$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa File: 833cc317-acc3-3c41-aa3a-e9ecad388252.roa (raw, json) Hash identifier: aRQoht7+ehBVIAHqQiyacRSpZPFkiiZQl/hTbEWzv/A= Subject key identifier: 42:B5:81:4A:18:03:3E:67:70:F4:F0:4C:FF:28:D7:98:0C:28:A0:89 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814616A019449A8BA07A9600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:16:a0:19:44:9a:8b:a0:7a:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=28c54d0e-fe85-4446-83dc-027a975289a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:67:39:79:21:07:2a:0b:71:aa:8f:d0:19: 24:20:3b:45:86:ae:34:20:de:2b:26:54:cd:61:1d: fe:b8:2f:23:95:60:bb:32:b7:c6:5d:86:c9:0c:f8: b6:b1:8b:6c:88:b7:2e:27:04:b4:74:cc:f4:4a:88: 77:47:33:55:aa:1b:d3:85:bb:22:0f:4d:2e:bf:9a: c8:54:55:03:1f:dd:5c:a1:b4:f4:27:63:87:92:3b: a3:45:6e:be:e7:38:33:35:7f:2e:f4:79:e8:5c:06: 56:a7:20:c2:4f:f5:ed:af:b2:fc:43:38:1e:3c:6d: fd:45:ec:c6:1d:33:d2:a1:8f:ae:32:59:73:3a:04: 2e:95:c3:82:27:2c:b4:1b:11:23:4b:2c:d4:ca:54: b9:aa:f5:4a:b2:fa:60:fb:76:93:de:1b:06:21:5d: 03:b8:e8:ea:2e:21:08:ae:6c:d8:a4:a6:0c:10:ba: e2:0b:19:a4:70:0a:ab:c4:ab:6b:76:83:1a:a5:32: 5c:45:db:34:b3:66:c1:af:e4:f6:00:63:c4:9d:a0: 87:76:e9:59:3a:70:7c:cc:54:bd:e4:40:a5:ef:55: be:ec:07:cc:51:47:28:e5:ca:81:85:62:d4:e6:90: 5c:9f:0d:ca:b6:b9:24:2d:cb:83:a6:6d:c6:93:74: eb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B5:81:4A:18:03:3E:67:70:F4:F0:4C:FF:28:D7:98:0C:28:A0:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:01:c7:ca:04:0c:35:92:fb:f2:dd:17:91:c6:8e:d6:f8:fe: ea:bf:b9:6e:7a:bf:a8:dc:67:bc:08:ef:7d:af:b4:b9:fd:09: 8a:9d:c0:44:e7:e2:01:26:50:c6:9a:22:11:48:1e:34:65:7d: 75:41:98:5f:68:33:42:71:b5:7a:97:c5:8d:b5:b9:a2:cf:11: 7b:c3:08:cf:9b:4c:ee:4f:51:de:a6:38:2b:0e:55:fd:a8:f5: e1:f7:c5:a3:ce:04:58:bf:12:ce:64:2e:57:4b:16:13:98:7a: 9d:d1:39:83:f9:9b:1d:85:10:f7:38:bc:97:4a:2f:19:59:9f: 5a:da:84:e8:cf:a2:fa:73:fc:91:ea:44:a6:eb:25:1d:31:10: 89:50:f4:6b:94:89:04:19:68:af:15:17:5a:45:4f:a7:b1:4c: b8:4f:47:56:32:a6:2e:ed:5f:5e:e4:18:26:14:10:d0:ef:cb: 25:43:d1:a9:8b:51:d6:37:59:ad:87:89:55:ee:11:94:2c:f5: 84:fc:51:f2:68:92:5e:9a:e3:61:9a:af:d6:5d:94:70:68:ff: 5c:d1:c7:94:19:d6:1f:c4:6f:1b:e2:d3:12:5e:b8:da:61:f3: fe:ba:de:55:66:51:18:de:d2:6f:6d:86:72:2e:f1:5e:1b:17: 86:44:36:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhagGUSai6B6lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MjhjNTRkMGUtZmU4NS00NDQ2LTgzZGMtMDI3YTk3NTI4OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhtnOXkhByoLcaqP0BkkIDtFhq40IN4rJlTN YR3+uC8jlWC7MrfGXYbJDPi2sYtsiLcuJwS0dMz0Soh3RzNVqhvThbsiD00uv5rI VFUDH91cobT0J2OHkjujRW6+5zgzNX8u9HnoXAZWpyDCT/Xtr7L8QzgePG39RezG HTPSoY+uMllzOgQulcOCJyy0GxEjSyzUylS5qvVKsvpg+3aT3hsGIV0DuOjqLiEI rmzYpKYMELriCxmkcAqrxKtrdoMapTJcRds0s2bBr+T2AGPEnaCHdulZOnB8zFS9 5ECl71W+7AfMUUco5cqBhWLU5pBcnw3KtrkkLcuDpm3Gk3TrzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK1gUoYAz5ncPTwTP8o15gMKKCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODMzY2MzMTctYWNjMy0z YzQxLWFhM2EtZTllY2FkMzg4MjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMBx8oEDDWS+/LdF5HGjtb4/uq/uW56v6jcZ7wI732vtLn9CYqdwETn 4gEmUMaaIhFIHjRlfXVBmF9oM0JxtXqXxY21uaLPEXvDCM+bTO5PUd6mOCsOVf2o 9eH3xaPOBFi/Es5kLldLFhOYep3ROYP5mx2FEPc4vJdKLxlZn1rahOjPovpz/JHq RKbrJR0xEIlQ9GuUiQQZaK8VF1pFT6exTLhPR1Yypi7tX17kGCYUENDvyyVD0amL UdY3Wa2HiVXuEZQs9YT8UfJokl6a42Gar9ZdlHBo/1zRx5QZ1h/Ebxvi0xJeuNph 8/663lVmURje0m9thnIu8V4bF4ZENpg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:39 2025 by rpki-client