$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6424d99-d68e-3dbd-94ad-39ec36944016.roa File: c6424d99-d68e-3dbd-94ad-39ec36944016.roa (raw, json) Hash identifier: qn/wkepZql1tyw9xHJ3J7sjQjkK855YNaGYhsPyCywM= Subject key identifier: CA:C6:9B:A6:5B:CA:B0:94:05:8B:74:C4:5E:5E:B8:A3:0D:81:8A:D5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814610E8F56D23368D381300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6424d99-d68e-3dbd-94ad-39ec36944016.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:10:e8:f5:6d:23:36:8d:38:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=964f27b4-9aa2-4ab8-bd9f-630b31202eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:88:a3:58:b3:ef:0b:15:9f:e3:96:e4:87: ef:5f:b3:28:36:4a:28:b8:4f:de:b7:7b:b7:6d:49: 43:2a:b9:7c:71:1b:20:e6:64:24:32:45:16:54:61: e4:18:63:6a:b1:3a:4e:74:ab:18:f7:4a:99:d8:bb: 51:96:36:73:1f:b0:67:d1:8c:59:a4:8b:08:78:74: 1a:79:31:23:6c:00:76:0f:dc:af:92:40:5e:45:63: 7e:c7:42:7a:c4:f8:ed:78:45:8b:e1:f6:15:ac:d5: 56:61:14:f3:f8:64:48:07:5f:1d:a1:b5:6a:67:69: 97:38:ef:05:8d:0d:bc:a3:e9:a4:51:12:8a:c1:9d: 3e:07:b1:af:d7:83:c6:0c:21:5b:d7:a7:d4:6a:85: 4e:a6:0d:ee:47:82:94:68:68:fd:66:ae:d5:49:06: d5:82:a3:a2:cc:07:f1:5d:4c:1d:28:b7:54:42:2e: 13:4e:3d:bf:7e:be:81:b3:1d:b7:18:e8:d8:db:39: 4d:59:11:e4:bf:c8:ad:ce:bd:c7:15:0b:71:15:10: 01:7a:87:e9:0c:a2:d0:35:e6:ce:00:2f:95:18:25: 18:e3:07:99:8d:27:1e:6d:96:c8:72:1a:f5:f3:73: 4f:ee:37:73:8d:8a:2f:b2:27:df:5e:f9:8c:0b:3a: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C6:9B:A6:5B:CA:B0:94:05:8B:74:C4:5E:5E:B8:A3:0D:81:8A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6424d99-d68e-3dbd-94ad-39ec36944016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:4a:81:7e:21:cd:f5:13:ff:6c:bc:48:f2:16:39:a9:b5:fb: b0:32:07:df:99:b5:f0:a7:49:10:85:4a:6e:5b:ae:c9:8e:34: 0a:bc:73:9c:31:cb:df:44:29:e1:1b:b8:b6:37:48:17:da:20: 76:8b:58:b2:22:a5:41:39:94:88:4c:63:df:e1:a0:66:b0:68: c5:70:38:4b:bc:7d:21:00:a9:87:6a:5d:a1:49:4b:ee:92:2e: ca:ef:97:81:ac:7c:6a:4c:4d:f5:fe:c0:f4:24:6c:9d:98:9c: 75:73:dc:04:e4:e1:2b:b9:81:02:c9:d2:b8:b2:38:60:f7:a4: 56:fc:a9:49:59:be:84:c8:4d:cb:25:ca:79:dd:56:6e:a3:0d: 43:6a:77:1a:48:57:f3:59:57:fe:4b:c3:75:e9:e0:7e:c8:91: 91:48:bf:87:36:a9:cb:81:8c:61:47:67:42:7b:5a:ad:7a:bb: 9a:ec:05:e9:ed:de:f1:67:e7:9e:95:ab:30:53:1d:73:64:25: 51:63:1e:21:7d:d6:b7:57:68:70:4d:a2:d4:4a:58:aa:c3:53: 9a:06:ba:3d:67:15:33:e2:02:5f:74:a4:e2:6c:30:b1:53:8f: fa:f1:8f:ee:54:7d:8f:7e:c8:03:e4:ee:b3:de:ff:47:d7:8c: cd:0c:36:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhDo9W0jNo04EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OTY0ZjI3YjQtOWFhMi00YWI4LWJkOWYtNjMwYjMxMjAyZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRiIo1iz7wsVn+OW5IfvX7MoNkoouE/et3u3 bUlDKrl8cRsg5mQkMkUWVGHkGGNqsTpOdKsY90qZ2LtRljZzH7Bn0YxZpIsIeHQa eTEjbAB2D9yvkkBeRWN+x0J6xPjteEWL4fYVrNVWYRTz+GRIB18dobVqZ2mXOO8F jQ28o+mkURKKwZ0+B7Gv14PGDCFb16fUaoVOpg3uR4KUaGj9Zq7VSQbVgqOizAfx XUwdKLdUQi4TTj2/fr6Bsx23GOjY2zlNWRHkv8itzr3HFQtxFRABeofpDKLQNebO AC+VGCUY4weZjScebZbIchr183NP7jdzjYovsiffXvmMCzostwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrGm6ZbyrCUBYt0xF5euKMNgYrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzY0MjRkOTktZDY4ZS0z ZGJkLTk0YWQtMzllYzM2OTQ0MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhKgX4hzfUT/2y8SPIWOam1+7AyB9+ZtfCnSRCFSm5brsmONAq8c5wx y99EKeEbuLY3SBfaIHaLWLIipUE5lIhMY9/hoGawaMVwOEu8fSEAqYdqXaFJS+6S Lsrvl4GsfGpMTfX+wPQkbJ2YnHVz3ATk4Su5gQLJ0riyOGD3pFb8qUlZvoTITcsl ynndVm6jDUNqdxpIV/NZV/5Lw3Xp4H7IkZFIv4c2qcuBjGFHZ0J7Wq16u5rsBent 3vFn556VqzBTHXNkJVFjHiF91rdXaHBNotRKWKrDU5oGuj1nFTPiAl90pOJsMLFT j/rxj+5UfY9+yAPk7rPe/0fXjM0MNp8= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:09 2025 by rpki-client