$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa File: 08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa (raw, json) Hash identifier: ViSxvyzqPpb9gQkBzuKAyeCiBM/F9fqutmA45fkcH08= Subject key identifier: F9:79:52:81:DB:B4:4D:A4:6F:B4:47:BA:1B:B9:4E:9E:28:22:FE:75 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62022B9370ACFA8562F03D80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2b:93:70:ac:fa:85:62:f0:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c9534e67-2080-4604-be6a-dd160813b2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2a:68:a2:b4:1c:a0:3c:d8:d4:52:8c:1a:d3: 8c:54:09:d5:d3:4e:d2:3e:be:fb:48:1f:18:4e:26: e1:b6:e4:1a:da:f0:d4:22:f1:b0:ae:04:e1:ab:3c: e3:85:3a:c5:97:f9:62:8e:11:8f:dd:b8:a9:1a:bd: b1:a4:dd:fc:5b:3f:16:46:59:af:b9:fd:2a:4b:4d: b7:70:3c:dc:fe:6a:de:4f:c6:a1:15:9d:e6:7e:8f: 5c:2f:7f:60:c8:75:b6:61:ca:9e:57:5d:70:32:c6: 0d:98:dd:c5:77:8b:e6:e4:ba:7f:e4:1e:08:84:3a: 02:8e:e6:c5:b0:20:e9:cf:27:8d:5b:a6:70:c0:c9: bb:19:5f:2b:13:c3:67:61:92:89:63:c9:69:f8:ab: 25:ed:47:3c:10:8c:80:f0:bc:3a:de:03:08:fc:3b: e8:ee:49:47:a4:4f:79:0c:ae:e1:1f:95:a5:b8:be: 51:4b:06:48:0a:72:2d:39:48:3b:78:a8:6f:a7:a6: cf:00:fd:c5:51:d4:66:1e:a0:61:d0:ef:27:6a:4f: d5:c4:ef:87:c3:c5:77:53:f0:99:85:da:c7:b9:cc: 2d:69:70:00:34:74:25:f1:39:00:07:90:0c:ce:24: 83:dd:d8:27:01:4c:d9:71:5d:e2:10:51:35:4b:f6: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:79:52:81:DB:B4:4D:A4:6F:B4:47:BA:1B:B9:4E:9E:28:22:FE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:95:11:a8:1d:bd:dc:7d:d6:3b:cf:90:ce:db:da:f4:0b:16: e7:22:40:9d:65:bd:44:0b:57:b4:67:23:80:95:59:10:11:e6: 81:0e:9c:fc:8f:1a:fa:3b:3a:2e:1e:76:c6:b9:fe:1a:a4:c4: ae:c1:ba:34:c9:92:97:28:76:0d:e1:bd:83:37:2c:18:22:60: da:90:47:79:6f:73:36:5c:63:25:1f:77:e5:50:cc:d5:c9:2a: 9c:b8:1a:55:e2:42:18:5b:39:05:ad:e4:43:ad:bd:3b:a5:a2: 0a:0b:21:f2:e5:01:c2:7a:c0:bb:a4:58:6a:cc:66:99:11:05: 12:83:fd:9c:8b:d5:be:92:69:29:95:b0:6e:f7:1a:67:0b:15: 11:75:9b:4e:d9:9e:8e:7e:a4:5e:da:df:6d:56:e9:2a:1c:ea: cd:74:ec:1e:5d:00:f2:23:12:51:af:f9:51:9a:82:72:ca:5f: 88:73:41:e2:af:f8:72:58:71:ac:a0:9a:c3:d7:20:2d:97:00: 04:f3:b4:29:cc:6b:42:41:67:6f:44:b4:4a:26:0a:fa:06:59: da:3f:87:bf:8e:f5:af:53:cc:c8:44:3c:f3:81:a3:17:4f:31: 80:51:9d:85:66:28:79:67:11:3e:1f:9d:78:0b:59:6a:9c:14: 50:b6:aa:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiuTcKz6hWLwPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk Yzk1MzRlNjctMjA4MC00NjA0LWJlNmEtZGQxNjA4MTNiMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCpoorQcoDzY1FKMGtOMVAnV007SPr77SB8Y TibhtuQa2vDUIvGwrgThqzzjhTrFl/lijhGP3bipGr2xpN38Wz8WRlmvuf0qS023 cDzc/mreT8ahFZ3mfo9cL39gyHW2YcqeV11wMsYNmN3Fd4vm5Lp/5B4IhDoCjubF sCDpzyeNW6ZwwMm7GV8rE8NnYZKJY8lp+Ksl7Uc8EIyA8Lw63gMI/Dvo7klHpE95 DK7hH5WluL5RSwZICnItOUg7eKhvp6bPAP3FUdRmHqBh0O8nak/VxO+Hw8V3U/CZ hdrHucwtaXAANHQl8TkAB5AMziSD3dgnAUzZcV3iEFE1S/ZuMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl5UoHbtE2kb7RHuhu5Tp4oIv51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDhlMzZiYTMtODYyMC0z YjhlLWI2M2EtMzBmZTZhMzdmOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2VEagdvdx91jvPkM7b2vQLFuciQJ1lvUQLV7RnI4CVWRAR5oEOnPyP Gvo7Oi4edsa5/hqkxK7BujTJkpcodg3hvYM3LBgiYNqQR3lvczZcYyUfd+VQzNXJ Kpy4GlXiQhhbOQWt5EOtvTulogoLIfLlAcJ6wLukWGrMZpkRBRKD/ZyL1b6SaSmV sG73GmcLFRF1m07Zno5+pF7a321W6Soc6s107B5dAPIjElGv+VGagnLKX4hzQeKv +HJYcaygmsPXIC2XAATztCnMa0JBZ29EtEomCvoGWdo/h7+O9a9TzMhEPPOBoxdP MYBRnYVmKHlnET4fnXgLWWqcFFC2qgo= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:01 2025 by rpki-client