$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa File: bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa (raw, json) Hash identifier: WMnLSvpDk+3yn55qsSiS7pmzDqPsOJVvOaRxKWEiOHQ= Subject key identifier: 4E:6B:13:B5:12:BE:9B:4A:D5:6C:4A:2A:56:4F:B2:57:FC:6A:8C:5B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460C68720862C603D70600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0c:68:72:08:62:c6:03:d7:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=b505bff6-2a65-4912-a9ed-a919772c7946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:6e:0e:51:4d:42:32:8e:b3:85:36:bc:87: d3:e0:7b:67:a3:4b:02:b5:86:2a:86:b7:22:ac:88: 05:eb:31:b3:99:c2:c3:3f:c7:51:bf:9d:c1:21:be: 4e:39:b3:1e:6d:53:4a:ee:64:d9:f4:4d:dd:09:58: 36:2b:f9:b3:a8:d1:c7:a0:c4:ae:24:b7:12:af:4f: 70:b3:31:10:f1:dd:79:8d:03:70:d4:e0:28:a1:93: 81:83:2f:95:d1:6c:5f:55:a7:54:85:72:4c:87:72: 3d:59:71:8d:8a:bc:45:a1:54:86:a7:e1:93:0d:64: 54:e9:8f:b7:99:9b:af:31:94:15:d2:11:02:67:3f: a5:34:9d:fe:0a:b3:60:12:5e:26:28:29:98:8c:28: 25:98:a4:7a:7e:8e:82:09:0d:ce:fa:2c:a4:bb:ef: e2:17:70:0d:74:6a:29:7b:57:b9:8a:35:d0:77:cc: b5:50:4c:84:65:d3:d8:64:c0:a0:9f:c4:08:4e:ff: 74:79:99:f4:67:3f:f7:0b:8a:d0:f6:77:9e:4d:00: ac:cc:3b:b4:6c:df:b3:21:d0:eb:86:c2:eb:14:80: 0d:01:fc:0a:eb:be:60:b6:5b:89:09:08:d9:74:02: 73:be:a2:fb:10:51:dd:6e:77:6e:3d:35:82:9b:12: dd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6B:13:B5:12:BE:9B:4A:D5:6C:4A:2A:56:4F:B2:57:FC:6A:8C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bff53fa1-702c-3265-b8ff-d1dae96d6b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b1:32:1d:30:a0:3b:ec:ab:14:53:52:19:85:6b:ef:7c:70: 9f:cc:0f:2f:ad:d8:a5:e7:a9:fb:9b:04:f4:5c:4b:44:28:94: cf:83:83:59:b1:db:af:57:64:13:50:e7:62:08:2f:05:12:b4: 2f:03:20:30:d6:0b:ed:a4:e2:bd:f6:0d:50:90:09:67:6c:d4: 8a:95:fa:13:5c:0a:a2:b8:9a:80:6a:04:c0:da:9a:ca:54:62: 4b:a2:3c:13:cd:c2:27:ac:b6:5c:f7:f9:ea:38:26:b3:49:17: a9:7b:81:20:f1:0f:1d:eb:64:3e:00:b6:3d:ee:49:1d:f3:d3: a2:14:bb:44:3e:0f:70:be:90:05:50:b3:33:c3:cc:9d:3c:60: 45:ce:ea:76:59:d2:40:1c:28:48:89:37:2a:7e:2e:9f:52:07: d1:e9:7f:c3:27:22:a0:ae:6f:1e:55:e9:6c:7b:03:ee:9e:46: 86:10:c9:57:15:aa:f7:0b:f3:87:72:b4:ea:af:86:f9:1c:7a: 0b:c3:fc:41:53:d2:4e:85:14:f9:48:1e:87:88:db:05:5d:0f: 56:83:1b:82:57:fe:52:24:82:ad:e3:fd:4a:6c:63:e5:42:f6: 4d:84:ff:a4:07:f5:69:b9:9a:98:c0:09:a3:6d:ab:4e:83:1f: 68:a6:21:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgxocghixgPXBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YjUwNWJmZjYtMmE2NS00OTEyLWE5ZWQtYTkxOTc3MmM3OTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvxuDlFNQjKOs4U2vIfT4Htno0sCtYYqhrci rIgF6zGzmcLDP8dRv53BIb5OObMebVNK7mTZ9E3dCVg2K/mzqNHHoMSuJLcSr09w szEQ8d15jQNw1OAooZOBgy+V0WxfVadUhXJMh3I9WXGNirxFoVSGp+GTDWRU6Y+3 mZuvMZQV0hECZz+lNJ3+CrNgEl4mKCmYjCglmKR6fo6CCQ3O+iyku+/iF3ANdGop e1e5ijXQd8y1UEyEZdPYZMCgn8QITv90eZn0Zz/3C4rQ9neeTQCszDu0bN+zIdDr hsLrFIANAfwK675gtluJCQjZdAJzvqL7EFHdbnduPTWCmxLdCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5rE7USvptK1WxKKlZPslf8aoxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmZmNTNmYTEtNzAyYy0z MjY1LWI4ZmYtZDFkYWU5NmQ2YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGexMh0woDvsqxRTUhmFa+98cJ/MDy+t2KXnqfubBPRcS0QolM+Dg1mx 269XZBNQ52IILwUStC8DIDDWC+2k4r32DVCQCWds1IqV+hNcCqK4moBqBMDamspU YkuiPBPNwiestlz3+eo4JrNJF6l7gSDxDx3rZD4Atj3uSR3z06IUu0Q+D3C+kAVQ szPDzJ08YEXO6nZZ0kAcKEiJNyp+Lp9SB9Hpf8MnIqCubx5V6Wx7A+6eRoYQyVcV qvcL84dytOqvhvkcegvD/EFT0k6FFPlIHoeI2wVdD1aDG4JX/lIkgq3j/UpsY+VC 9k2E/6QH9Wm5mpjACaNtq06DH2imIfw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:22 2025 by rpki-client