$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa File: aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa (raw, json) Hash identifier: PWCGuosNwZRKdrgMK6NFhUunmLpT6JCV/euW33pfD/g= Subject key identifier: 5B:56:02:25:53:77:BA:1C:20:C9:EC:A6:4C:49:5D:11:22:37:7F:A0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814611474666F40F09D5B500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:11:47:46:66:f4:0f:09:d5:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=7ef78f0b-74d7-4e40-b9af-38572ce1ff00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3e:63:20:62:2a:fa:a4:31:70:cd:59:40:10: b9:4e:d5:7e:87:79:85:19:b9:d0:cf:1e:cf:26:08: b2:62:36:d5:61:8f:2a:06:80:61:8e:99:c8:50:4e: e8:79:8b:87:f0:fa:7e:9d:d0:3b:59:b9:42:a2:f2: 6b:fd:bf:d2:1e:75:d0:b5:4c:fc:fe:00:4c:e1:87: 3c:d2:1a:36:9e:82:bf:ed:05:ec:0d:ff:86:62:1e: eb:1f:2a:b6:81:43:08:66:49:bc:d5:78:3a:9d:43: 28:d3:a4:7a:15:a5:df:92:fa:9c:e9:7a:b2:39:93: 30:80:a1:e9:43:25:dc:85:13:a7:1b:79:af:64:96: df:6b:30:10:e4:47:e7:63:e3:85:66:2f:dd:b5:ef: 63:27:ea:53:a9:af:4d:a9:b0:af:ba:9d:5e:07:8f: 85:81:e1:39:13:4e:e1:d7:6e:e2:d4:47:27:ea:ae: 38:ea:8f:a5:b3:fc:75:c6:24:40:9c:a5:f4:8a:c2: 87:53:2c:30:45:7e:34:09:2e:d9:98:c2:57:9a:bf: 93:24:6f:e0:ad:26:ac:61:2f:94:22:13:58:f3:38: b9:a1:42:94:9a:d7:36:f0:1d:f9:f1:39:1d:5d:5d: 98:97:13:5a:47:dc:c5:d2:9e:eb:84:c1:00:96:f7: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:56:02:25:53:77:BA:1C:20:C9:EC:A6:4C:49:5D:11:22:37:7F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6b:fc:6d:27:2b:52:87:73:03:84:0f:a4:55:29:30:c2:ee: 98:d2:16:cc:0f:6e:54:02:10:7f:ee:11:14:a9:d9:52:e1:95: 20:b0:1c:80:51:8a:e9:ca:1c:c5:31:ac:1d:94:bd:49:86:b7: 75:5d:df:64:c8:9a:6b:cc:7e:dc:e7:39:39:7a:e7:f2:f2:31: 73:36:94:fd:b7:50:3e:1d:1b:6d:4b:a8:72:9c:c2:07:1f:fc: 71:09:53:35:7c:1e:c4:10:25:40:5d:08:2b:2c:04:5b:22:04: 1b:cc:36:99:42:0d:39:10:56:cf:f8:a4:f6:12:37:0a:85:45: 54:31:b0:73:8c:23:38:5b:bc:8f:bc:0c:13:46:98:41:27:3c: ea:8c:ac:80:b0:53:e2:18:74:61:fe:ec:7a:38:35:61:94:31: 09:8b:5f:4f:57:58:93:d4:2d:a0:89:a1:7e:8c:d5:a7:07:2a: 2b:f6:67:35:e5:a1:a8:47:4f:53:14:f3:ca:11:f8:54:77:02: 62:dc:9e:e3:d8:53:9f:b6:2b:e5:e5:f1:11:ca:b7:df:ed:5c: 18:1d:ac:c8:53:d7:4c:67:0b:8f:95:24:89:c9:c8:a6:46:d4: e1:7b:0a:d4:ab:0c:83:09:2e:d7:6b:53:c6:5b:1e:d3:77:9a: 9c:f7:6a:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhFHRmb0DwnVtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk N2VmNzhmMGItNzRkNy00ZTQwLWI5YWYtMzg1NzJjZTFmZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz5jIGIq+qQxcM1ZQBC5TtV+h3mFGbnQzx7P JgiyYjbVYY8qBoBhjpnIUE7oeYuH8Pp+ndA7WblCovJr/b/SHnXQtUz8/gBM4Yc8 0ho2noK/7QXsDf+GYh7rHyq2gUMIZkm81Xg6nUMo06R6FaXfkvqc6XqyOZMwgKHp QyXchROnG3mvZJbfazAQ5EfnY+OFZi/dte9jJ+pTqa9NqbCvup1eB4+FgeE5E07h 127i1Ecn6q446o+ls/x1xiRAnKX0isKHUywwRX40CS7ZmMJXmr+TJG/grSasYS+U IhNY8zi5oUKUmtc28B358TkdXV2YlxNaR9zF0p7rhMEAlvfz8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtWAiVTd7ocIMnspkxJXREiN3+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWEzNmQ0ZmEtZGU5YS0z Njg3LWE2ZDgtNmE1NjQyOGJhNTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhr/G0nK1KHcwOED6RVKTDC7pjSFswPblQCEH/uERSp2VLhlSCwHIBR iunKHMUxrB2UvUmGt3Vd32TImmvMftznOTl65/LyMXM2lP23UD4dG21LqHKcwgcf /HEJUzV8HsQQJUBdCCssBFsiBBvMNplCDTkQVs/4pPYSNwqFRVQxsHOMIzhbvI+8 DBNGmEEnPOqMrICwU+IYdGH+7Ho4NWGUMQmLX09XWJPULaCJoX6M1acHKiv2ZzXl oahHT1MU88oR+FR3AmLcnuPYU5+2K+Xl8RHKt9/tXBgdrMhT10xnC4+VJInJyKZG 1OF7CtSrDIMJLtdrU8ZbHtN3mpz3ans= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:53 2025 by rpki-client