$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa File: 9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa (raw, json) Hash identifier: TjrOprtPi3hlVoZM6pK564WJe6lnyncXvvwjGoXVjJI= Subject key identifier: 84:6C:94:DF:33:B1:5D:73:78:62:7A:0C:BD:EC:BE:03:62:CD:90:71 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461921675825254643DC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:19:21:67:58:25:25:46:43:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=bf98a6bb-051d-4885-88dd-8c383bacab20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:9d:b5:b5:28:33:2b:c6:b2:d7:2d:f0:f6: 65:57:a2:c3:7f:14:32:48:92:b2:d0:a5:12:9c:ca: 1f:44:11:f6:11:d1:e6:b1:b8:7a:91:62:11:ef:f1: 19:37:cd:49:79:a7:03:a1:a8:8b:63:bd:d9:2e:4b: dc:40:88:c0:e3:c8:d9:48:1a:23:ae:aa:3b:09:8d: a6:40:24:88:1a:ed:bd:70:7b:f4:73:de:a6:2b:40: 00:18:1d:ad:2d:98:d0:07:cb:7b:25:ee:8b:e0:54: da:98:22:d4:be:93:3f:65:8e:21:62:eb:6a:93:be: 6e:74:b7:23:96:45:4b:99:f3:f7:38:aa:78:df:b5: 2a:18:6a:af:f0:8f:a2:a2:81:dd:9c:01:a4:fc:cc: a3:5e:fd:a0:f5:6e:50:fd:bc:53:7c:3a:8b:c1:b4: 92:05:6d:90:63:48:7a:94:b6:12:c4:8b:70:98:0d: 87:06:15:0d:46:0f:37:85:d2:11:0c:4c:80:af:9f: 22:ad:11:af:9f:e2:9c:f8:b0:bb:1f:93:b7:2c:19: f3:e2:1c:f6:dc:f2:79:2a:ba:71:05:84:d5:3a:74: 74:36:37:c6:55:e0:76:bb:fc:04:2d:21:1f:b8:1a: b8:a5:fd:7a:a2:67:90:ad:b9:e6:d7:e6:35:a7:f8: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6C:94:DF:33:B1:5D:73:78:62:7A:0C:BD:EC:BE:03:62:CD:90:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:1d:5b:b3:92:ab:26:02:88:f1:27:36:28:3f:61:2a:2f:be: e0:95:23:2f:da:c4:aa:37:a9:ff:46:b4:b5:04:bc:b9:60:14: a1:96:6f:4f:64:0c:7e:70:be:55:5d:2e:84:6d:74:18:8e:a3: 89:64:b3:cf:05:4d:a5:b9:ac:66:23:4a:e9:e2:e8:b3:9b:e1: 5c:44:51:1c:0d:67:56:04:5d:d8:ee:c0:53:5c:ef:e4:3c:72: 34:e7:d2:5c:13:67:2c:dc:8e:ea:c7:af:e1:b7:da:c5:69:bd: 92:03:4c:13:c8:02:c8:e3:b2:34:3c:91:c6:e2:aa:25:19:fc: e1:d8:f5:67:1f:27:31:5e:c5:bf:8a:c6:6c:0c:a8:3b:0e:bd: 17:70:b7:74:a9:31:8c:2d:8b:b0:61:8a:82:e3:b4:cf:a0:9e: ab:e6:29:e9:a8:45:61:3e:b6:19:0d:24:2f:59:fa:68:96:66: 9a:d1:fc:4c:19:c1:70:de:c5:7d:c9:58:6d:e9:72:00:92:22: b3:1d:b3:6e:24:d5:b1:fa:05:d8:72:7d:43:e1:cb:50:63:a5: b5:63:69:78:2b:11:ab:9d:bf:c6:7d:4c:79:2f:25:23:ef:6e: 63:2e:52:d1:2b:d0:6d:cf:77:c6:a0:f0:20:a5:80:13:0c:dc: 8b:06:76:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhkhZ1glJUZD3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YmY5OGE2YmItMDUxZC00ODg1LTg4ZGQtOGMzODNiYWNhYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN+dtbUoMyvGstct8PZlV6LDfxQySJKy0KUS nMofRBH2EdHmsbh6kWIR7/EZN81JeacDoaiLY73ZLkvcQIjA48jZSBojrqo7CY2m QCSIGu29cHv0c96mK0AAGB2tLZjQB8t7Je6L4FTamCLUvpM/ZY4hYutqk75udLcj lkVLmfP3OKp437UqGGqv8I+iooHdnAGk/MyjXv2g9W5Q/bxTfDqLwbSSBW2QY0h6 lLYSxItwmA2HBhUNRg83hdIRDEyAr58irRGvn+Kc+LC7H5O3LBnz4hz23PJ5Krpx BYTVOnR0NjfGVeB2u/wELSEfuBq4pf16omeQrbnm1+Y1p/j2BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRslN8zsV1zeGJ6DL3svgNizZBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWYzYmM4ZTItNTZhMy0z MTg3LWIzZmMtOTE1OTI1MmNkYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQdW7OSqyYCiPEnNig/YSovvuCVIy/axKo3qf9GtLUEvLlgFKGWb09k DH5wvlVdLoRtdBiOo4lks88FTaW5rGYjSuni6LOb4VxEURwNZ1YEXdjuwFNc7+Q8 cjTn0lwTZyzcjurHr+G32sVpvZIDTBPIAsjjsjQ8kcbiqiUZ/OHY9WcfJzFexb+K xmwMqDsOvRdwt3SpMYwti7BhioLjtM+gnqvmKemoRWE+thkNJC9Z+miWZprR/EwZ wXDexX3JWG3pcgCSIrMds24k1bH6BdhyfUPhy1BjpbVjaXgrEaudv8Z9THkvJSPv bmMuUtEr0G3Pd8ag8CClgBMM3IsGduw= -----END CERTIFICATE-----Generated at Thu Aug 7 01:21:29 2025 by rpki-client