$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/18f5c9dd-745e-3941-870e-7eac0b6e0574.roa File: 18f5c9dd-745e-3941-870e-7eac0b6e0574.roa (raw, json) Hash identifier: hkeqKlhzFrtNWicYmbgEZlPW3nYTj+FSOsEmwaaBKv4= Subject key identifier: AB:1D:20:CD:6E:7E:F7:89:9C:2F:22:55:DF:E6:D8:83:09:BE:A8:5F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674A747A8E5B42D9133B00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/18f5c9dd-745e-3941-870e-7eac0b6e0574.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4a:74:7a:8e:5b:42:d9:13:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=3f38f3fa-aea3-4e94-993f-b7c8ca4580eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:ce:e3:1b:f8:cd:9d:79:5d:cf:92:3b:6b: 77:24:d0:da:5f:66:ef:bb:ca:61:40:b2:cd:45:c1: 62:38:29:f5:ae:cc:e5:d6:97:82:81:b3:b0:4d:c3: 3b:b4:a8:98:c9:07:00:dd:60:a9:44:73:0d:dc:6c: 47:31:cf:d3:3b:b1:8e:df:d2:60:23:d0:3a:22:b4: 50:f9:d1:66:cd:c9:32:d2:50:0a:46:08:35:6f:07: 86:eb:ca:f3:d7:03:1e:e5:7b:43:60:90:c5:bc:13: 09:43:ad:fd:38:57:b8:cf:55:79:63:f2:7f:c3:54: ab:9b:3a:12:4f:76:d3:32:9d:53:73:70:f7:98:0e: 46:68:36:39:80:bc:fb:f4:db:f3:1f:56:7c:91:ee: 6a:8b:51:da:b0:e9:d3:11:64:32:36:dd:f3:90:c0: 8c:fa:31:c0:96:a3:53:03:f4:8a:78:11:72:2d:39: d8:46:e0:59:17:93:81:2d:a4:86:3a:55:97:42:a5: 27:60:a0:27:e9:a0:0b:51:ea:9d:2f:b0:c7:b5:a1: e4:95:78:76:10:e6:3c:ce:8f:a3:c8:3c:23:50:34: 79:86:8f:40:eb:78:b3:e9:10:98:2e:67:ce:2b:d3: 72:b6:e6:60:a2:66:52:44:74:94:5f:e4:67:d8:30: ee:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1D:20:CD:6E:7E:F7:89:9C:2F:22:55:DF:E6:D8:83:09:BE:A8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/18f5c9dd-745e-3941-870e-7eac0b6e0574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f9:a2:e1:89:8b:cb:88:52:c8:2c:10:17:b0:2c:90:48:67: 1d:ea:91:2e:73:ab:5c:e4:61:d9:a9:52:1d:e7:d7:e6:d0:2e: 06:1c:b6:be:c4:76:11:32:37:5d:92:1a:04:86:1a:fd:58:d1: b9:f0:57:7c:f1:87:c1:e5:78:8f:b7:d7:ce:c2:cb:a7:34:61: 46:cf:a9:0b:23:0b:a3:f7:3f:50:c2:56:01:db:99:31:c7:a0: 2a:76:e2:76:bd:92:d2:ab:13:b2:6d:e3:ed:53:8d:d3:5d:87: a8:56:44:de:fe:4b:b6:59:a8:48:88:49:e3:91:55:20:a1:e4: 4d:6b:8b:3e:88:71:1f:b4:2b:1b:5b:5b:ea:ce:89:4b:df:98: 66:a4:0d:2b:64:a8:32:ad:08:f7:d1:2e:d7:35:27:c6:9d:f1: 0b:17:28:51:2d:ae:7e:1d:42:a6:f3:31:17:67:6c:34:5e:f3: b8:71:e5:1d:90:44:85:0e:64:e9:d8:65:93:58:32:ae:24:40: 46:73:0d:ee:5d:4e:3f:63:08:48:1b:d5:60:5e:16:68:9d:ef: 02:90:d4:c7:85:7b:e9:bc:4c:cc:6e:22:92:de:11:86:11:f2: 07:e0:39:2a:94:e5:1a:42:b5:7c:e2:bf:76:b1:20:36:a5:5f: 3c:21:67:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0p0eo5bQtkTOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk M2YzOGYzZmEtYWVhMy00ZTk0LTk5M2YtYjdjOGNhNDU4MGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6LO4xv4zZ15Xc+SO2t3JNDaX2bvu8phQLLN RcFiOCn1rszl1peCgbOwTcM7tKiYyQcA3WCpRHMN3GxHMc/TO7GO39JgI9A6IrRQ +dFmzcky0lAKRgg1bweG68rz1wMe5XtDYJDFvBMJQ639OFe4z1V5Y/J/w1SrmzoS T3bTMp1Tc3D3mA5GaDY5gLz79NvzH1Z8ke5qi1HasOnTEWQyNt3zkMCM+jHAlqNT A/SKeBFyLTnYRuBZF5OBLaSGOlWXQqUnYKAn6aALUeqdL7DHtaHklXh2EOY8zo+j yDwjUDR5ho9A63iz6RCYLmfOK9NytuZgomZSRHSUX+Rn2DDu8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsdIM1ufveJnC8iVd/m2IMJvqhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMThmNWM5ZGQtNzQ1ZS0z OTQxLTg3MGUtN2VhYzBiNmUwNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/5ouGJi8uIUsgsEBewLJBIZx3qkS5zq1zkYdmpUh3n1+bQLgYctr7E dhEyN12SGgSGGv1Y0bnwV3zxh8HleI+3187Cy6c0YUbPqQsjC6P3P1DCVgHbmTHH oCp24na9ktKrE7Jt4+1TjdNdh6hWRN7+S7ZZqEiISeORVSCh5E1riz6IcR+0Kxtb W+rOiUvfmGakDStkqDKtCPfRLtc1J8ad8QsXKFEtrn4dQqbzMRdnbDRe87hx5R2Q RIUOZOnYZZNYMq4kQEZzDe5dTj9jCEgb1WBeFmid7wKQ1MeFe+m8TMxuIpLeEYYR 8gfgOSqU5RpCtXziv3axIDalXzwhZ/Q= -----END CERTIFICATE-----Generated at Fri Oct 10 23:58:36 2025 by rpki-client