$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a455cc3-9abe-3dad-95d6-93b7407f4803.roa File: 1a455cc3-9abe-3dad-95d6-93b7407f4803.roa (raw, json) Hash identifier: L5QTHxiH5p7NfEQLldPxGCyfbPUE9r3/zHnvVnRBcWU= Subject key identifier: E1:97:E7:B8:C8:7D:CF:4F:56:12:40:9E:72:AD:9F:23:80:F6:8F:CB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E4CE6A12D3A3785DDD00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a455cc3-9abe-3dad-95d6-93b7407f4803.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e4:ce:6a:12:d3:a3:78:5d:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=76384c77-1387-4f23-87cb-4f4bc4ca5bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:ab:7c:a8:0c:00:7c:ef:2e:d8:ec:7d:24: c5:31:1e:3d:e1:2d:8c:cd:79:79:ce:06:85:10:52: e2:c4:36:53:05:49:86:79:ef:42:f1:03:f4:83:3a: 47:57:3a:39:ee:ee:18:c3:ed:ac:f5:eb:52:a9:72: 9a:46:36:10:9f:65:f9:05:b3:57:7a:3f:12:33:b1: 5e:46:47:20:33:d4:64:3a:07:21:86:6a:d4:9e:0d: 7d:44:45:41:29:39:36:f3:08:1e:58:fb:28:81:25: 18:d5:53:e9:36:0a:42:2d:50:db:ba:19:20:92:b5: 38:34:1f:96:1d:e9:d8:49:4a:92:b8:61:2a:60:12: 4b:ea:e8:02:70:1b:a2:13:4f:65:bf:9e:a8:8e:51: 44:f8:c0:06:69:f9:44:72:8c:61:cc:77:84:4a:ca: 5b:8a:59:34:9b:bf:88:ee:46:89:9f:ce:75:7e:5a: 8e:20:fc:e2:90:6f:c7:96:0c:cf:a4:ee:71:4b:24: 48:17:be:9f:d7:84:47:93:2a:67:21:0a:45:1a:5a: 35:98:e4:5b:ef:f1:33:6c:c8:bc:d4:ca:14:e6:d8: dd:1b:99:d3:cf:a7:a6:3a:af:4d:f2:b8:1f:e6:54: c4:ea:58:f7:fc:ab:6c:e2:58:03:b1:62:1c:bf:f0: 54:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:97:E7:B8:C8:7D:CF:4F:56:12:40:9E:72:AD:9F:23:80:F6:8F:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1a455cc3-9abe-3dad-95d6-93b7407f4803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:2f:df:ac:23:a9:85:81:e6:60:79:6c:00:d6:a4:88:72:b5: 18:47:b7:cd:6a:78:36:ff:54:97:5a:81:cb:6e:74:3a:b5:5b: 6c:42:07:3b:f9:e6:57:86:8f:12:fc:8a:7d:3a:14:38:00:56: 6c:c5:da:81:0a:c1:5f:db:f8:ad:31:f6:4c:5f:70:dd:73:63: 63:82:47:d6:4d:f5:0d:78:1c:58:6f:08:6d:d1:e4:a8:70:53: 5b:7e:de:82:61:21:0e:55:eb:66:19:37:91:b1:6b:40:2b:70: a8:28:e5:0e:45:11:23:67:f1:55:e8:09:64:c7:f4:4d:60:e5: 92:4b:d4:fe:9d:d2:e7:a7:c1:01:e3:f9:97:64:1c:33:ef:7a: 3d:09:f0:98:94:72:d8:4d:13:36:6e:c4:d7:63:5b:1b:ea:d0: fa:a7:69:5a:7f:cc:77:65:12:e7:75:a9:14:b3:20:b2:6a:d3: 91:05:f3:8a:3f:21:96:6c:82:5d:f0:e0:95:66:38:91:c0:29: f9:91:41:3f:29:ea:1a:0b:b2:ca:96:14:cd:90:27:33:31:66: bc:9d:64:45:9c:d1:8e:35:6e:3d:41:55:2e:e1:0c:de:70:d9: 90:d7:c0:ac:97:63:1f:77:5b:ac:01:d2:92:63:bb:6a:0a:28: a8:c4:3f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeTOahLTo3hd3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzYzODRjNzctMTM4Ny00ZjIzLTg3Y2ItNGY0YmM0Y2E1YmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNCrfKgMAHzvLtjsfSTFMR494S2MzXl5zgaF EFLixDZTBUmGee9C8QP0gzpHVzo57u4Yw+2s9etSqXKaRjYQn2X5BbNXej8SM7Fe RkcgM9RkOgchhmrUng19REVBKTk28wgeWPsogSUY1VPpNgpCLVDbuhkgkrU4NB+W HenYSUqSuGEqYBJL6ugCcBuiE09lv56ojlFE+MAGaflEcoxhzHeESspbilk0m7+I 7kaJn851flqOIPzikG/HlgzPpO5xSyRIF76f14RHkypnIQpFGlo1mORb7/EzbMi8 1MoU5tjdG5nTz6emOq9N8rgf5lTE6lj3/Kts4lgDsWIcv/BU5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGX57jIfc9PVhJAnnKtnyOA9o/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWE0NTVjYzMtOWFiZS0z ZGFkLTk1ZDYtOTNiNzQwN2Y0ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAov36wjqYWB5mB5bADWpIhytRhHt81qeDb/VJdagctudDq1W2xCBzv5 5leGjxL8in06FDgAVmzF2oEKwV/b+K0x9kxfcN1zY2OCR9ZN9Q14HFhvCG3R5Khw U1t+3oJhIQ5V62YZN5Gxa0ArcKgo5Q5FESNn8VXoCWTH9E1g5ZJL1P6d0uenwQHj +ZdkHDPvej0J8JiUcthNEzZuxNdjWxvq0PqnaVp/zHdlEud1qRSzILJq05EF84o/ IZZsgl3w4JVmOJHAKfmRQT8p6hoLssqWFM2QJzMxZrydZEWc0Y41bj1BVS7hDN5w 2ZDXwKyXYx93W6wB0pJju2oKKKjEP2s= -----END CERTIFICATE-----Generated at Fri Oct 10 23:59:47 2025 by rpki-client