$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa File: 28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa (raw, json) Hash identifier: mfJj4IewFy8JlfhXQEFfg0B2jXfT/n2XQympKzZfhik= Subject key identifier: 1F:A1:3D:4C:5B:F1:A1:75:8C:2F:A5:68:BC:79:58:EC:C0:91:B9:04 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E030999E744488665B10 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e0:30:99:9e:74:44:88:66:5b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0e952461-31c9-4ffd-9b3c-6303f185cffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:26:dd:5e:46:a6:38:6a:b8:e5:db:9d:aa: 1d:e2:ed:13:d5:04:0a:56:7e:04:b1:db:30:61:c7: 85:d9:06:eb:cd:23:2a:61:73:3e:c8:54:31:c2:ae: de:2d:99:15:9b:5b:06:15:8f:ca:be:9f:23:e7:a9: 33:d3:d5:59:40:eb:c0:62:b1:f7:ba:37:36:a4:d0: 57:72:eb:94:ae:d5:d2:17:3f:fb:0a:32:fa:49:6e: 18:94:05:10:9a:fa:7e:af:40:56:07:c9:00:f3:9b: ef:56:e3:43:e6:98:dc:c8:d2:6a:49:c6:a5:75:92: 0a:a9:0a:a8:5f:ae:e1:04:31:bc:ab:a6:2c:59:3a: 57:c3:d5:6c:11:90:bf:b4:b0:76:fa:a7:64:0b:d9: de:f9:94:8c:13:05:a5:fe:e6:d4:2c:28:eb:3c:48: 78:f0:28:1a:35:ea:50:24:37:b6:ef:06:e7:8b:97: 81:0a:f7:07:83:5b:2e:6d:2a:e2:46:d9:a6:f2:1b: 44:13:27:72:4f:78:6f:41:80:38:9c:97:18:71:6f: 46:ef:1f:ca:f5:a0:e7:a7:1b:b9:1a:f0:be:a4:df: 0c:30:3d:9a:fa:de:36:e8:9d:74:d7:cc:73:8e:9e: ac:aa:28:5f:c2:c1:1d:25:d3:69:ad:34:08:32:02: f4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A1:3D:4C:5B:F1:A1:75:8C:2F:A5:68:BC:79:58:EC:C0:91:B9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:f5:53:a6:09:07:5f:61:a4:52:15:68:dc:fe:fc:ec:e1:33: 40:51:d3:d0:f2:20:a9:22:14:9d:f2:bb:5f:ad:e9:e6:89:a1: d5:d1:43:67:a1:4e:8c:6f:86:ed:9e:b3:42:52:3d:8a:b9:90: c8:2e:64:9a:12:e8:7b:cd:e5:e8:02:91:f7:66:de:c7:88:66: 7e:52:e3:e6:43:2e:1b:ca:22:26:36:2e:e7:d3:5e:8b:18:cc: 06:84:7f:d7:5f:44:19:d2:a5:17:c8:b2:d4:79:0c:37:30:c2: f6:9b:72:28:0f:35:67:40:1f:aa:5f:79:12:3d:86:1d:99:12: a2:81:54:62:10:6c:79:f5:04:38:90:a5:5d:d0:cb:bd:b1:96: 56:5e:43:6f:19:9c:4f:50:90:53:5c:0d:d8:41:55:73:12:cc: 96:14:8e:21:37:ed:91:49:48:e1:76:df:73:55:aa:01:02:9b: f8:f5:bf:c1:41:dc:c3:df:f6:61:e6:8a:c3:c3:0d:40:00:2b: e6:d0:0a:b3:e9:c2:f8:57:78:ed:f8:5c:3e:6c:ac:f8:74:fe: e8:02:0a:d0:6d:76:c6:ed:d3:bb:76:7b:77:aa:0e:d2:30:2f: 5d:cf:97:2c:9e:7b:d9:fc:8b:9b:4c:59:a8:38:e6:93:8d:41: 77:84:e8:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeAwmZ50RIhmWxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGU5NTI0NjEtMzFjOS00ZmZkLTliM2MtNjMwM2YxODVjZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1Am3V5GpjhquOXbnaod4u0T1QQKVn4Esdsw YceF2QbrzSMqYXM+yFQxwq7eLZkVm1sGFY/Kvp8j56kz09VZQOvAYrH3ujc2pNBX cuuUrtXSFz/7CjL6SW4YlAUQmvp+r0BWB8kA85vvVuND5pjcyNJqScaldZIKqQqo X67hBDG8q6YsWTpXw9VsEZC/tLB2+qdkC9ne+ZSMEwWl/ubULCjrPEh48CgaNepQ JDe27wbni5eBCvcHg1subSriRtmm8htEEydyT3hvQYA4nJcYcW9G7x/K9aDnpxu5 GvC+pN8MMD2a+t426J1018xzjp6sqihfwsEdJdNprTQIMgL0rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+hPUxb8aF1jC+laLx5WOzAkbkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjhjYjMyMTgtMmFiYi0z YjVmLTgxNzQtOWJiZjdkZGU3YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALP1U6YJB19hpFIVaNz+/OzhM0BR09DyIKkiFJ3yu1+t6eaJodXRQ2eh Toxvhu2es0JSPYq5kMguZJoS6HvN5egCkfdm3seIZn5S4+ZDLhvKIiY2LufTXosY zAaEf9dfRBnSpRfIstR5DDcwwvabcigPNWdAH6pfeRI9hh2ZEqKBVGIQbHn1BDiQ pV3Qy72xllZeQ28ZnE9QkFNcDdhBVXMSzJYUjiE37ZFJSOF233NVqgECm/j1v8FB 3MPf9mHmisPDDUAAK+bQCrPpwvhXeO34XD5srPh0/ugCCtBtdsbt07t2e3eqDtIw L13Plyyee9n8i5tMWag45pONQXeE6Ck= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:26 2025 by rpki-client