$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/84c0b39b-05db-318a-ac98-363fc3016953.roa File: 84c0b39b-05db-318a-ac98-363fc3016953.roa (raw, json) Hash identifier: Ws98wIORUYdu3qdvxOhLgnkle4do2PtbVPTCVwW2ciU= Subject key identifier: 4F:99:11:89:92:FE:D0:80:2A:5F:37:B1:DA:CE:2E:65:17:42:58:78 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460FACED64ADCBAE6C2F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/84c0b39b-05db-318a-ac98-363fc3016953.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0f:ac:ed:64:ad:cb:ae:6c:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=8a9c82cd-fcc8-461b-85d5-1076441d2809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e1:c6:8e:98:f3:e0:44:83:56:2b:da:32:9e: 24:96:90:9b:38:ad:26:b5:14:6b:e4:0d:a5:c2:9a: 05:19:39:6f:3d:24:45:0a:a3:1f:99:80:71:e4:5e: 9a:7f:e3:57:8e:8a:c3:04:b4:e0:8f:7b:17:f2:79: 0d:50:25:55:6b:fd:ec:1d:1a:54:e9:53:88:09:28: 40:a0:8e:7c:fd:1d:bf:c7:32:93:5a:4c:41:4c:53: e8:29:39:47:37:7b:e2:21:43:55:f1:52:62:f7:c5: 56:1b:5b:a7:2f:9b:27:46:70:c4:37:22:93:a9:9c: 71:15:ce:f9:1b:2f:79:a4:bc:02:21:aa:84:85:84: b4:ea:1a:84:b2:84:45:e6:1e:15:94:c1:4a:4d:41: 7e:5e:a1:c8:ee:0f:f7:e5:92:7c:de:8c:d5:0c:9c: 32:1b:9f:75:d1:12:5c:5d:d9:77:fd:a0:af:65:44: 7d:d9:58:4a:0a:20:d9:85:27:db:aa:60:eb:d9:21: 45:6c:90:f4:10:d9:53:70:df:fb:43:3b:d7:8c:90: f9:1e:c1:b5:3b:9f:ef:8f:81:f8:7a:b9:be:d8:bd: 23:59:f3:35:f3:b0:fd:60:aa:2b:35:6c:69:55:d7: 81:1d:a7:49:48:ef:b1:9b:f1:73:b0:d1:b8:21:dd: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:99:11:89:92:FE:D0:80:2A:5F:37:B1:DA:CE:2E:65:17:42:58:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/84c0b39b-05db-318a-ac98-363fc3016953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:70:f6:76:06:69:a8:f3:7e:50:a2:a1:88:55:fb:db:54:9c: db:cd:12:03:a7:e6:8d:0f:df:59:90:37:bf:51:ee:89:2d:dc: 64:61:ef:98:9e:08:68:cf:78:1a:db:b6:19:fa:40:95:14:7a: 6c:b5:c5:6d:d1:d5:45:ac:8a:b7:d9:34:47:aa:22:fc:ea:a7: d3:cf:97:e5:3f:7f:ca:fa:d1:b1:e6:03:56:cf:17:0d:ae:dc: 2e:a6:a1:4b:f1:11:7d:a3:ef:ed:ca:71:68:e8:a7:d0:5f:be: d4:0c:d4:d4:03:98:41:d3:4c:6f:3c:59:f3:e3:bc:5e:20:83: 82:14:c6:c7:05:f7:05:63:f5:ce:cd:66:12:fc:3e:4b:41:1e: d0:86:12:44:b4:fb:ba:b5:53:87:5f:7e:ed:d6:aa:1c:ec:11: 58:95:c7:58:f6:d4:fa:85:74:cc:be:9b:7a:af:8a:02:0e:69: 7e:17:2a:f5:a5:78:fe:31:cd:8c:75:de:f1:a9:4c:7d:10:5e: 8d:fc:03:4b:64:0d:44:04:fa:73:43:dd:1a:cf:a9:ba:ef:e0: 18:01:c5:ae:6d:be:13:95:16:45:b6:41:42:52:84:2e:ea:7d: 78:53:8e:c4:08:0c:64:77:e2:01:f2:3a:4f:6f:58:dd:ba:79: 55:60:2d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRg+s7WSty65sLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OGE5YzgyY2QtZmNjOC00NjFiLTg1ZDUtMTA3NjQ0MWQyODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uHGjpjz4ESDVivaMp4klpCbOK0mtRRr5A2l wpoFGTlvPSRFCqMfmYBx5F6af+NXjorDBLTgj3sX8nkNUCVVa/3sHRpU6VOICShA oI58/R2/xzKTWkxBTFPoKTlHN3viIUNV8VJi98VWG1unL5snRnDENyKTqZxxFc75 Gy95pLwCIaqEhYS06hqEsoRF5h4VlMFKTUF+XqHI7g/35ZJ83ozVDJwyG5910RJc Xdl3/aCvZUR92VhKCiDZhSfbqmDr2SFFbJD0ENlTcN/7QzvXjJD5HsG1O5/vj4H4 erm+2L0jWfM187D9YKorNWxpVdeBHadJSO+xm/FzsNG4Id0G9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+ZEYmS/tCAKl83sdrOLmUXQlh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODRjMGIzOWItMDVkYi0z MThhLWFjOTgtMzYzZmMzMDE2OTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9w9nYGaajzflCioYhV+9tUnNvNEgOn5o0P31mQN79R7okt3GRh75ie CGjPeBrbthn6QJUUemy1xW3R1UWsirfZNEeqIvzqp9PPl+U/f8r60bHmA1bPFw2u 3C6moUvxEX2j7+3KcWjop9BfvtQM1NQDmEHTTG88WfPjvF4gg4IUxscF9wVj9c7N ZhL8PktBHtCGEkS0+7q1U4dffu3WqhzsEViVx1j21PqFdMy+m3qvigIOaX4XKvWl eP4xzYx13vGpTH0QXo38A0tkDUQE+nND3RrPqbrv4BgBxa5tvhOVFkW2QUJShC7q fXhTjsQIDGR34gHyOk9vWN26eVVgLVw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:23:10 2025 by rpki-client