:f5:e8:b9:7f:13:d9:8d:36:d0:0d: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8D:08:DA:9A:4D:9F:C2:7D:1A:19:86:9F:CC:32:63:C9:4A:55:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:05:6b:60:ec:9c:ed:37:0c:6e:0c:13:a7:d4:7c:67:f3:a3: f2:b9:4b:28:53:22:7b:c6:bd:c8:1c:44:81:21:cc:32:8a:fd: 05:be:80:46:0b:d4:b0:ee:d1:d1:d6:a1:f8:a3:a2:3d:35:0b: 89:1f:0f:b0:f3:5a:43:b8:fb:9b:b6:9a:f3:6c:60:cc:e8:35: 17:8a:28:4e:b4:2a:16:a0:37:44:f6:80:14:02:b4:72:bd:72: ea:78:22:d2:15:e6:f0:46:be:72:62:2c:03:92:b1:83:60:1a: 76:60:92:91:d7:46:06:27:5b:de:12:c2:29:f1:a0:60:d7:bc: c7:d1:49:69:3e:b6:b2:14:07:ee:96:d2:ff:cb:eb:f4:ae:88: 96:ee:0c:cc:8e:b1:a0:3e:b0:77:65:4e:a4:1d:2f:5c:19:4b: 22:9c:de:49:f4:39:08:81:57:16:23:bc:34:ba:bf:66:7b:96: dd:fd:00:fa:6e:9a:3b:e0:58:90:60:d6:65:f6:9c:55:0c:9e: 53:2d:0a:7c:3f:e8:15:39:74:ba:bb:48:1e:fd:d1:6c:31:60: 62:bd:77:d5:83:53:3d:44:9b:4f:4a:78:d2:26:41:62:a1:8d: 95:fc:77:2e:e7:7e:0c:87:a5:f2:3f:b2:b8:d9:5f:29:89:fc: af:74:24:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhWhSo+yEGic64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTk5YzEwZGEtZTJlNS00MDU4LWIxYzItYTcxNzNjMDMxNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVVCPfeagXfAl9NSE7hgZmluxSaHK87uA5zr zShJAH8NXa12rds13nkkZangsbdAqoQX6SpWpI9hYUli0Xt7dH2CvgkoECHCzW/v /tX+JESiOotGMf7UmNLuT2846LQ309nDEAl3y1H6jz6De29mRGNaq9HMNK35JsTW ionj29AtoMb3RNFzBaki6w54ep+vboBjzRQYPsF8Ng87Q4KhZnR3EZK8YNPOx+PO IF/0m4VLj3cJGSx1ToRLQVKb2D+yWvcftjSvW+MX6rmAb3FPGZMLXKso35DOlFp0 dh84xkmD+FwAd56SFRVQm1370kMP6khC7fXouX8T2Y020A2eaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCNCNqaTZ/CfRoZhp/MMmPJSlU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNThkZTFiMGUtZjNiNC0z N2QzLTk4MzItYzM5NmU3OWIxYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAFa2DsnO03DG4ME6fUfGfzo/K5SyhTInvGvcgcRIEhzDKK/QW+gEYL 1LDu0dHWofijoj01C4kfD7DzWkO4+5u2mvNsYMzoNReKKE60KhagN0T2gBQCtHK9 cup4ItIV5vBGvnJiLAOSsYNgGnZgkpHXRgYnW94SwinxoGDXvMfRSWk+trIUB+6W 0v/L6/SuiJbuDMyOsaA+sHdlTqQdL1wZSyKc3kn0OQiBVxYjvDS6v2Z7lt39APpu mjvgWJBg1mX2nFUMnlMtCnw/6BU5dLq7SB790WwxYGK9d9WDUz1Em09KeNImQWKh jZX8dy7nfgyHpfI/srjZXymJ/K90JBQ= -----END CERTIFICATE-----Generated at Thu Aug 7 05:00:01 2025 by rpki-client