$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8840286c-6553-39c2-a95a-a6614b2aedf3.roa File: 8840286c-6553-39c2-a95a-a6614b2aedf3.roa (raw, json) Hash identifier: zdrhVrLui/wXvG5oFXAhRtFA1rFnNbm45X9Ul+NZFE4= Subject key identifier: 0D:9D:E6:92:29:2D:C8:C6:53:75:4D:76:8B:66:6A:B5:E9:30:BA:06 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461544951E3A84419603E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8840286c-6553-39c2-a95a-a6614b2aedf3.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:15:44:95:1e:3a:84:41:96:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=c0c554ce-6461-46b0-a917-ad3930798c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ad:9f:b0:3e:10:9c:f4:f5:6b:42:04:7c:fe: 92:42:9d:f3:c3:c3:0b:d5:07:05:76:6f:d0:0b:69: 8e:72:68:26:d1:7b:e5:29:09:ed:6f:a8:83:8d:7c: a7:3b:d9:03:df:7f:19:89:b7:5e:d9:b2:21:f5:b3: 15:f2:15:c4:cc:df:e2:6a:94:6a:d1:c2:c8:08:e0: f2:a1:3f:c9:61:64:1c:18:bd:28:6f:cd:9d:a1:c1: aa:fe:38:74:18:91:95:a0:db:a6:ca:ce:8f:77:1d: e1:c5:fd:07:92:93:1b:94:42:59:5b:2b:06:ce:74: 25:f7:bb:05:57:5c:29:59:34:77:0a:fa:7a:98:4e: af:a4:58:34:b5:d0:ac:d5:4c:b1:d1:67:35:82:19: e2:13:fd:70:ab:9b:45:b9:85:44:a0:7d:07:1e:af: 20:c3:49:97:2b:7e:29:0e:62:c4:b6:db:09:6b:53: d2:73:e0:2e:bd:39:65:54:98:e3:57:e7:fd:66:da: b4:45:3c:05:4e:5e:5d:59:0c:9a:21:47:3c:7e:f7: a7:0f:d1:9d:97:96:55:73:18:fe:10:91:50:a8:85: da:2a:2c:2b:d8:47:71:f9:3a:16:a8:cc:70:d0:1c: 98:4e:46:3f:79:8c:67:5c:2b:19:26:4c:ae:22:69: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9D:E6:92:29:2D:C8:C6:53:75:4D:76:8B:66:6A:B5:E9:30:BA:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8840286c-6553-39c2-a95a-a6614b2aedf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:73:17:9d:0b:27:63:d0:1e:f2:2b:2f:b1:b8:eb:aa:3a:2d: 00:b3:0a:da:96:95:f5:a9:4c:86:4e:d8:34:03:a1:84:bb:8c: a4:3e:b3:92:b6:88:55:60:06:1d:57:34:95:2b:5d:75:e0:cf: 98:00:46:67:8b:5b:07:4d:ce:b6:b4:9e:34:41:73:98:48:36: b2:4f:2f:69:ba:b2:33:56:67:22:a7:91:d9:0b:1d:e8:43:5a: 32:79:4c:fd:39:78:70:5b:b7:5b:f7:52:d1:69:52:7a:f3:02: 98:1c:62:e6:67:e4:4f:9f:c0:c7:f0:1e:48:a7:f8:ac:9b:5e: e4:03:eb:28:52:2a:9e:92:f3:de:7e:f8:7b:24:17:23:ec:a3: 41:59:93:08:77:f2:98:83:c9:2a:0f:12:e4:ce:26:51:e0:4b: 0a:42:00:c6:8a:c0:35:6e:4f:49:a6:11:ed:41:18:34:ca:74: 6f:e4:8b:7d:e9:03:b9:91:f8:ab:47:69:c6:e0:ea:eb:fa:68: fb:87:97:40:ae:d2:c4:d7:79:b0:96:82:b7:86:c1:34:37:ac: a5:5c:f7:91:49:d9:83:13:92:37:cc:1a:1e:12:0b:d7:d8:41: bf:1c:64:04:d6:61:c2:97:77:02:ac:90:18:14:00:c3:1e:40: f3:33:b6:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhVElR46hEGWA+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YzBjNTU0Y2UtNjQ2MS00NmIwLWE5MTctYWQzOTMwNzk4YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa2fsD4QnPT1a0IEfP6SQp3zw8ML1QcFdm/Q C2mOcmgm0XvlKQntb6iDjXynO9kD338Zibde2bIh9bMV8hXEzN/iapRq0cLICODy oT/JYWQcGL0ob82docGq/jh0GJGVoNumys6Pdx3hxf0HkpMblEJZWysGznQl97sF V1wpWTR3Cvp6mE6vpFg0tdCs1Uyx0Wc1ghniE/1wq5tFuYVEoH0HHq8gw0mXK34p DmLEttsJa1PSc+AuvTllVJjjV+f9Ztq0RTwFTl5dWQyaIUc8fvenD9Gdl5ZVcxj+ EJFQqIXaKiwr2Edx+ToWqMxw0ByYTkY/eYxnXCsZJkyuImkT6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2d5pIpLcjGU3VNdotmarXpMLoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODg0MDI4NmMtNjU1My0z OWMyLWE5NWEtYTY2MTRiMmFlZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRamMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFzF50LJ2PQHvIrL7G466o6LQCzCtqWlfWpTIZO2DQDoYS7jKQ+s5K2 iFVgBh1XNJUrXXXgz5gARmeLWwdNzra0njRBc5hINrJPL2m6sjNWZyKnkdkLHehD WjJ5TP05eHBbt1v3UtFpUnrzApgcYuZn5E+fwMfwHkin+KybXuQD6yhSKp6S895+ +HskFyPso0FZkwh38piDySoPEuTOJlHgSwpCAMaKwDVuT0mmEe1BGDTKdG/ki33p A7mR+KtHacbg6uv6aPuHl0Cu0sTXebCWgreGwTQ3rKVc95FJ2YMTkjfMGh4SC9fY Qb8cZATWYcKXdwKskBgUAMMeQPMztig= -----END CERTIFICATE-----Generated at Thu Aug 7 04:59:57 2025 by rpki-client