$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa File: 30218baa-fe66-3d19-aa8d-27ecd60001e3.roa (raw, json) Hash identifier: mfFfNRdM9rerSQPMQ5aGuAoOQQOefF+/pwra4LhJtZg= Subject key identifier: D2:3D:5C:1C:2C:41:FF:1F:33:F3:46:44:88:90:80:38:5E:52:56:4A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673E875D5040E9271E3780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3e:87:5d:50:40:e9:27:1e:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=0259e2d3-f3d1-4173-8fe0-5c6167bbeeea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:2d:f7:64:b7:45:b6:53:d3:3f:98:93:d7: 1f:68:0b:a5:d4:bb:78:6a:b1:13:57:56:1b:ed:c8: d8:71:5a:72:e4:55:cd:ab:d5:1f:42:88:56:0b:cb: 50:fd:4b:b0:40:4e:9b:aa:76:71:c1:96:1b:1a:19: d4:57:06:4a:21:4e:93:dc:b8:65:9b:18:60:c3:89: 35:dc:e5:2e:64:08:4d:70:30:1f:60:df:43:34:76: 7b:01:b1:29:6f:4d:0d:a0:9e:5e:7b:cc:81:4e:84: 18:a1:4c:df:e2:55:0b:8e:90:7d:85:81:11:a8:0a: 6a:da:27:9f:d9:07:b5:38:ce:8c:0f:80:b8:1e:3d: 68:4a:35:3f:19:84:60:0b:47:af:ba:eb:2a:f2:ea: 69:8c:fc:31:7d:25:1a:5a:0b:ea:ac:ee:9b:32:87: a6:29:22:e4:b4:07:25:ba:a3:3b:0a:1a:91:1a:8c: a8:30:58:d2:aa:e4:6a:1e:84:43:94:b8:ab:70:67: f2:35:19:c9:3d:2c:58:f1:ad:fc:a5:9b:f3:70:4e: 8d:f0:1a:c3:17:dd:ae:bb:57:ae:5a:cf:a7:85:98: b1:3b:99:83:23:07:f3:f0:33:75:16:94:28:fe:a2: 26:74:5c:82:a8:38:e8:ef:28:2e:19:42:a1:b8:91: cb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3D:5C:1C:2C:41:FF:1F:33:F3:46:44:88:90:80:38:5E:52:56:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30218baa-fe66-3d19-aa8d-27ecd60001e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a9:17:a8:d7:f1:d5:49:13:2e:55:ca:0b:d1:a3:38:42:b4: f2:fa:a4:66:86:b1:58:bb:2f:9f:de:81:1c:49:10:c2:37:97: aa:4b:48:ec:e4:04:fb:f1:ea:4c:1b:0a:ff:9b:7a:25:be:aa: 94:b2:f3:f5:b1:5b:d2:3a:2d:35:50:cc:06:74:30:76:57:b4: e9:6e:b2:95:95:40:d2:08:44:3d:40:fb:d7:b3:ff:4d:f3:f5: dc:60:d0:72:42:4d:e4:98:46:95:20:d7:77:db:dd:2a:bb:e2: b7:26:e9:ad:15:54:49:81:4d:d2:b2:0d:41:40:a6:bd:27:5b: 32:83:f7:7d:b5:5a:4b:4a:d7:aa:45:4d:32:b9:d2:c9:78:31: fa:4a:9f:2f:92:6e:08:b4:66:ff:52:31:e6:78:1b:b1:3a:17: 3c:f9:50:ed:8d:98:52:32:fe:fb:7e:1d:01:77:6d:fa:c4:8e: 1b:d3:b4:1f:2f:7c:8b:9e:6c:f7:52:87:69:e2:ea:9e:bc:f3: 85:41:1f:98:12:21:c0:d4:51:cb:6c:16:54:f6:a1:f7:e8:01: 82:dc:a3:84:ac:f1:53:93:25:da:a3:40:76:7f:31:44:c8:fe: ad:3f:b8:c2:89:4d:fd:82:78:f8:88:b2:1e:4f:8e:e3:19:21: 3f:f3:34:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZz6HXVBA6SceN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MDI1OWUyZDMtZjNkMS00MTczLThmZTAtNWM2MTY3YmJlZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5At92S3RbZT0z+Yk9cfaAul1Lt4arETV1Yb 7cjYcVpy5FXNq9UfQohWC8tQ/UuwQE6bqnZxwZYbGhnUVwZKIU6T3Lhlmxhgw4k1 3OUuZAhNcDAfYN9DNHZ7AbEpb00NoJ5ee8yBToQYoUzf4lULjpB9hYERqApq2ief 2Qe1OM6MD4C4Hj1oSjU/GYRgC0evuusq8uppjPwxfSUaWgvqrO6bMoemKSLktAcl uqM7ChqRGoyoMFjSquRqHoRDlLircGfyNRnJPSxY8a38pZvzcE6N8BrDF92uu1eu Ws+nhZixO5mDIwfz8DN1FpQo/qImdFyCqDjo7yguGUKhuJHLOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI9XBwsQf8fM/NGRIiQgDheUlZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzAyMThiYWEtZmU2Ni0z ZDE5LWFhOGQtMjdlY2Q2MDAwMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKpF6jX8dVJEy5VygvRozhCtPL6pGaGsVi7L5/egRxJEMI3l6pLSOzk BPvx6kwbCv+beiW+qpSy8/WxW9I6LTVQzAZ0MHZXtOluspWVQNIIRD1A+9ez/03z 9dxg0HJCTeSYRpUg13fb3Sq74rcm6a0VVEmBTdKyDUFApr0nWzKD9321WktK16pF TTK50sl4MfpKny+Sbgi0Zv9SMeZ4G7E6Fzz5UO2NmFIy/vt+HQF3bfrEjhvTtB8v fIuebPdSh2ni6p6884VBH5gSIcDUUctsFlT2offoAYLco4Ss8VOTJdqjQHZ/MUTI /q0/uMKJTf2CePiIsh5PjuMZIT/zNBA= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:41 2025 by rpki-client