$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8385893-75f0-3723-b7a0-d599df26431d.roa File: f8385893-75f0-3723-b7a0-d599df26431d.roa (raw, json) Hash identifier: yGZTiL5B3bFVZa/7iFUWyy+ijn46A0fMpDztO3HV1eU= Subject key identifier: 6B:6C:D3:22:9A:D7:18:99:0A:FF:68:63:2B:97:B7:08:69:B9:CE:20 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814611FF95191790DF01E820 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8385893-75f0-3723-b7a0-d599df26431d.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:11:ff:95:19:17:90:df:01:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=45cb7b3e-3849-4eee-8917-dddd3f23b851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c8:a4:f1:f2:83:5c:ac:ca:49:72:9e:8c:5f: 77:6b:cd:94:d5:fd:37:8c:f4:b4:b7:26:07:9e:ba: 7a:17:ae:c4:ac:56:9b:44:c2:f3:01:a3:6a:fa:bb: 97:04:bf:7f:58:99:aa:b6:34:23:ec:de:32:a8:a6: ca:19:fa:83:e0:36:8d:e6:03:c2:04:91:0e:26:9d: 48:1e:e6:e9:15:89:49:7e:da:4e:97:bf:7b:92:52: 58:0a:84:3c:35:c8:cd:fd:76:00:66:27:96:f3:bd: c3:3c:df:70:67:8a:31:ec:33:a1:7f:16:3e:d3:66: 2b:13:8b:d8:55:9d:bc:56:81:8d:73:5d:89:54:8e: da:e0:9b:0a:9b:b3:87:3d:ea:9c:5b:b8:4d:62:2f: 64:9d:b1:be:1c:2d:26:72:16:38:6e:f3:bf:b5:e9: 78:c8:41:48:07:03:42:01:f6:54:a3:08:59:0c:52: f9:a6:35:64:b8:dc:d5:d8:86:24:8e:7f:e4:dc:93: d3:cf:eb:69:94:ee:d8:39:c9:c7:ed:cf:09:38:15: f9:fc:a1:c5:48:e3:43:4e:7f:11:ca:ae:7e:21:8b: de:2d:25:fc:f2:4b:9c:a1:ed:8e:c1:35:57:32:c4: 92:09:65:2e:5f:88:16:8d:8f:c0:11:be:b7:26:78: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6C:D3:22:9A:D7:18:99:0A:FF:68:63:2B:97:B7:08:69:B9:CE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8385893-75f0-3723-b7a0-d599df26431d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:69:fa:20:84:61:9c:b5:4a:3b:d8:52:b5:99:98:42:18:1b: 3a:a9:4f:2f:26:24:e7:61:98:e3:41:7e:d6:bd:18:0b:f5:b1: f9:7f:f1:89:74:15:37:0e:b8:ed:6b:06:16:b7:e3:fa:3d:8f: 6b:13:62:77:b7:e7:01:48:66:d6:10:5c:6d:83:42:ac:60:7f: 5d:ad:29:d0:06:1f:b5:14:39:f8:af:8d:c8:95:4e:23:51:7d: a3:61:82:9f:6e:2a:ea:b4:41:d2:95:1f:92:3a:7f:ee:7b:93: f8:3b:78:99:fd:dd:14:8a:02:44:54:45:f2:1b:55:c4:db:72: 1a:da:53:44:3e:5e:df:02:85:32:a5:27:e7:df:fa:0f:1c:ee: 83:a0:98:bf:6c:ed:22:97:6e:b8:8c:8a:cd:a5:a5:f3:0e:9c: e3:8a:4b:62:34:bc:22:95:6a:86:9f:ff:53:70:e0:7c:67:fa: 30:68:42:ff:14:32:aa:81:e6:23:01:b6:35:af:a3:a9:81:64: 75:98:78:05:35:54:d7:00:70:89:fd:d6:e1:2d:7c:66:c2:9e: 27:5c:54:74:5e:69:02:6e:1d:e9:80:a1:5d:7d:31:8f:71:d3: a1:4a:19:be:09:21:f1:74:d7:94:5f:1f:77:0d:c2:4d:9d:d4: 57:f9:72:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhH/lRkXkN8B6CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NDVjYjdiM2UtMzg0OS00ZWVlLTg5MTctZGRkZDNmMjNiODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcik8fKDXKzKSXKejF93a82U1f03jPS0tyYH nrp6F67ErFabRMLzAaNq+ruXBL9/WJmqtjQj7N4yqKbKGfqD4DaN5gPCBJEOJp1I HubpFYlJftpOl797klJYCoQ8NcjN/XYAZieW873DPN9wZ4ox7DOhfxY+02YrE4vY VZ28VoGNc12JVI7a4JsKm7OHPeqcW7hNYi9knbG+HC0mchY4bvO/tel4yEFIBwNC AfZUowhZDFL5pjVkuNzV2IYkjn/k3JPTz+tplO7YOcnH7c8JOBX5/KHFSONDTn8R yq5+IYveLSX88kucoe2OwTVXMsSSCWUuX4gWjY/AEb63Jng15QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGts0yKa1xiZCv9oYyuXtwhpuc4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjgzODU4OTMtNzVmMC0z NzIzLWI3YTAtZDU5OWRmMjY0MzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBp+iCEYZy1SjvYUrWZmEIYGzqpTy8mJOdhmONBfta9GAv1sfl/8Yl0 FTcOuO1rBha34/o9j2sTYne35wFIZtYQXG2DQqxgf12tKdAGH7UUOfivjciVTiNR faNhgp9uKuq0QdKVH5I6f+57k/g7eJn93RSKAkRURfIbVcTbchraU0Q+Xt8ChTKl J+ff+g8c7oOgmL9s7SKXbriMis2lpfMOnOOKS2I0vCKVaoaf/1Nw4Hxn+jBoQv8U MqqB5iMBtjWvo6mBZHWYeAU1VNcAcIn91uEtfGbCnidcVHReaQJuHemAoV19MY9x 06FKGb4JIfF015RfH3cNwk2d1Ff5csg= -----END CERTIFICATE-----Generated at Thu Aug 7 04:05:05 2025 by rpki-client