$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa File: 2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa (raw, json) Hash identifier: Gn6f9gCYK+d8nlU8kHFiDTNEidfXsHnOjSAkEPIez0c= Subject key identifier: B6:1F:C2:A9:C0:45:EB:8F:31:88:C7:BB:02:EA:C0:61:36:FC:94:5C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201DB0925587937738DDF00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:db:09:25:58:79:37:73:8d:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=5cc23fb6-6ad1-4687-a7a1-d34c98bb201a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:41:63:48:d5:cd:d6:51:d0:2c:c1:6f:a0:80: 9d:67:c9:ee:69:1d:63:e3:2c:0c:7b:23:72:bf:cf: a6:1a:fc:78:85:46:52:63:3f:19:54:cb:fc:25:78: c3:11:1f:bc:9b:2b:bf:c8:2e:1b:73:cc:12:02:69: fc:c2:04:b3:a2:2f:d9:85:4c:8a:77:6f:19:d0:6c: 16:e6:ec:18:be:4b:dc:56:9e:6d:4b:ef:be:7a:ec: dd:a3:a8:24:c4:d7:04:33:bf:fb:e5:7a:7b:d0:40: 62:b1:dc:55:14:ff:a4:66:a8:5f:f3:0a:72:77:45: 50:d0:81:7d:9f:e2:4b:c2:5a:ee:2b:00:6c:73:d7: 18:f8:f4:09:86:bd:27:e4:08:03:5c:ab:76:b1:f6: d1:91:01:35:18:77:17:3c:bd:b8:62:c8:77:bb:e2: 21:5d:b7:f4:eb:32:f2:c7:eb:3b:15:a5:c4:71:01: a8:11:76:e0:4e:59:3a:2b:2b:fe:50:0c:cf:43:09: c7:97:d5:a3:fb:9f:16:7f:8b:dd:10:79:05:bd:ca: d4:e2:02:ec:16:35:e0:5d:ef:d6:cd:b1:44:fe:a7: d7:84:17:94:d0:37:b0:f8:14:e0:d2:1b:6c:a4:35: 5c:ca:2c:21:8c:1c:ba:ea:fe:87:d9:c5:77:f9:0f: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1F:C2:A9:C0:45:EB:8F:31:88:C7:BB:02:EA:C0:61:36:FC:94:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:71:f0:8c:36:bc:b8:04:3f:cc:ad:21:2f:10:b6:5e:f7:fd: d5:8d:9a:e5:ac:a1:b4:6b:5c:6e:7b:be:c2:bc:77:e9:fc:18: b2:bf:d5:a7:48:5f:40:f7:fd:ed:1a:1d:4c:89:2b:c7:68:24: 21:9b:6b:50:38:68:68:e1:aa:50:7e:4c:b8:b3:20:bc:b3:1c: 80:bb:e6:84:2b:42:8f:99:6d:1f:53:c5:48:60:30:75:46:86: fa:6d:a9:aa:00:74:45:61:2e:aa:ae:4c:90:80:e5:95:b4:1a: 51:18:37:f1:92:1f:e2:c8:c7:2a:18:ff:f3:c1:09:90:df:b3: ef:35:ca:cd:ff:89:f4:96:b3:05:a4:37:cd:2f:90:16:bb:53: 90:1f:23:f4:eb:9c:26:8a:82:cc:d7:4e:4b:f8:68:86:b5:cc: 61:6c:d0:3e:67:90:ca:47:96:26:e2:27:da:bc:2e:fa:7f:21: 76:5e:cb:2a:d7:52:58:9d:b9:72:c1:ac:be:56:ac:49:a7:bd: ab:92:6f:9a:87:6f:5a:f2:ed:7a:7c:01:20:5d:f3:38:82:3a: 71:78:f8:c9:d8:f8:87:27:25:f4:67:77:5c:fb:57:cb:8c:30: 5a:70:2f:44:c5:3a:d7:39:4d:7d:7c:3f:42:5f:6f:90:16:29: 5f:7c:01:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdsJJVh5N3ON3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NWNjMjNmYjYtNmFkMS00Njg3LWE3YTEtZDM0Yzk4YmIyMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUFjSNXN1lHQLMFvoICdZ8nuaR1j4ywMeyNy v8+mGvx4hUZSYz8ZVMv8JXjDER+8myu/yC4bc8wSAmn8wgSzoi/ZhUyKd28Z0GwW 5uwYvkvcVp5tS+++euzdo6gkxNcEM7/75Xp70EBisdxVFP+kZqhf8wpyd0VQ0IF9 n+JLwlruKwBsc9cY+PQJhr0n5AgDXKt2sfbRkQE1GHcXPL24Ysh3u+IhXbf06zLy x+s7FaXEcQGoEXbgTlk6Kyv+UAzPQwnHl9Wj+58Wf4vdEHkFvcrU4gLsFjXgXe/W zbFE/qfXhBeU0Dew+BTg0htspDVcyiwhjBy66v6H2cV3+Q9eNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYfwqnAReuPMYjHuwLqwGE2/JRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmE4NTY5YjctMmVlNi0z ZjgzLWE1OTQtNjhjNTcxYjBhNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRx8Iw2vLgEP8ytIS8Qtl73/dWNmuWsobRrXG57vsK8d+n8GLK/1adI X0D3/e0aHUyJK8doJCGba1A4aGjhqlB+TLizILyzHIC75oQrQo+ZbR9TxUhgMHVG hvptqaoAdEVhLqquTJCA5ZW0GlEYN/GSH+LIxyoY//PBCZDfs+81ys3/ifSWswWk N80vkBa7U5AfI/TrnCaKgszXTkv4aIa1zGFs0D5nkMpHlibiJ9q8Lvp/IXZeyyrX UliduXLBrL5WrEmnvauSb5qHb1ry7Xp8ASBd8ziCOnF4+MnY+IcnJfRnd1z7V8uM MFpwL0TFOtc5TX18P0Jfb5AWKV98AcY= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:04 2025 by rpki-client