$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7ab5792-6ce8-3ecc-937c-a78a2f7ccde3.roa File: f7ab5792-6ce8-3ecc-937c-a78a2f7ccde3.roa (raw, json) Hash identifier: qxU4b5CmBOY2AL5R/6Y7241Roez7I9VM238rABfjiAo= Subject key identifier: 8F:3C:8E:E0:3F:E5:B0:71:03:4D:56:D7:A5:42:5A:F2:6D:BF:AA:B7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8146171EEAB358D9C846F514 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7ab5792-6ce8-3ecc-937c-a78a2f7ccde3.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:17:1e:ea:b3:58:d9:c8:46:f5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=dea85d08-5f80-4f4e-8b04-1ae5bde3642f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:30:1b:f7:26:03:87:ff:be:2d:be:85:c2: 60:a1:a8:62:c7:dd:89:ee:43:5e:2e:bb:4e:d5:93: 38:b4:d8:6c:3b:10:ac:b2:fa:e2:36:b6:43:90:ba: de:b4:7e:fe:0e:fd:aa:5e:61:db:1d:d2:15:e7:a3: da:86:47:5b:19:c1:1b:7f:59:14:23:09:ca:0c:64: 4f:d8:7e:6c:a8:6c:90:85:f4:ed:36:5f:b5:cf:53: 68:e1:89:8d:d5:90:45:15:ec:a2:d2:8e:7e:8f:22: 36:85:b6:c1:90:15:67:1c:59:5f:89:58:6c:41:06: 1f:ce:45:dd:59:55:af:46:15:19:3e:78:60:ef:a7: 9d:aa:09:10:b7:d8:a4:d6:8f:08:fe:92:6d:f4:99: 51:ff:63:28:1f:40:9b:c5:9a:f5:ab:ab:43:13:91: e4:51:0d:8f:7e:4d:d5:5a:9a:6b:50:ae:5c:68:f7: 8e:08:16:86:15:5b:5f:e9:5a:f0:b5:59:72:9f:cf: 8d:14:24:b3:52:a9:f0:f0:75:f9:da:7f:01:71:3c: 02:37:79:e7:82:40:c9:b8:95:4b:2c:cf:ec:d2:ce: 52:f8:ac:bb:13:2c:53:db:53:68:50:e9:ad:6d:56: 67:e6:0e:99:22:26:4c:cf:36:e8:48:32:5e:72:92: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3C:8E:E0:3F:E5:B0:71:03:4D:56:D7:A5:42:5A:F2:6D:BF:AA:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7ab5792-6ce8-3ecc-937c-a78a2f7ccde3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0a:9b:84:12:a9:f0:19:17:57:f9:8f:8d:84:76:23:f6:1c: 75:9f:98:a9:0b:32:8c:5e:81:6d:3d:87:8e:59:1d:81:b0:f3: 32:fb:d2:14:94:43:c3:64:fd:16:e5:d0:ca:06:03:51:1a:e6: 3e:7b:f4:e1:72:0c:58:1b:57:98:72:1a:64:1e:da:91:26:1a: ff:b9:39:7d:7e:4c:19:70:6c:7b:83:77:0d:ae:ec:04:89:f6: 74:24:cd:94:e2:7a:48:cb:4d:c7:42:29:83:2a:d6:19:f7:dd: 45:88:e0:7b:e2:89:8f:4a:43:9d:f5:80:33:10:d6:6f:7b:d7: cb:50:bc:99:47:02:fb:0b:a1:4f:48:1a:8e:13:26:b5:d4:99: a7:3d:6b:82:fa:8a:c7:70:ba:2e:b9:29:23:36:ce:e0:51:1c: 2e:5e:d3:20:27:6b:ef:c3:c8:a3:66:fd:ba:05:16:06:9e:a6: 18:76:69:00:22:f0:31:05:f7:a2:05:49:be:5a:97:a2:02:9a: 66:91:18:3a:e2:2b:ea:d6:7a:d7:6d:5f:c8:9c:0d:31:18:22: 21:90:c5:68:a5:8f:b0:52:fb:51:8f:de:20:d6:25:8d:a1:02: b3:f7:54:9a:39:1b:8e:44:2e:37:2c:d0:d7:47:12:12:67:60: 0e:42:5f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhce6rNY2chG9RQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZGVhODVkMDgtNWY4MC00ZjRlLThiMDQtMWFlNWJkZTM2NDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT4wG/cmA4f/vi2+hcJgoahix92J7kNeLrtO 1ZM4tNhsOxCssvriNrZDkLretH7+Dv2qXmHbHdIV56PahkdbGcEbf1kUIwnKDGRP 2H5sqGyQhfTtNl+1z1No4YmN1ZBFFeyi0o5+jyI2hbbBkBVnHFlfiVhsQQYfzkXd WVWvRhUZPnhg76edqgkQt9ik1o8I/pJt9JlR/2MoH0CbxZr1q6tDE5HkUQ2Pfk3V WpprUK5caPeOCBaGFVtf6VrwtVlyn8+NFCSzUqnw8HX52n8BcTwCN3nngkDJuJVL LM/s0s5S+Ky7EyxT21NoUOmtbVZn5g6ZIiZMzzboSDJecpJc3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI88juA/5bBxA01W16VCWvJtv6q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjdhYjU3OTItNmNlOC0z ZWNjLTkzN2MtYTc4YTJmN2NjZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgKm4QSqfAZF1f5j42EdiP2HHWfmKkLMoxegW09h45ZHYGw8zL70hSU Q8Nk/Rbl0MoGA1Ea5j579OFyDFgbV5hyGmQe2pEmGv+5OX1+TBlwbHuDdw2u7ASJ 9nQkzZTiekjLTcdCKYMq1hn33UWI4HviiY9KQ531gDMQ1m9718tQvJlHAvsLoU9I Go4TJrXUmac9a4L6isdwui65KSM2zuBRHC5e0yAna+/DyKNm/boFFgaephh2aQAi 8DEF96IFSb5al6ICmmaRGDriK+rWetdtX8icDTEYIiGQxWilj7BS+1GP3iDWJY2h ArP3VJo5G45ELjcs0NdHEhJnYA5CX3w= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:15 2025 by rpki-client