$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/67f127cc-42f3-3968-aa83-c00b42c7d793.roa File: 67f127cc-42f3-3968-aa83-c00b42c7d793.roa (raw, json) Hash identifier: /nsUKsB1U4EgaVD1z7OKyVcsg9gt3+zXbrj2Fz3+3kk= Subject key identifier: 76:FF:4D:B9:21:3A:08:D2:93:1A:37:F1:35:DB:4E:7F:5E:30:E5:86 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461AED18EA3055EEFA4C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/67f127cc-42f3-3968-aa83-c00b42c7d793.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1a:ed:18:ea:30:55:ee:fa:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=e6594375-66a8-4f23-8c30-596220c4aa6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:81:c6:99:2f:14:6b:94:b5:de:ab:2f:57: 04:75:6a:81:a3:9d:aa:42:9b:5f:79:cb:46:23:b4: b0:c2:7d:da:26:a3:3a:59:f5:7d:e5:04:70:85:df: 40:75:ec:18:16:45:c3:4f:53:76:e5:e0:6b:98:1e: ba:7e:16:d6:3a:ea:37:99:c9:74:09:bf:00:44:33: fe:60:11:fc:c1:30:dd:d8:28:39:b0:9e:68:b6:77: 56:e8:d1:2e:34:a0:04:64:8b:c2:0c:b9:3a:41:1f: 26:5b:be:06:a4:a2:93:c0:f4:7e:4b:80:55:e1:fe: 46:9a:e3:90:61:a6:5c:80:34:e3:84:4f:c1:e4:b8: 7a:0f:31:74:65:5a:f7:dc:00:97:41:6f:60:ee:2b: c4:97:a0:81:be:f3:b2:79:89:3b:9a:96:7a:62:d2: ac:b6:46:92:43:4a:3c:9e:35:c8:de:17:f0:f4:3e: 15:0d:5e:a1:a2:32:c6:2c:2e:4f:92:fb:80:da:3a: 58:90:ed:b9:fc:94:40:3c:3b:34:7a:d8:7d:5c:c1: bf:85:c1:1e:10:81:4e:da:df:b4:28:34:54:2f:ef: 96:35:24:a1:86:88:67:fd:ba:18:62:bc:0d:a8:ac: 76:9b:90:a2:0c:3f:d2:d9:46:35:31:02:0b:78:4e: 71:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FF:4D:B9:21:3A:08:D2:93:1A:37:F1:35:DB:4E:7F:5E:30:E5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/67f127cc-42f3-3968-aa83-c00b42c7d793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:90:7d:52:3d:1b:f0:40:f0:16:f2:a3:15:cc:77:df:db:fe: 66:f2:c5:02:7a:9e:f0:51:22:76:41:12:0f:41:3c:1a:ab:b5: ce:9e:c4:89:1d:90:a1:ac:16:18:79:7c:be:b6:2d:97:8e:e7: ed:38:0a:38:48:85:54:c5:90:af:0c:41:1c:95:b7:2b:70:e4: 87:71:98:3b:65:97:ef:1f:c4:bc:6e:bb:58:d8:2d:60:47:a6: 37:8d:f1:07:27:b9:fd:d5:0a:74:51:3b:9d:65:8b:1b:d8:e6: 51:ae:4e:0f:b8:b2:aa:2c:9e:82:07:c8:87:07:30:76:b6:d6: 0a:16:b7:e9:42:58:65:14:ad:66:ef:15:1b:3d:97:a7:f0:15: d1:32:b3:da:86:e7:3f:f3:63:bf:91:9f:5b:d7:a2:53:7d:32: 76:f7:10:05:27:93:ed:6d:10:1c:95:04:b1:0f:10:f7:12:8b: ec:fb:0e:1e:96:35:aa:c0:be:5c:4e:b6:70:56:61:2c:0f:2e: 90:d2:6c:45:46:08:88:04:31:e9:8f:a7:59:29:f5:c9:b5:5e: 90:47:04:b2:70:7e:9c:0f:16:4b:24:6f:f5:8c:e9:2c:89:b9: 43:c0:ff:91:d4:40:3d:b7:df:78:f4:69:03:f1:55:31:29:5e: 88:f1:a4:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhrtGOowVe76TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTY1OTQzNzUtNjZhOC00ZjIzLThjMzAtNTk2MjIwYzRhYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZaBxpkvFGuUtd6rL1cEdWqBo52qQptfectG I7Swwn3aJqM6WfV95QRwhd9AdewYFkXDT1N25eBrmB66fhbWOuo3mcl0Cb8ARDP+ YBH8wTDd2Cg5sJ5otndW6NEuNKAEZIvCDLk6QR8mW74GpKKTwPR+S4BV4f5GmuOQ YaZcgDTjhE/B5Lh6DzF0ZVr33ACXQW9g7ivEl6CBvvOyeYk7mpZ6YtKstkaSQ0o8 njXI3hfw9D4VDV6hojLGLC5PkvuA2jpYkO25/JRAPDs0eth9XMG/hcEeEIFO2t+0 KDRUL++WNSShhohn/boYYrwNqKx2m5CiDD/S2UY1MQILeE5xOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHb/TbkhOgjSkxo38TXbTn9eMOWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjdmMTI3Y2MtNDJmMy0z OTY4LWFhODMtYzAwYjQyYzdkNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKQfVI9G/BA8BbyoxXMd9/b/mbyxQJ6nvBRInZBEg9BPBqrtc6exIkd kKGsFhh5fL62LZeO5+04CjhIhVTFkK8MQRyVtytw5IdxmDtll+8fxLxuu1jYLWBH pjeN8Qcnuf3VCnRRO51lixvY5lGuTg+4sqosnoIHyIcHMHa21goWt+lCWGUUrWbv FRs9l6fwFdEys9qG5z/zY7+Rn1vXolN9Mnb3EAUnk+1tEByVBLEPEPcSi+z7Dh6W NarAvlxOtnBWYSwPLpDSbEVGCIgEMemPp1kp9cm1XpBHBLJwfpwPFkskb/WM6SyJ uUPA/5HUQD2333j0aQPxVTEpXojxpLw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:06 2025 by rpki-client