$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a4c62c1-3955-3c7f-a20f-7a1f08b8024c.roa File: 3a4c62c1-3955-3c7f-a20f-7a1f08b8024c.roa (raw, json) Hash identifier: 9ZaRyvnd3FBqL+ZBVYtZqR5FWjVQa14jr5deDjPXVQA= Subject key identifier: 5C:95:3C:69:22:87:B6:48:A4:A4:D4:8A:6B:39:D0:41:5F:59:B9:7A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E75040396992C33DA340 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a4c62c1-3955-3c7f-a20f-7a1f08b8024c.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e7:50:40:39:69:92:c3:3d:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=07888de6-75ad-4403-86df-63e93bbc6282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:09:5f:5a:30:56:95:83:c5:dd:dd:80:b5:21: c3:d7:02:f0:6c:fe:ff:b8:16:92:6a:1b:97:bb:44: 8c:c7:fe:2b:7f:15:69:1b:cf:04:72:21:d0:7c:83: 0c:23:69:2c:db:d6:1e:d1:d3:28:d1:0a:ab:e1:82: 64:a9:d7:23:22:56:90:66:1e:88:71:e5:bb:aa:34: 04:76:0e:30:fe:76:f8:f1:7a:ba:69:fc:d8:4c:65: a2:aa:97:2b:12:ea:81:b8:77:6e:f6:e2:14:af:a2: c9:74:18:9c:e6:3c:05:e0:d1:8a:0d:72:43:7f:72: c0:27:bb:28:c2:3d:b5:c0:af:87:62:b8:f2:f7:ed: f7:27:b6:ce:10:38:c2:83:0b:c3:a8:5c:f6:4a:d3: 24:62:33:a4:b9:72:01:52:f6:bc:b2:70:d0:ba:64: 67:dc:a7:07:25:d4:f7:54:57:3c:0b:dd:51:75:df: ff:a9:f9:4b:a7:9b:04:e2:2a:97:04:1f:cf:e4:11: 66:89:2c:7f:a1:1d:7d:df:f8:53:48:e2:2c:81:a7: 48:55:c2:3d:19:3b:2b:63:b1:d3:29:b1:c6:2b:5d: 6d:33:9e:b5:bb:c6:19:4e:3d:4e:15:2f:c0:5e:31: 57:88:eb:d0:d4:f0:43:30:b1:49:24:b8:5c:b3:bd: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:95:3C:69:22:87:B6:48:A4:A4:D4:8A:6B:39:D0:41:5F:59:B9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a4c62c1-3955-3c7f-a20f-7a1f08b8024c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:2d:86:ec:33:f3:10:a8:f2:7b:53:fa:78:60:27:a2:47:a2: e0:5f:32:dd:13:26:9c:5e:50:b7:08:86:19:25:09:73:8e:f4: a0:d6:99:02:0b:e9:94:25:b6:e0:48:df:7b:d9:86:36:ce:9d: 76:07:b6:c7:7e:98:20:43:33:1b:88:6f:35:6a:6d:45:84:76: 3c:e3:c7:04:51:5c:65:86:02:70:a2:bf:41:ad:39:97:df:67: 0b:ef:dd:93:6e:10:f3:5d:09:e2:2a:34:76:54:88:64:fe:7e: 5c:32:55:f5:00:63:32:5d:d6:ef:6a:6e:1d:32:bd:3a:89:60: 41:c9:55:08:3b:c3:99:b8:ac:f0:b4:3d:06:4b:fe:4e:1b:8f: 22:12:0e:b2:90:7c:73:7c:0c:f9:9b:5c:e0:c6:8c:cd:91:5f: 02:b0:23:a4:93:76:c8:45:df:ee:e6:e4:0a:ae:6d:85:41:25: 08:71:a4:e3:45:1a:05:be:b3:f2:e1:9f:dc:77:83:84:29:cc: 90:6b:de:72:51:17:f2:9b:4c:76:a0:d9:70:8c:ed:8c:56:c5: 8c:53:37:d1:b3:1b:96:75:8e:85:f6:70:d5:c8:aa:f8:a6:4a: 97:ae:3c:94:f1:67:ed:dc:43:f6:a4:a0:4b:ce:22:06:7e:22: 3b:b4:88:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAedQQDlpksM9o0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDc4ODhkZTYtNzVhZC00NDAzLTg2ZGYtNjNlOTNiYmM2MjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQlfWjBWlYPF3d2AtSHD1wLwbP7/uBaSahuX u0SMx/4rfxVpG88EciHQfIMMI2ks29Ye0dMo0Qqr4YJkqdcjIlaQZh6IceW7qjQE dg4w/nb48Xq6afzYTGWiqpcrEuqBuHdu9uIUr6LJdBic5jwF4NGKDXJDf3LAJ7so wj21wK+HYrjy9+33J7bOEDjCgwvDqFz2StMkYjOkuXIBUva8snDQumRn3KcHJdT3 VFc8C91Rdd//qflLp5sE4iqXBB/P5BFmiSx/oR193/hTSOIsgadIVcI9GTsrY7HT KbHGK11tM561u8YZTj1OFS/AXjFXiOvQ1PBDMLFJJLhcs70fNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyVPGkih7ZIpKTUims50EFfWbl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2E0YzYyYzEtMzk1NS0z YzdmLWEyMGYtN2ExZjA4YjgwMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMthuwz8xCo8ntT+nhgJ6JHouBfMt0TJpxeULcIhhklCXOO9KDWmQIL 6ZQltuBI33vZhjbOnXYHtsd+mCBDMxuIbzVqbUWEdjzjxwRRXGWGAnCiv0GtOZff Zwvv3ZNuEPNdCeIqNHZUiGT+flwyVfUAYzJd1u9qbh0yvTqJYEHJVQg7w5m4rPC0 PQZL/k4bjyISDrKQfHN8DPmbXODGjM2RXwKwI6STdshF3+7m5AqubYVBJQhxpONF GgW+s/Lhn9x3g4QpzJBr3nJRF/KbTHag2XCM7YxWxYxTN9GzG5Z1joX2cNXIqvim SpeuPJTxZ+3cQ/akoEvOIgZ+Iju0iEg= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:00 2025 by rpki-client