$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa File: 5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa (raw, json) Hash identifier: CNNyAW+OlNlPCI7iKTJTxnREhRIDLpTYCnGK/zycrdQ= Subject key identifier: 2C:7E:0D:D1:36:5C:7D:C3:67:DD:6E:0A:4A:0E:9C:6B:DC:8D:41:89 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584AADF0F5C4FEEC17CE4CB30A80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13657 IP address blocks: 65.22.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:f5:c4:fe:ec:17:ce:4c:b3:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=50f0f27c-0495-4c57-8fab-0e6d7bbf427e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:3d:f9:d6:bb:ce:5d:8e:d3:f6:39:25:24: b0:59:38:3f:95:33:33:d6:f4:d4:3d:3b:f5:3b:47: d1:43:43:ec:34:37:38:15:6f:93:d2:15:64:de:9c: 74:3c:3d:fc:61:67:22:30:7a:6d:85:b8:36:35:68: 5c:0b:b3:78:e1:00:be:61:69:9c:d1:ed:e4:c0:f5: 4b:02:fe:3b:cb:4e:ec:52:04:9e:c7:15:e9:6d:62: 0b:ef:f2:94:f6:07:e4:cc:27:91:6d:64:2c:f3:17: 81:cf:10:a3:8d:1e:d2:81:e2:db:37:24:d3:c0:e1: 07:f2:92:fe:0c:af:b7:25:72:da:90:b6:64:d8:89: 5b:75:d0:48:41:2d:59:29:de:86:9f:b8:c2:d8:20: b3:1d:ef:b6:42:0f:05:bd:5b:23:76:e4:d3:81:58: 2a:ed:ae:2a:70:6d:f8:e3:e2:a3:47:c8:e5:be:89: c2:06:dd:f2:86:2f:8d:28:2a:ae:2d:99:d1:7c:52: 80:08:7b:58:99:a0:09:65:63:21:67:92:98:47:13: 70:3b:01:63:e9:b3:f0:6c:e9:c5:03:ca:c2:99:e4: 00:6c:1b:aa:69:f1:a6:f6:38:a0:d5:26:7e:f2:7a: f2:72:6e:a7:c8:19:03:2d:56:67:52:97:c7:fc:6b: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7E:0D:D1:36:5C:7D:C3:67:DD:6E:0A:4A:0E:9C:6B:DC:8D:41:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:5b:9d:1f:f3:cb:b9:7c:4b:9b:79:be:20:ea:42:04:e8:dd: 17:6f:e5:ac:7d:dd:65:87:3a:2b:af:0d:51:16:a7:7a:a0:95: 5d:a4:b1:a2:c3:a3:f8:9d:ae:bd:55:dd:32:1e:b8:93:3e:59: bb:5c:6e:e6:5e:a7:65:b0:8b:92:10:42:06:8b:e4:15:96:aa: 3d:7c:3f:af:ef:8f:c2:3d:62:17:31:7c:48:85:49:b6:b2:41: a3:31:3d:c9:fb:e8:b0:80:39:d2:00:82:ea:32:c0:84:ab:2e: 00:67:2e:8a:f6:e4:ea:8a:48:4a:c2:f2:e3:cd:f3:83:41:94: d8:cf:53:f1:7f:60:29:a5:77:3e:6a:a5:0d:d9:d1:e4:2d:54: 3e:e0:f2:df:30:df:bc:da:45:43:17:f0:1b:a4:5a:43:dc:94: 67:04:93:6a:53:8b:e6:56:e4:c4:70:e2:dc:dc:d8:39:71:0e: 6d:f2:9c:ae:55:43:a2:03:81:80:7c:a8:3b:c0:98:1b:2f:09: 86:8f:da:b1:ca:1f:28:6f:a2:f7:06:87:3e:4f:b6:13:ad:7c: 98:07:46:a3:f0:1d:ac:83:f6:d8:02:c9:ac:1f:6d:7b:e3:5b: d3:1d:3e:2c:6f:4c:7a:25:25:f1:31:07:21:bd:14:02:ff:a2: db:3d:e5:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8PXE/uwXzkyzCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NTBmMGYyN2MtMDQ5NS00YzU3LThmYWItMGU2ZDdiYmY0MjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdM9+da7zl2O0/Y5JSSwWTg/lTMz1vTUPTv1 O0fRQ0PsNDc4FW+T0hVk3px0PD38YWciMHpthbg2NWhcC7N44QC+YWmc0e3kwPVL Av47y07sUgSexxXpbWIL7/KU9gfkzCeRbWQs8xeBzxCjjR7SgeLbNyTTwOEH8pL+ DK+3JXLakLZk2IlbddBIQS1ZKd6Gn7jC2CCzHe+2Qg8FvVsjduTTgVgq7a4qcG34 4+KjR8jlvonCBt3yhi+NKCquLZnRfFKACHtYmaAJZWMhZ5KYRxNwOwFj6bPwbOnF A8rCmeQAbBuqafGm9jig1SZ+8nrycm6nyBkDLVZnUpfH/Gvr6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCx+DdE2XH3DZ91uCkoOnGvcjUGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWFhMmJiMGItMmNhMi0z Njc4LWFkYTEtMjhiOTQ4ZmFiZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRbnR/zy7l8S5t5viDqQgTo3Rdv5ax93WWHOiuvDVEWp3qglV2ksaLD o/idrr1V3TIeuJM+WbtcbuZep2Wwi5IQQgaL5BWWqj18P6/vj8I9YhcxfEiFSbay QaMxPcn76LCAOdIAguoywISrLgBnLor25OqKSErC8uPN84NBlNjPU/F/YCmldz5q pQ3Z0eQtVD7g8t8w37zaRUMX8BukWkPclGcEk2pTi+ZW5MRw4tzc2DlxDm3ynK5V Q6IDgYB8qDvAmBsvCYaP2rHKHyhvovcGhz5PthOtfJgHRqPwHayD9tgCyawfbXvj W9MdPixvTHolJfExByG9FAL/ots95ec= -----END CERTIFICATE-----Generated at Tue Aug 5 16:49:54 2025 by rpki-client