$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa File: 3de969ab-1b6a-3c75-99c4-6b44162fead1.roa (raw, json) Hash identifier: aYCd83L5g3+V0BtMAeqTqqifTlep4Of28DptqJKH598= Subject key identifier: 48:CD:49:E0:05:DE:8E:0C:64:11:DD:5F:7F:36:AF:BE:E7:3A:8C:8D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201F63111705D90FB15C200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f6:31:11:70:5d:90:fb:15:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=27ee5cf8-0a0d-46ca-b116-c6320a8f61e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:c3:9d:28:68:19:65:4a:cb:f2:fa:ea:ac: 8d:9f:51:26:14:d9:1c:00:8f:85:ed:33:1d:00:58: 58:96:88:f8:36:39:7e:7c:88:26:5e:14:75:c8:ca: 1a:48:4b:db:0a:93:1f:e4:ba:4c:6e:6d:8e:a3:35: 4c:75:9c:5a:9c:fc:09:ce:da:71:a3:d0:b0:cb:05: b4:7b:f6:72:10:9e:7c:b3:9f:73:44:91:05:c6:42: 16:21:18:e9:a5:2b:c5:33:c5:ab:fa:6e:d6:5c:a0: 35:43:5b:c3:e0:ff:79:00:42:46:13:70:e3:2b:cd: d0:43:6c:95:44:8a:84:86:72:b9:f8:5a:38:bf:05: 04:dc:7f:35:95:b2:ba:1f:55:aa:ea:81:6f:8e:10: 82:57:cb:fa:61:bf:94:55:36:dc:23:ef:3c:f8:f5: 32:ee:55:d7:d7:ad:2c:fa:18:b0:b0:00:d7:f2:61: e0:4d:41:ae:ea:83:28:83:fb:ec:76:f6:4a:e7:31: 0b:39:d0:16:73:56:a4:6b:c9:f2:05:69:9e:70:0d: fa:37:f7:d2:60:4e:92:4e:2a:e4:1c:34:37:c8:48: a8:94:40:8c:e4:cd:57:1f:91:4d:1a:1d:57:4d:59: 4c:cd:4f:f1:24:f7:15:7a:17:a8:31:f4:5c:41:7b: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CD:49:E0:05:DE:8E:0C:64:11:DD:5F:7F:36:AF:BE:E7:3A:8C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:40:c6:04:13:6e:d5:0c:22:5a:01:d6:64:2b:fd:1b:bd:44: 8d:b2:d8:ae:1c:49:af:39:12:2b:a2:89:c7:bd:cb:c2:86:dd: 81:f9:51:94:ce:21:44:cd:59:61:bd:fe:62:6b:83:82:b8:90: eb:8e:76:a1:7e:82:ee:d7:1a:4b:36:47:72:3b:4c:82:c4:47: 0b:5e:bd:8e:93:d5:de:75:64:f7:0c:ee:cf:ee:82:48:13:56: 93:84:45:fb:a0:88:10:eb:e8:b2:de:33:db:31:a9:3c:fa:07: d9:09:02:03:85:d6:dd:c3:76:f1:6e:bd:03:f9:3c:3e:16:c8: 40:47:48:28:b0:d8:74:19:97:0e:35:22:09:f5:bd:8f:f7:ce: 0c:4b:ae:aa:c3:23:61:4f:e3:f9:90:72:4d:18:85:f3:03:55: 41:15:f4:ef:12:8e:b8:01:21:b3:55:9e:8e:39:02:4a:c8:ae: ac:2b:d1:fa:b1:7e:e9:34:70:df:17:67:b6:70:d4:42:9b:d1: 87:46:1f:7c:de:b1:07:a4:19:eb:6e:69:be:8f:00:77:e1:e3: 8a:8e:fa:e7:f9:5d:0e:a3:db:d7:ee:e9:7f:91:c8:ff:19:bb: f8:cd:62:17:7f:71:7a:f6:4c:ae:a0:65:fc:a4:24:95:fb:d1: b0:08:cd:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfYxEXBdkPsVwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjdlZTVjZjgtMGEwZC00NmNhLWIxMTYtYzYzMjBhOGY2MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJbDnShoGWVKy/L66qyNn1EmFNkcAI+F7TMd AFhYloj4Njl+fIgmXhR1yMoaSEvbCpMf5LpMbm2OozVMdZxanPwJztpxo9CwywW0 e/ZyEJ58s59zRJEFxkIWIRjppSvFM8Wr+m7WXKA1Q1vD4P95AEJGE3DjK83QQ2yV RIqEhnK5+Fo4vwUE3H81lbK6H1Wq6oFvjhCCV8v6Yb+UVTbcI+88+PUy7lXX160s +hiwsADX8mHgTUGu6oMog/vsdvZK5zELOdAWc1aka8nyBWmecA36N/fSYE6STirk HDQ3yEiolECM5M1XH5FNGh1XTVlMzU/xJPcVeheoMfRcQXvoiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjNSeAF3o4MZBHdX382r77nOoyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2RlOTY5YWItMWI2YS0z Yzc1LTk5YzQtNmI0NDE2MmZlYWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENAxgQTbtUMIloB1mQr/Ru9RI2y2K4cSa85Eiuiice9y8KG3YH5UZTO IUTNWWG9/mJrg4K4kOuOdqF+gu7XGks2R3I7TILERwtevY6T1d51ZPcM7s/ugkgT VpOERfugiBDr6LLeM9sxqTz6B9kJAgOF1t3DdvFuvQP5PD4WyEBHSCiw2HQZlw41 Ign1vY/3zgxLrqrDI2FP4/mQck0YhfMDVUEV9O8SjrgBIbNVno45AkrIrqwr0fqx fuk0cN8XZ7Zw1EKb0YdGH3zesQekGetuab6PAHfh44qO+uf5XQ6j29fu6X+RyP8Z u/jNYhd/cXr2TK6gZfykJJX70bAIzYc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:28 2025 by rpki-client