$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa File: dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa (raw, json) Hash identifier: ZpiHUqiu6u90KA031jspBDePTAguEO7dkL13KbMdHFQ= Subject key identifier: 9F:63:BB:A6:A8:EF:80:D3:C0:D3:8C:74:CE:2B:52:84:DE:38:72:93 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8146147EC01B916168E78500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:14:7e:c0:1b:91:61:68:e7:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=378c0c0e-21e1-49cd-b3d1-0e5d8d579539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d3:ea:0b:11:63:ea:bc:3a:31:b3:33:55:1b: af:83:ca:71:f5:2a:de:3c:a2:6b:6d:5f:7b:b2:3a: a5:de:16:c3:16:ed:73:89:5a:51:bd:2f:d4:7c:89: 2a:b8:f7:7f:95:e7:39:64:52:8a:51:09:f5:dc:00: 59:07:77:42:d3:fe:91:c6:5f:44:0f:20:3a:bc:b4: ff:d3:ad:00:fd:3b:31:c6:2b:5d:71:9f:88:d2:12: eb:23:ff:66:30:43:bb:fd:f6:ef:a1:7e:b7:35:5f: da:2b:36:ae:07:1e:a5:8b:c4:31:d6:f1:65:df:fa: ac:ba:cb:47:55:1b:ba:d2:a4:6c:1b:0c:f4:5f:26: 3b:2e:ba:78:1d:dc:8f:04:51:44:69:c1:aa:cc:19: 5d:44:8a:51:68:a8:d2:4d:3b:72:a4:77:6c:d7:22: 01:4f:d4:ec:d4:0a:bd:81:98:ff:a1:8f:24:e1:a4: 49:05:b2:d8:c6:13:69:10:44:66:bb:75:fb:cc:2f: 3c:bf:41:84:87:8d:21:68:94:93:37:7f:f2:40:29: 57:d3:d8:a8:83:4a:8a:c1:88:84:4c:e8:2f:3f:53: 3e:5f:43:e3:be:a4:e4:5f:ed:36:ef:f6:a3:0b:84: 5f:4d:d9:57:0f:48:5f:d1:4c:95:90:aa:bd:04:ae: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:63:BB:A6:A8:EF:80:D3:C0:D3:8C:74:CE:2B:52:84:DE:38:72:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ed:f5:ee:f1:b9:d6:95:11:95:68:59:20:ac:08:de:48:41: 6f:d9:39:af:60:d1:c6:05:f6:fa:f8:4f:11:f8:f9:8a:79:29: 63:b4:30:d3:17:5f:76:4a:c8:4d:8a:3b:d3:26:be:00:0e:71: 51:04:c6:dc:8f:44:8d:e2:43:c5:e1:e0:e7:b2:8c:80:b2:f2: 39:81:68:0e:2b:86:05:e9:39:e6:88:76:20:5b:ef:b4:3c:3f: 14:b3:78:f9:0d:c8:7d:27:61:0d:64:fc:09:bc:78:5d:88:7f: c7:2e:1d:24:f8:cb:d7:03:3c:89:13:b1:02:4e:82:5b:ac:00: da:61:97:0e:81:1b:37:07:86:70:a8:01:42:cf:d3:2d:ac:71: 21:91:32:23:2a:e5:59:b0:81:20:b7:23:14:b0:9e:67:89:c2: cf:3b:36:ae:f5:2a:f2:1b:20:d0:15:9b:50:bd:77:29:e9:78: d4:95:22:9b:64:c4:c5:52:10:d1:c4:bf:e6:58:1f:e0:14:94: 89:06:d7:da:17:a5:93:e1:92:9a:56:28:54:b2:70:ea:fc:46: 04:97:04:bd:77:a8:d9:26:a0:73:d0:5d:67:e2:44:c9:e0:57: 3e:52:c9:19:77:66:dd:79:8f:e0:e0:ad:c3:4f:6f:de:b5:56: 6e:64:31:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhR+wBuRYWjnhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk Mzc4YzBjMGUtMjFlMS00OWNkLWIzZDEtMGU1ZDhkNTc5NTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNPqCxFj6rw6MbMzVRuvg8px9SrePKJrbV97 sjql3hbDFu1ziVpRvS/UfIkquPd/lec5ZFKKUQn13ABZB3dC0/6Rxl9EDyA6vLT/ 060A/TsxxitdcZ+I0hLrI/9mMEO7/fbvoX63NV/aKzauBx6li8Qx1vFl3/qsustH VRu60qRsGwz0XyY7Lrp4HdyPBFFEacGqzBldRIpRaKjSTTtypHds1yIBT9Ts1Aq9 gZj/oY8k4aRJBbLYxhNpEERmu3X7zC88v0GEh40haJSTN3/yQClX09iog0qKwYiE TOgvP1M+X0PjvqTkX+027/ajC4RfTdlXD0hf0UyVkKq9BK791wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9ju6ao74DTwNOMdM4rUoTeOHKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGZmOTliYTgtY2IxZi0z NDI3LWE4NDEtNmExMzYyY2QyNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHt9e7xudaVEZVoWSCsCN5IQW/ZOa9g0cYF9vr4TxH4+Yp5KWO0MNMX X3ZKyE2KO9MmvgAOcVEExtyPRI3iQ8Xh4OeyjICy8jmBaA4rhgXpOeaIdiBb77Q8 PxSzePkNyH0nYQ1k/Am8eF2If8cuHST4y9cDPIkTsQJOglusANphlw6BGzcHhnCo AULP0y2scSGRMiMq5VmwgSC3IxSwnmeJws87Nq71KvIbINAVm1C9dynpeNSVIptk xMVSENHEv+ZYH+AUlIkG19oXpZPhkppWKFSycOr8RgSXBL13qNkmoHPQXWfiRMng Vz5SyRl3Zt15j+DgrcNPb961Vm5kMR8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:07 2025 by rpki-client