$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa File: 2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa (raw, json) Hash identifier: 3xDzDplA0GOjtWd5e95EYhY0u+gWX8FxhQ4vu4LhMZw= Subject key identifier: CE:48:70:9D:EE:41:0E:E0:67:8C:CB:95:21:9A:F2:2F:7B:0E:B3:EC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202266FBBAC0707C1CB45C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:26:6f:bb:ac:07:07:c1:cb:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d2e3c693-1c75-47a3-9546-0510ca7cdbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:60:85:d2:5d:b3:3a:a9:db:5d:17:ec:ed: 34:64:e1:c7:be:39:0e:40:89:34:f1:4e:47:e7:4e: d4:4b:67:fa:ad:e2:b6:ea:c9:7f:e2:e3:33:f7:d5: bd:87:61:31:3d:b7:f2:53:57:77:96:33:77:86:cd: 5b:78:d0:37:67:e8:9e:2d:57:50:e4:ba:26:f5:c2: da:78:3d:c1:1c:b6:55:dc:54:29:40:a8:14:ae:2d: b3:8a:47:35:fa:b2:75:1b:66:47:0e:d7:b3:a0:4f: 55:e2:70:1d:44:cf:f6:51:37:a3:7b:a6:b5:3e:a5: 4c:f4:ed:8d:34:f2:5f:bd:e5:42:bd:1a:b6:d1:7c: d6:61:ac:44:01:0d:6a:fe:b4:b4:06:44:34:24:9c: 01:0d:33:c3:02:e0:80:d3:09:e0:62:b8:c6:54:c1: 9f:b2:a3:2f:9c:6a:a8:0a:36:8b:9f:2b:77:7b:db: 2a:ec:e7:17:c1:d2:67:3e:67:e0:be:94:72:c5:66: ff:07:66:ba:3e:4f:7c:90:78:13:e2:13:8f:ff:c9: 8b:dd:7a:7e:39:66:74:33:d4:c0:b3:a3:fc:b5:8b: dd:b3:c2:68:6f:3d:8d:b1:bd:bb:45:b4:da:a4:e1: 44:b7:cb:43:52:b2:85:59:e3:5a:a2:d7:ee:e0:84: f7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:48:70:9D:EE:41:0E:E0:67:8C:CB:95:21:9A:F2:2F:7B:0E:B3:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:a0:1d:eb:4f:2c:25:b6:b9:91:7a:81:1d:8e:83:a6:3e:52: 8c:0e:3c:6a:a7:40:d2:d1:75:cc:68:5e:c7:e6:55:03:4b:95: 8e:46:79:78:04:b9:24:cf:f8:8a:f9:67:ef:08:31:69:39:b5: b4:ad:00:ac:e7:ec:32:fa:22:56:c4:d6:6f:d3:c3:7b:14:e7: 1b:2c:fb:b0:8c:a0:05:51:ee:a7:45:55:c7:68:b6:47:a4:17: 20:29:d0:f8:7c:17:d0:aa:e7:1a:db:d6:c1:8d:4e:93:8e:96: db:0a:1a:7d:30:77:15:cf:bf:5a:47:5e:e8:e7:80:f6:34:1d: d1:72:80:1e:bd:a2:27:3c:9a:95:8e:48:d7:02:47:f8:1b:3f: 4f:b6:f5:93:2a:5a:d0:82:64:b9:7e:df:b8:d6:c7:00:93:73: 17:0d:04:4a:3b:a4:ba:f9:35:d7:31:42:43:b1:17:7e:66:ca: d1:94:19:1b:78:f9:71:64:b4:64:ea:96:9d:57:38:65:8e:cd: 85:cf:70:49:f3:14:7b:9d:a3:55:43:90:9a:bf:27:dd:20:99: e5:8d:d6:4c:7b:7c:25:08:39:22:f0:b9:3d:cf:81:1b:56:7c: 7b:cd:5d:94:09:7f:b4:5e:3b:48:71:d8:2f:78:6d:0b:28:48: 5e:3e:50:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiZvu6wHB8HLRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDJlM2M2OTMtMWM3NS00N2EzLTk1NDYtMDUxMGNhN2NkYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD5ghdJdszqp210X7O00ZOHHvjkOQIk08U5H 507US2f6reK26sl/4uMz99W9h2ExPbfyU1d3ljN3hs1beNA3Z+ieLVdQ5Lom9cLa eD3BHLZV3FQpQKgUri2zikc1+rJ1G2ZHDtezoE9V4nAdRM/2UTeje6a1PqVM9O2N NPJfveVCvRq20XzWYaxEAQ1q/rS0BkQ0JJwBDTPDAuCA0wngYrjGVMGfsqMvnGqo CjaLnyt3e9sq7OcXwdJnPmfgvpRyxWb/B2a6Pk98kHgT4hOP/8mL3Xp+OWZ0M9TA s6P8tYvds8Jobz2Nsb27RbTapOFEt8tDUrKFWeNaotfu4IT38wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5IcJ3uQQ7gZ4zLlSGa8i97DrPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmEwNDJjZjMtN2JiNi0z ZGQzLWFmYjYtNDU3N2ExZWQyYTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL6gHetPLCW2uZF6gR2Og6Y+UowOPGqnQNLRdcxoXsfmVQNLlY5GeXgE uSTP+Ir5Z+8IMWk5tbStAKzn7DL6IlbE1m/Tw3sU5xss+7CMoAVR7qdFVcdotkek FyAp0Ph8F9Cq5xrb1sGNTpOOltsKGn0wdxXPv1pHXujngPY0HdFygB69oic8mpWO SNcCR/gbP0+29ZMqWtCCZLl+37jWxwCTcxcNBEo7pLr5NdcxQkOxF35mytGUGRt4 +XFktGTqlp1XOGWOzYXPcEnzFHudo1VDkJq/J90gmeWN1kx7fCUIOSLwuT3PgRtW fHvNXZQJf7ReO0hx2C94bQsoSF4+UMc= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:15 2025 by rpki-client