$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d8f7d72-145a-3c33-a493-7a82a86c6328.roa File: 5d8f7d72-145a-3c33-a493-7a82a86c6328.roa (raw, json) Hash identifier: Wif/9a0m/BFiJPlo32NlQG6goPlEb0G8L4zc+KpqeYU= Subject key identifier: B3:1E:7A:93:72:B2:A2:ED:0C:B0:95:0D:DF:C1:4E:A4:29:39:16:93 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB3D4134259E2F089D3790 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d8f7d72-145a-3c33-a493-7a82a86c6328.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 65.22.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:3d:41:34:25:9e:2f:08:9d:37:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=553f9ec9-2d1a-45cb-a0f1-5862259a7795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:64:8e:d1:69:2f:17:0c:e8:69:59:51:52: ca:b2:4d:d5:f0:bb:05:12:b1:d4:c8:e3:44:7d:15: 49:01:b1:10:e3:c3:c3:c7:7f:f4:09:d9:c8:67:f5: d1:54:81:38:27:e9:8a:cd:5b:78:4d:24:d9:b1:bb: 36:8e:46:14:0d:5e:8d:29:90:cd:9d:ac:27:9d:50: 04:d3:59:51:6e:af:55:36:b1:60:97:b5:11:41:7d: 41:14:8b:32:35:e5:6d:aa:59:08:a5:49:79:9d:2f: 89:bb:82:5e:82:9f:ab:74:dc:50:4a:13:e1:c2:09: cf:1a:b9:0b:b3:91:e2:71:7c:03:55:ff:5d:4c:de: 76:22:64:9b:b8:11:cd:7e:6d:59:8d:57:23:94:49: 26:b3:62:83:df:38:6f:2a:07:f1:b4:2a:2b:c6:a1: c9:b6:8a:28:86:b1:75:3f:fe:19:b8:31:6a:54:ec: 77:09:76:9e:5d:1a:d3:38:40:e6:51:1a:63:80:b4: 2c:61:f4:64:43:81:00:31:35:24:0e:7e:36:e7:a2: 05:67:7a:6a:62:bf:43:41:14:f1:9a:1d:e0:fc:3f: d2:e6:4c:02:b3:7c:38:f1:bb:ef:3c:71:9c:c9:50: d1:76:b6:fd:9c:2c:20:c4:63:17:4b:72:a2:0e:2c: 03:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1E:7A:93:72:B2:A2:ED:0C:B0:95:0D:DF:C1:4E:A4:29:39:16:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d8f7d72-145a-3c33-a493-7a82a86c6328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:be:a9:b5:99:79:7d:8d:70:c9:76:d9:27:51:21:44:ec:19: bc:7d:28:c1:34:96:7a:9f:e9:23:22:66:8c:f9:2b:cf:56:09: b6:79:0a:b8:5f:e5:1c:57:3b:09:95:b0:68:a4:2b:0b:08:7a: 5f:2f:70:9c:d4:c5:8a:1b:b5:35:ec:39:12:0f:74:e0:7d:5e: d7:8b:f3:1f:14:ca:c0:ab:29:db:a2:84:0d:0a:ee:11:74:94: e3:50:87:3d:57:13:1b:82:0e:41:39:dd:2c:99:f2:66:9d:67: a6:d5:64:a7:da:a4:af:e0:d3:b0:89:fc:12:50:ae:72:1e:22: 62:55:8f:63:f7:27:bc:27:66:aa:ff:5c:ae:a8:5a:bb:85:fa: ef:fe:1d:14:e5:cf:b5:8a:92:bf:99:70:62:cc:b6:ca:41:64: 0b:83:e5:b5:fb:38:b8:67:00:c7:cd:2e:e3:96:9b:bf:89:ce: 70:e6:d7:7b:40:a0:45:0c:37:cc:2e:11:56:38:96:58:f7:ea: f3:1f:26:b2:d7:48:8e:19:cc:45:27:2b:6a:4c:bd:17:c9:48: 50:1f:bd:73:a8:aa:90:3d:b9:60:ba:63:10:c5:af:47:c6:67: b3:c0:88:ac:c0:e8:b1:76:6c:65:bc:8c:8e:9c:28:43:0f:b4: 51:57:ec:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCqz1BNCWeLwidN5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk NTUzZjllYzktMmQxYS00NWNiLWEwZjEtNTg2MjI1OWE3Nzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrJkjtFpLxcM6GlZUVLKsk3V8LsFErHUyONE fRVJAbEQ48PDx3/0CdnIZ/XRVIE4J+mKzVt4TSTZsbs2jkYUDV6NKZDNnawnnVAE 01lRbq9VNrFgl7URQX1BFIsyNeVtqlkIpUl5nS+Ju4Jegp+rdNxQShPhwgnPGrkL s5HicXwDVf9dTN52ImSbuBHNfm1ZjVcjlEkms2KD3zhvKgfxtCorxqHJtooohrF1 P/4ZuDFqVOx3CXaeXRrTOEDmURpjgLQsYfRkQ4EAMTUkDn4256IFZ3pqYr9DQRTx mh3g/D/S5kwCs3w48bvvPHGcyVDRdrb9nCwgxGMXS3KiDiwDSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMeepNysqLtDLCVDd/BTqQpORaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWQ4ZjdkNzItMTQ1YS0z YzMzLWE0OTMtN2E4MmE4NmM2MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm+qbWZeX2NcMl22SdRIUTsGbx9KME0lnqf6SMiZoz5K89WCbZ5Crhf 5RxXOwmVsGikKwsIel8vcJzUxYobtTXsORIPdOB9XteL8x8UysCrKduihA0K7hF0 lONQhz1XExuCDkE53SyZ8madZ6bVZKfapK/g07CJ/BJQrnIeImJVj2P3J7wnZqr/ XK6oWruF+u/+HRTlz7WKkr+ZcGLMtspBZAuD5bX7OLhnAMfNLuOWm7+JznDm13tA oEUMN8wuEVY4llj36vMfJrLXSI4ZzEUnK2pMvRfJSFAfvXOoqpA9uWC6YxDFr0fG Z7PAiKzA6LF2bGW8jI6cKEMPtFFX7I4= -----END CERTIFICATE-----Generated at Thu Aug 7 03:24:45 2025 by rpki-client