$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa File: 3cb5c865-56bc-36bb-9781-6328ac6934e4.roa (raw, json) Hash identifier: spc9wHRRq5Yiw0/sthDYcyc8Zk2Ug0XaikHGUnuuSE8= Subject key identifier: E0:7B:9B:FE:1E:B3:6E:16:36:A1:12:02:E1:7A:CC:2F:F7:E1:CE:14 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81460D1CF4C748CE6525A440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:0d:1c:f4:c7:48:ce:65:25:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=616409e3-4eef-4f94-9960-fc84d97e530b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:a2:77:5b:a9:e1:14:dc:9e:22:66:60:b3: 77:5e:40:2c:82:23:e3:e5:34:6c:21:be:9f:ae:4f: 7a:f4:50:85:01:b7:66:d3:ea:8c:e4:09:c2:05:b3: 4c:36:c1:a2:23:62:96:bc:4d:d0:13:7d:4a:4e:80: 43:d6:9f:b5:22:1b:fb:93:8c:5b:21:df:d8:e8:6b: 95:ca:de:ac:4a:62:05:03:ff:d5:f2:08:1b:d1:4e: 5f:8a:1b:64:98:54:48:19:a4:9b:7e:79:49:6c:cb: f6:3e:ed:56:0d:3a:28:97:66:f1:8d:d3:c2:14:d8: 0b:3b:f3:d8:df:69:f0:98:39:98:3f:44:a1:55:e0: 7c:6d:85:88:fd:39:1c:3b:34:6c:68:50:96:c0:3e: 43:36:63:dc:90:0d:3f:bd:84:85:31:2d:36:85:86: ea:67:3b:d8:f8:84:c5:a5:3d:fe:cd:4e:37:04:15: 66:35:a8:82:a2:aa:0c:1a:d7:9d:cf:a8:b8:5f:d7: 0c:ec:a4:cc:fd:5f:78:89:0d:61:5f:93:7b:de:f4: 6e:23:e7:63:52:32:15:64:16:9f:4a:6e:66:d6:c0: 14:8d:07:10:87:cd:bb:f1:8f:85:06:9b:2c:ed:f2: 44:3e:ae:6c:d3:53:31:f9:c1:a1:8e:3e:76:9e:2e: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7B:9B:FE:1E:B3:6E:16:36:A1:12:02:E1:7A:CC:2F:F7:E1:CE:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:79:0a:25:c0:2b:51:a5:40:26:ea:f5:84:62:f2:f0:98:95: d4:12:30:84:8e:bd:b5:26:e4:70:73:e2:02:8f:9d:8c:f3:dd: 20:1e:4a:af:95:50:cd:48:34:b4:ec:a9:b9:49:1c:62:8c:2f: f4:df:a3:40:2a:13:fc:bf:3f:4a:be:3d:c4:f0:62:c0:62:e3: 72:65:e9:f3:9d:68:b6:a3:17:82:78:44:78:c6:36:f5:f6:e3: cc:a0:09:9a:3e:5e:3c:fb:f7:a1:01:27:f2:d0:87:74:55:43: 1e:c5:c4:d4:95:66:4d:e6:16:13:cf:47:32:f8:6f:87:34:90: 28:bc:96:71:d9:93:a5:24:4e:b7:d3:ea:64:fb:49:cb:bf:52: 19:27:91:cb:c0:15:dd:84:7e:8f:04:8c:4d:18:ac:19:69:d7: ba:cf:fc:29:a9:ff:9f:98:f8:1d:f7:4e:e0:ed:f1:e3:5c:bb: 02:1b:11:49:2c:53:c5:ae:fe:0a:ac:61:4d:eb:55:0d:ba:95: cf:4e:42:2b:ce:9a:b9:4e:28:20:3e:0d:92:2b:6f:9d:bf:6a: 17:d1:6c:b7:69:f3:98:99:56:45:3c:ff:76:dd:e4:21:fd:49: 2f:19:70:2c:03:1d:5c:61:64:cc:c9:50:a1:ae:24:12:ce:3a: ad:c4:56:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRg0c9MdIzmUlpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NjE2NDA5ZTMtNGVlZi00Zjk0LTk5NjAtZmM4NGQ5N2U1MzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11Sid1up4RTcniJmYLN3XkAsgiPj5TRsIb6f rk969FCFAbdm0+qM5AnCBbNMNsGiI2KWvE3QE31KToBD1p+1Ihv7k4xbId/Y6GuV yt6sSmIFA//V8ggb0U5fihtkmFRIGaSbfnlJbMv2Pu1WDTool2bxjdPCFNgLO/PY 32nwmDmYP0ShVeB8bYWI/TkcOzRsaFCWwD5DNmPckA0/vYSFMS02hYbqZzvY+ITF pT3+zU43BBVmNaiCoqoMGtedz6i4X9cM7KTM/V94iQ1hX5N73vRuI+djUjIVZBaf Sm5m1sAUjQcQh8278Y+FBpss7fJEPq5s01Mx+cGhjj52ni4OKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB7m/4es24WNqESAuF6zC/34c4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NiNWM4NjUtNTZiYy0z NmJiLTk3ODEtNjMyOGFjNjkzNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd5CiXAK1GlQCbq9YRi8vCYldQSMISOvbUm5HBz4gKPnYzz3SAeSq+V UM1INLTsqblJHGKML/Tfo0AqE/y/P0q+PcTwYsBi43Jl6fOdaLajF4J4RHjGNvX2 48ygCZo+Xjz796EBJ/LQh3RVQx7FxNSVZk3mFhPPRzL4b4c0kCi8lnHZk6UkTrfT 6mT7Scu/UhknkcvAFd2Efo8EjE0YrBlp17rP/Cmp/5+Y+B33TuDt8eNcuwIbEUks U8Wu/gqsYU3rVQ26lc9OQivOmrlOKCA+DZIrb52/ahfRbLdp85iZVkU8/3bd5CH9 SS8ZcCwDHVxhZMzJUKGuJBLOOq3EVp4= -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:52 2025 by rpki-client