$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f89a82a5-b653-387a-b541-66e71900de5b.roa File: f89a82a5-b653-387a-b541-66e71900de5b.roa (raw, json) Hash identifier: CfC+wLq2+/q57q6C0I2hcgFRG7xloBn8o0nOrMxnJxQ= Subject key identifier: EC:B0:A6:7A:42:5E:F4:D4:48:00:80:E9:84:41:B8:01:DA:87:90:2B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8146184AB7EEFBC2794E1A40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f89a82a5-b653-387a-b541-66e71900de5b.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:18:4a:b7:ee:fb:c2:79:4e:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=cfed6037-1f80-4159-863a-b5514ab3549b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2c:0b:c2:f8:4c:32:89:73:b8:a2:24:cb:ff: 0e:80:d2:0b:5b:d8:0a:4d:67:d9:b3:79:88:52:bd: f4:c0:c8:aa:7a:14:67:1b:e4:f8:d5:2b:75:cc:a2: d4:1b:03:8b:9f:ed:d0:a5:19:23:15:d0:b9:3d:2d: 9a:b8:8f:73:7e:49:ca:a8:f9:bc:bf:7c:a6:47:ab: 2f:2a:4f:e8:20:47:49:12:34:8b:be:a4:e7:1c:04: 7e:95:b6:ff:32:59:64:51:a4:e6:73:fe:ac:45:1a: 7e:a5:c1:19:fe:06:25:8b:fd:32:81:08:15:ec:cd: da:57:f4:99:d7:c8:76:86:25:c2:46:e5:39:2b:03: a1:85:8a:e8:b7:c8:61:dc:a2:8b:20:0e:41:31:ef: 50:f0:27:74:5a:eb:88:77:5c:d6:37:54:a0:12:db: 3d:ed:93:ce:a7:fb:30:a5:39:93:f1:5b:9e:61:78: 1b:0c:24:73:0c:96:70:17:e3:8d:ad:4a:80:c4:7f: 99:97:36:55:23:44:c0:e5:2e:a0:f6:64:24:09:a0: dd:c0:90:67:76:f8:27:e0:62:82:7e:cf:64:93:13: a5:9d:fc:c8:f8:4a:97:59:52:6a:2d:02:11:81:f9: 87:cc:80:19:e7:f6:6d:01:24:67:0d:f4:d2:50:50: 4e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B0:A6:7A:42:5E:F4:D4:48:00:80:E9:84:41:B8:01:DA:87:90:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f89a82a5-b653-387a-b541-66e71900de5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ef:4e:1a:22:00:2e:f8:39:bb:17:27:d6:5e:9d:05:e9:83: 72:49:80:3f:7f:52:f2:2e:d9:f8:a3:b2:5b:89:30:7f:ea:82: 28:98:f7:98:96:ec:e9:d3:00:19:45:ba:b7:4b:55:13:00:13: 41:0d:cb:43:fe:92:cc:33:3f:10:e0:0f:96:46:e1:76:c7:ba: 5a:78:af:5f:e2:82:47:4b:e4:51:58:0f:67:ec:b2:fd:c9:ef: b3:33:84:ef:cc:74:51:bd:91:4d:83:2a:4c:51:50:62:8e:7a: f1:c8:07:06:df:53:41:9e:b5:51:e6:76:64:d9:27:d7:40:45: 4a:3d:f0:3f:93:c3:8a:21:ee:12:4b:11:af:19:87:f5:50:09: 97:5b:35:f9:b1:fb:b0:05:04:18:d1:3c:5c:24:6d:cf:3e:f0: ea:01:f5:7a:91:5f:21:7f:6c:8b:0c:05:38:dc:da:b2:27:4d: f2:5f:73:dd:9e:24:6e:43:2b:2f:4b:cf:2a:17:99:75:4d:da: 98:3c:a6:f3:d3:07:c6:e2:39:e2:c7:a7:b0:9a:e1:89:a8:e2: 1d:b0:a2:ce:f1:0b:d4:d5:35:f7:6e:a5:72:79:75:33:bb:de: 73:c7:a5:33:ac:56:0f:d6:56:f6:63:f6:17:c9:59:7d:25:f6: 90:cb:ac:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhhKt+77wnlOGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2ZlZDYwMzctMWY4MC00MTU5LTg2M2EtYjU1MTRhYjM1NDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCwLwvhMMolzuKIky/8OgNILW9gKTWfZs3mI Ur30wMiqehRnG+T41St1zKLUGwOLn+3QpRkjFdC5PS2auI9zfknKqPm8v3ymR6sv Kk/oIEdJEjSLvqTnHAR+lbb/MllkUaTmc/6sRRp+pcEZ/gYli/0ygQgV7M3aV/SZ 18h2hiXCRuU5KwOhhYrot8hh3KKLIA5BMe9Q8Cd0WuuId1zWN1SgEts97ZPOp/sw pTmT8VueYXgbDCRzDJZwF+ONrUqAxH+ZlzZVI0TA5S6g9mQkCaDdwJBndvgn4GKC fs9kkxOlnfzI+EqXWVJqLQIRgfmHzIAZ5/ZtASRnDfTSUFBODQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOywpnpCXvTUSACA6YRBuAHah5ArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjg5YTgyYTUtYjY1My0z ODdhLWI1NDEtNjZlNzE5MDBkZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7vThoiAC74ObsXJ9ZenQXpg3JJgD9/UvIu2fijsluJMH/qgiiY95iW 7OnTABlFurdLVRMAE0ENy0P+kswzPxDgD5ZG4XbHulp4r1/igkdL5FFYD2fssv3J 77MzhO/MdFG9kU2DKkxRUGKOevHIBwbfU0GetVHmdmTZJ9dARUo98D+Tw4oh7hJL Ea8Zh/VQCZdbNfmx+7AFBBjRPFwkbc8+8OoB9XqRXyF/bIsMBTjc2rInTfJfc92e JG5DKy9LzyoXmXVN2pg8pvPTB8biOeLHp7Ca4Ymo4h2wos7xC9TVNfdupXJ5dTO7 3nPHpTOsVg/WVvZj9hfJWX0l9pDLrCs= -----END CERTIFICATE-----Generated at Thu Aug 7 01:21:18 2025 by rpki-client