$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0c4b352f-1c85-3f47-8fbf-1108d7d8294d.roa File: 0c4b352f-1c85-3f47-8fbf-1108d7d8294d.roa (raw, json) Hash identifier: jGDCPugCzQ5ZREE0zbDKOF85oCJiUL/f9RO4Btma1eg= Subject key identifier: 01:8A:6E:B0:05:41:06:5A:B8:D5:28:2C:37:38:C5:21:74:78:A5:C4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620204823698A912C6ECFF00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0c4b352f-1c85-3f47-8fbf-1108d7d8294d.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:04:82:36:98:a9:12:c6:ec:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0469d680-5cfc-4699-8694-92e151aba2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:a4:24:c5:3e:6c:d6:50:18:6b:fc:cc:12: 9a:8c:b5:3c:94:4d:55:a2:40:63:53:26:95:b7:ae: 44:f6:99:25:ab:5b:9f:ee:3d:27:6b:54:3a:8c:53: 92:c6:69:44:83:5f:15:7c:d7:c9:c7:2a:a4:5d:d5: 13:80:00:31:65:21:9e:d3:bf:06:94:f1:4f:34:a8: 74:bb:0b:e9:53:75:d6:49:ae:63:af:7f:33:2c:71: 80:a5:8f:bf:23:7f:e8:20:ca:8e:a3:f4:ad:83:12: e2:47:8c:b3:6b:bb:bd:5c:b4:9c:61:7a:00:0e:3c: 44:19:59:44:d5:ad:ed:81:a8:da:eb:5c:23:53:cc: a2:13:26:ae:7b:ac:1b:ee:29:92:72:22:04:7e:93: 38:a7:56:fe:82:95:8f:e8:01:48:70:ea:82:0a:6d: 1d:4b:27:d1:67:d8:ae:02:22:5d:ae:ab:e4:87:f5: 50:17:b9:71:94:1e:d8:1b:d6:b8:a5:1e:c0:db:94: 20:3e:33:18:b9:10:29:29:89:6b:39:17:99:d5:e6: fa:50:82:9b:86:68:c5:80:5f:d9:ab:c7:0d:3b:de: 3c:c8:eb:e3:21:bd:ad:69:13:0b:28:eb:b7:6e:78: ef:13:5a:05:a6:fe:fc:ec:96:e2:0a:13:d6:6e:ca: 2a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8A:6E:B0:05:41:06:5A:B8:D5:28:2C:37:38:C5:21:74:78:A5:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0c4b352f-1c85-3f47-8fbf-1108d7d8294d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:84:87:fb:81:58:e6:44:c5:27:57:7e:6d:91:89:98:c2:b1: b4:7e:b2:11:38:f0:d9:78:76:94:43:7e:45:41:c5:b0:8f:cb: 5b:08:5e:23:31:5c:2a:0f:d3:b5:b5:77:20:00:58:51:98:a6: 96:97:0e:03:04:28:4c:3e:e9:b2:2f:81:53:c7:d1:82:f6:47: 33:e9:b4:5e:74:03:f7:ea:4e:9f:dd:40:d8:f0:80:c1:b3:cb: 83:5e:dd:7a:8d:27:38:2b:fc:35:ae:c1:dd:da:f0:9f:c9:b4: 30:e9:ce:d8:01:45:24:4e:2c:2b:5b:d3:a0:6d:42:8e:ad:74: 87:9b:b6:17:89:20:f5:7b:cb:4e:bc:17:78:e0:68:2b:52:37: 95:e8:f5:68:5d:85:5e:9e:1e:94:61:bc:0b:2d:dc:13:c0:e8: 03:b1:9d:2f:a8:f4:e1:3b:25:a1:e1:87:ad:5d:73:5c:6f:97: c2:92:81:54:fc:96:86:f2:70:a6:da:2d:b7:a5:9c:59:aa:7b: 34:fc:ef:74:f4:dd:e1:b9:b5:b8:a9:de:97:3a:a3:34:32:2e: 66:8a:a3:07:d1:cc:e6:ee:31:c2:7b:2d:8e:b4:5b:f4:bb:e3: f8:33:67:c2:f2:44:eb:52:af:4e:c0:d0:4f:7f:9d:cc:bf:30: 33:a2:bf:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgSCNpipEsbs/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDQ2OWQ2ODAtNWNmYy00Njk5LTg2OTQtOTJlMTUxYWJhMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE6kJMU+bNZQGGv8zBKajLU8lE1VokBjUyaV t65E9pklq1uf7j0na1Q6jFOSxmlEg18VfNfJxyqkXdUTgAAxZSGe078GlPFPNKh0 uwvpU3XWSa5jr38zLHGApY+/I3/oIMqOo/StgxLiR4yza7u9XLScYXoADjxEGVlE 1a3tgaja61wjU8yiEyaue6wb7imSciIEfpM4p1b+gpWP6AFIcOqCCm0dSyfRZ9iu AiJdrqvkh/VQF7lxlB7YG9a4pR7A25QgPjMYuRApKYlrOReZ1eb6UIKbhmjFgF/Z q8cNO948yOvjIb2taRMLKOu3bnjvE1oFpv787JbiChPWbsoq1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGKbrAFQQZauNUoLDc4xSF0eKXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGM0YjM1MmYtMWM4NS0z ZjQ3LThmYmYtMTEwOGQ3ZDgyOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6Eh/uBWOZExSdXfm2RiZjCsbR+shE48Nl4dpRDfkVBxbCPy1sIXiMx XCoP07W1dyAAWFGYppaXDgMEKEw+6bIvgVPH0YL2RzPptF50A/fqTp/dQNjwgMGz y4Ne3XqNJzgr/DWuwd3a8J/JtDDpztgBRSROLCtb06BtQo6tdIebtheJIPV7y068 F3jgaCtSN5Xo9WhdhV6eHpRhvAst3BPA6AOxnS+o9OE7JaHhh61dc1xvl8KSgVT8 lobycKbaLbelnFmqezT873T03eG5tbip3pc6ozQyLmaKowfRzObuMcJ7LY60W/S7 4/gzZ8LyROtSr07A0E9/ncy/MDOiv1E= -----END CERTIFICATE-----Generated at Fri Oct 10 22:19:10 2025 by rpki-client