$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa File: 1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa (raw, json) Hash identifier: HaVlEwh+/VLuzCvjU/VZYF0So5H0JzFqeRqIMhNbJtg= Subject key identifier: 8B:3F:70:0F:E4:7A:F1:6A:1A:4E:0F:40:32:9E:60:04:F2:5A:8B:AE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62020868BF06A1FDB86FCB40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:08:68:bf:06:a1:fd:b8:6f:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d913589a-c4cc-4f70-b2e6-3b14f6146f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:6a:66:78:23:13:b4:80:bf:4e:1e:a6:95: f8:a1:6b:05:24:d2:17:9a:b9:46:9b:91:75:a6:21: 67:3e:d4:2d:0c:9e:67:7f:b7:9d:5e:46:f9:2c:30: 3a:13:a2:89:4c:b4:3e:63:c4:0d:20:79:72:72:5e: a2:e3:da:84:89:7b:47:36:4a:8d:b6:64:32:17:fa: e1:9e:98:ba:db:32:87:28:cb:dc:a0:11:e3:10:41: 85:a3:81:c1:40:b5:ec:d1:55:d5:d7:7f:52:e1:13: 0a:f9:23:26:b2:a5:2d:a4:0b:82:2a:63:03:ba:ae: 41:2b:2e:59:11:75:36:93:11:2d:e8:7f:30:b4:66: 4f:aa:cc:54:3e:47:f4:bf:bd:54:21:4a:0f:a6:82: 20:b2:58:06:01:32:b4:89:a2:48:6e:23:13:04:d0: 7a:b7:4e:f1:f9:a1:f0:f4:ca:21:bf:7e:7f:02:df: 63:53:66:f0:d0:31:e9:be:e7:73:81:ff:1f:7c:19: 1b:09:57:6f:3d:62:5c:50:3e:ec:c8:cb:f4:38:0c: 6b:8f:d3:6c:9c:44:b3:29:20:46:06:07:93:5e:ee: c4:6f:f7:65:4d:88:61:52:b1:69:62:e0:d5:a9:fe: 9a:35:85:ee:36:32:73:36:f9:02:a0:41:6b:4b:07: 98:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3F:70:0F:E4:7A:F1:6A:1A:4E:0F:40:32:9E:60:04:F2:5A:8B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:49:da:f0:b0:78:31:13:7e:5a:ee:7e:2c:80:2e:9b:23:5b: 9e:92:7e:ee:76:6a:dc:92:1e:a9:df:08:36:1d:1c:14:4d:ed: 1a:1b:b7:8a:2a:81:58:6e:e0:7f:a9:92:f1:4d:f3:b6:5f:4f: c9:1a:20:75:be:5f:b0:d9:28:3a:e5:9c:ca:cf:91:d6:3f:ac: e4:9a:af:13:2f:ab:1d:db:d1:d1:f1:17:38:2a:1b:5e:dc:36: 0c:e5:67:d0:e4:61:09:a9:69:f7:ff:6e:1d:46:8a:04:6e:7d: 68:a6:c9:e3:5b:2e:42:4e:16:69:5a:57:f4:a5:c8:c6:5f:9d: 7e:17:5d:1a:89:e4:b9:6a:56:bf:53:ee:f2:4f:5b:60:ab:ac: 0a:d0:d3:80:22:bf:3f:a4:0d:33:80:05:0b:9c:f9:2e:d5:22: 38:8b:c8:ad:8f:fa:2b:db:8b:63:55:ac:24:0d:da:b8:3b:6c: d9:f3:37:e9:f7:c6:ab:0a:28:42:cc:ad:ce:42:58:62:df:f0: 0a:a3:cf:45:ff:1d:f0:0b:46:bc:44:78:77:26:16:0b:cc:b0: d9:a5:ca:bf:a5:4b:8f:6e:e8:a3:24:8a:9e:12:6c:62:ac:f4: 79:3f:fe:51:d9:85:e9:ef:93:33:fd:56:f9:8e:a3:94:c1:e1: c9:bf:27:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAghovwah/bhvy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDkxMzU4OWEtYzRjYy00ZjcwLWIyZTYtM2IxNGY2MTQ2ZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu9qZngjE7SAv04eppX4oWsFJNIXmrlGm5F1 piFnPtQtDJ5nf7edXkb5LDA6E6KJTLQ+Y8QNIHlycl6i49qEiXtHNkqNtmQyF/rh npi62zKHKMvcoBHjEEGFo4HBQLXs0VXV139S4RMK+SMmsqUtpAuCKmMDuq5BKy5Z EXU2kxEt6H8wtGZPqsxUPkf0v71UIUoPpoIgslgGATK0iaJIbiMTBNB6t07x+aHw 9Mohv35/At9jU2bw0DHpvudzgf8ffBkbCVdvPWJcUD7syMv0OAxrj9NsnESzKSBG BgeTXu7Eb/dlTYhhUrFpYuDVqf6aNYXuNjJzNvkCoEFrSweYOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs/cA/kevFqGk4PQDKeYATyWouuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWFiMWU4OGEtMGYxNC0z ZWNiLTgwNmUtNjA4NGRlNmJhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5J2vCweDETflrufiyALpsjW56Sfu52atySHqnfCDYdHBRN7Robt4oq gVhu4H+pkvFN87ZfT8kaIHW+X7DZKDrlnMrPkdY/rOSarxMvqx3b0dHxFzgqG17c NgzlZ9DkYQmpaff/bh1GigRufWimyeNbLkJOFmlaV/SlyMZfnX4XXRqJ5LlqVr9T 7vJPW2CrrArQ04Aivz+kDTOABQuc+S7VIjiLyK2P+ivbi2NVrCQN2rg7bNnzN+n3 xqsKKELMrc5CWGLf8Aqjz0X/HfALRrxEeHcmFgvMsNmlyr+lS49u6KMkip4SbGKs 9Hk//lHZhenvkzP9VvmOo5TB4cm/J+I= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:18 2025 by rpki-client