$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c7441be3-018c-32a7-b3c8-000af3cc3e5e.roa File: c7441be3-018c-32a7-b3c8-000af3cc3e5e.roa (raw, json) Hash identifier: OjfS+GkXq9YJuzYfgidZZJZLc4HNgPmqBSNpVZcIYsM= Subject key identifier: 99:F2:82:5A:18:33:11:28:A6:09:CB:67:85:75:17:FF:74:9E:CB:2C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814607FC00245CA2F89965C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c7441be3-018c-32a7-b3c8-000af3cc3e5e.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:07:fc:00:24:5c:a2:f8:99:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=715a7e25-3bba-442f-9fdf-8b84e094f6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:94:1e:25:40:d0:a8:a5:8b:7e:8a:6c:e4: d3:19:d7:84:57:c8:0f:5f:d4:2f:64:b4:b9:80:6e: 9a:91:a9:45:e7:6b:09:07:d6:04:cb:e9:9e:4a:5f: d3:e3:d2:41:f7:72:9c:44:90:d6:e2:87:0f:17:43: 1f:e1:b0:11:ad:a7:b9:62:56:3b:7e:a5:9f:f0:d8: ee:44:df:06:13:78:c9:53:36:40:a7:5d:ff:4c:24: 1d:7a:db:86:f8:54:f1:f5:ab:7a:9e:26:3f:ba:98: 07:9b:80:4b:2f:68:7d:6c:1d:fc:78:b7:82:20:b5: 0a:b9:e3:41:85:72:db:67:fc:24:75:33:53:8f:e6: 45:d5:d4:10:c4:cc:c0:b8:aa:43:a4:63:cb:f9:84: 0a:ea:f6:40:05:87:2a:d8:de:cd:06:6b:76:7b:12: 1e:37:2e:cf:c5:20:41:0e:59:f2:ef:0e:b2:b4:d6: 99:84:b3:94:32:60:59:d0:40:79:3b:fe:ef:2a:1d: 0a:27:48:f6:18:c7:7e:76:73:1e:79:1b:67:0c:cd: 25:91:32:cb:d2:39:98:6d:c3:2e:6f:21:ea:e0:a8: c3:68:60:25:c5:fa:3f:6a:b6:17:24:ab:e1:fa:32: b3:d0:f0:53:e9:d3:e1:ef:a8:a5:d7:81:8d:de:0a: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F2:82:5A:18:33:11:28:A6:09:CB:67:85:75:17:FF:74:9E:CB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c7441be3-018c-32a7-b3c8-000af3cc3e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a8:e2:c0:33:f0:53:83:03:b8:12:e1:0f:7c:2d:31:76:ee: b3:51:59:a6:7c:c3:ad:b6:82:78:f8:25:8c:13:61:66:35:da: 7a:ad:b5:1a:60:96:b4:0e:54:ba:ff:dd:09:3e:87:f7:4e:8f: 38:e7:97:b1:7f:0c:d7:a0:06:ab:95:b5:c3:64:a8:eb:0c:96: 7e:ad:4d:1a:5a:6e:8b:58:38:e6:15:26:5f:aa:10:03:59:bb: 45:16:15:6e:e7:1e:53:e0:8f:a2:bc:c7:08:51:bf:ef:87:8e: b1:b2:cb:bf:71:99:82:c7:90:92:62:43:67:4a:20:26:4e:f7: ae:03:ab:20:c9:e9:e2:f9:ce:ea:8a:aa:dd:c9:67:72:51:4f: 19:aa:c3:97:e9:ca:6b:03:c4:55:0f:d1:00:46:e5:d7:b0:e3: d1:8e:ca:f4:c1:76:01:0d:72:91:1b:73:62:18:94:07:f5:4c: 07:02:d3:80:30:8a:35:bb:0e:ce:c8:6f:2d:b4:1f:b3:61:d7: 79:40:b6:aa:34:8b:e7:39:47:77:b8:ed:65:09:28:ca:ca:37: 6e:22:35:7e:aa:a4:6d:df:55:7e:a0:d7:3b:b3:b5:a9:7a:da: 18:6c:d6:a3:4f:28:61:25:4b:08:3f:4b:77:cb:c8:47:ed:63: 72:22:a0:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgf8ACRcoviZZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NzE1YTdlMjUtM2JiYS00NDJmLTlmZGYtOGI4NGUwOTRmNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4mUHiVA0Kili36KbOTTGdeEV8gPX9QvZLS5 gG6akalF52sJB9YEy+meSl/T49JB93KcRJDW4ocPF0Mf4bARrae5YlY7fqWf8Nju RN8GE3jJUzZAp13/TCQdetuG+FTx9at6niY/upgHm4BLL2h9bB38eLeCILUKueNB hXLbZ/wkdTNTj+ZF1dQQxMzAuKpDpGPL+YQK6vZABYcq2N7NBmt2exIeNy7PxSBB Dlny7w6ytNaZhLOUMmBZ0EB5O/7vKh0KJ0j2GMd+dnMeeRtnDM0lkTLL0jmYbcMu byHq4KjDaGAlxfo/arYXJKvh+jKz0PBT6dPh76il14GN3go+bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnygloYMxEopgnLZ4V1F/90nsssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzc0NDFiZTMtMDE4Yy0z MmE3LWIzYzgtMDAwYWYzY2MzZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6o4sAz8FODA7gS4Q98LTF27rNRWaZ8w622gnj4JYwTYWY12nqttRpg lrQOVLr/3Qk+h/dOjzjnl7F/DNegBquVtcNkqOsMln6tTRpabotYOOYVJl+qEANZ u0UWFW7nHlPgj6K8xwhRv++HjrGyy79xmYLHkJJiQ2dKICZO964DqyDJ6eL5zuqK qt3JZ3JRTxmqw5fpymsDxFUP0QBG5dew49GOyvTBdgENcpEbc2IYlAf1TAcC04Aw ijW7Ds7Iby20H7Nh13lAtqo0i+c5R3e47WUJKMrKN24iNX6qpG3fVX6g1zuztal6 2hhs1qNPKGElSwg/S3fLyEftY3IioJ8= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:34 2025 by rpki-client