$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf698d40-ce8d-36c4-830a-ccf3f3139f5a.roa File: cf698d40-ce8d-36c4-830a-ccf3f3139f5a.roa (raw, json) Hash identifier: Uup6dQ/qDEUvqNEeEHhEgWcZ8wWoH/RgmTEgwEGR+ko= Subject key identifier: DA:F9:FC:CD:11:A4:CF:28:84:E3:B6:F3:77:2A:30:12:A1:82:BD:9C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461514E7AFAB9E4F569680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf698d40-ce8d-36c4-830a-ccf3f3139f5a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:15:14:e7:af:ab:9e:4f:56:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=b7af3414-562a-4d48-9f41-8dadbcba74f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ea:01:75:a3:34:99:cf:a3:98:eb:e6:c1:eb: 71:3f:ac:87:45:ba:8b:22:5b:92:d6:8b:2e:62:4d: 83:26:28:c9:13:ad:b9:4c:8e:ef:bd:c9:88:da:ea: 44:1b:a0:d9:fa:6d:b1:47:14:32:f2:5f:58:c6:30: 2b:28:2d:71:56:80:f5:ac:24:4f:8e:d2:8e:f3:3c: 47:4d:8b:0c:95:78:ff:e9:df:c7:2e:a5:72:43:35: 88:8b:88:d7:df:67:3f:40:8f:02:f2:b5:12:49:ce: e6:c5:96:ee:5f:32:eb:58:66:f6:5a:82:b0:0f:b3: db:a9:2c:1d:30:25:e1:9c:4d:cb:17:94:e5:d7:7c: 65:ab:5b:28:97:d9:15:9a:a1:7f:d4:d2:da:13:dd: da:52:2a:a8:f2:ee:cd:b8:cb:25:16:26:7a:39:89: 1e:66:97:67:63:75:74:6c:ad:97:9d:12:17:e3:66: 1c:7f:36:98:ce:3b:7a:20:99:69:1c:48:c4:79:7f: 77:6f:2b:dd:fd:38:5b:d3:65:03:9e:c5:4b:6d:4b: 7c:4b:e8:31:2e:0c:1a:ff:34:0e:b1:28:cd:c3:7e: 68:74:63:54:d1:1d:26:12:3b:0e:64:43:14:ba:95: 86:1d:17:89:2c:2a:eb:eb:15:f8:00:80:f5:f1:5e: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F9:FC:CD:11:A4:CF:28:84:E3:B6:F3:77:2A:30:12:A1:82:BD:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf698d40-ce8d-36c4-830a-ccf3f3139f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:be:f3:74:db:6b:fe:1f:07:f8:14:4a:7c:7a:10:e0:67:6e: 68:94:a2:59:15:f8:38:49:cf:db:29:7c:db:f7:52:1d:ca:42: 90:34:3d:94:89:99:0d:0d:9f:f5:64:53:c7:fa:6c:bf:50:4c: 06:9a:77:7b:ad:ec:86:3d:fa:2d:60:cf:61:fd:51:b3:5b:71: ae:e3:ff:87:ca:63:1d:c7:c2:e7:a2:42:61:56:74:00:2d:79: 1a:87:77:d7:4f:01:d1:02:af:8d:7a:8b:92:b5:cd:c4:d6:f0: 4b:51:5e:35:5c:d3:7e:81:ac:d4:62:98:b3:ed:75:7f:72:ae: f3:42:b7:f0:ef:46:d0:3b:41:d9:94:78:07:ac:52:42:c4:c6: eb:7b:8e:79:fd:0b:5d:e2:9f:b9:1e:0c:28:76:09:02:05:fa: a1:80:71:da:56:d1:96:a4:46:b9:83:46:a0:d5:83:68:82:e4: 24:d4:e0:a9:c3:2f:f1:a8:e9:fa:1d:75:c9:14:59:e0:bf:08: 82:bb:42:2f:75:94:79:48:c2:96:08:f8:6a:0b:85:75:b8:11: 60:99:12:ab:4b:b8:d3:f9:a8:01:7b:9b:12:e7:0b:42:a5:7a: 9a:63:c9:8c:f6:7a:fe:9b:89:d9:74:f0:90:93:8b:85:f8:c0: 5c:03:06:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhUU56+rnk9WloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YjdhZjM0MTQtNTYyYS00ZDQ4LTlmNDEtOGRhZGJjYmE3NGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuoBdaM0mc+jmOvmwetxP6yHRbqLIluS1osu Yk2DJijJE625TI7vvcmI2upEG6DZ+m2xRxQy8l9YxjArKC1xVoD1rCRPjtKO8zxH TYsMlXj/6d/HLqVyQzWIi4jX32c/QI8C8rUSSc7mxZbuXzLrWGb2WoKwD7PbqSwd MCXhnE3LF5Tl13xlq1sol9kVmqF/1NLaE93aUiqo8u7NuMslFiZ6OYkeZpdnY3V0 bK2XnRIX42YcfzaYzjt6IJlpHEjEeX93byvd/Thb02UDnsVLbUt8S+gxLgwa/zQO sSjNw35odGNU0R0mEjsOZEMUupWGHReJLCrr6xX4AID18V6tdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr5/M0RpM8ohOO283cqMBKhgr2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2Y2OThkNDAtY2U4ZC0z NmM0LTgzMGEtY2NmM2YzMTM5ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRajMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHO+83Tba/4fB/gUSnx6EOBnbmiUolkV+DhJz9spfNv3Uh3KQpA0PZSJ mQ0Nn/VkU8f6bL9QTAaad3ut7IY9+i1gz2H9UbNbca7j/4fKYx3HwueiQmFWdAAt eRqHd9dPAdECr416i5K1zcTW8EtRXjVc036BrNRimLPtdX9yrvNCt/DvRtA7QdmU eAesUkLExut7jnn9C13in7keDCh2CQIF+qGAcdpW0ZakRrmDRqDVg2iC5CTU4KnD L/Go6foddckUWeC/CIK7Qi91lHlIwpYI+GoLhXW4EWCZEqtLuNP5qAF7mxLnC0Kl eppjyYz2ev6bidl08JCTi4X4wFwDBv4= -----END CERTIFICATE-----Generated at Thu Aug 7 03:25:44 2025 by rpki-client