$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa File: 4376d315-6a36-3312-aa90-2c446e1e3899.roa (raw, json) Hash identifier: X746q3wA1qsX1vwZ/FxIy9sPce8hiMfqLAdm41knZ6A= Subject key identifier: FE:F4:DD:DB:DB:D5:41:20:D0:23:88:E7:30:7B:6D:85:31:3A:BD:7F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673AF3BDF052018C4F30C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3a:f3:bd:f0:52:01:8c:4f:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=55733621-6dae-490d-8f90-e8b15a4ac8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5d:a7:3a:eb:69:9f:0b:a2:b3:fe:3e:ff:c9: 9f:54:e1:cf:55:b2:60:ee:bc:ff:72:78:b2:31:96: ac:54:bf:48:a7:a4:42:aa:86:27:54:a6:2c:51:70: 62:1f:2a:11:1f:21:d3:18:af:45:32:da:14:4a:33: ab:12:5f:bf:2b:bf:78:9d:a5:e9:a1:6d:36:46:9c: df:99:c7:37:90:b3:bb:44:a7:c1:44:32:d9:fb:57: 34:45:eb:fe:d5:8f:77:70:46:a1:d3:05:0c:59:33: e2:e5:ed:21:d8:19:02:87:56:23:66:41:93:89:af: 9b:74:ca:f3:a7:dc:fe:97:81:3c:e1:4f:35:ec:02: 3e:da:47:6a:67:a8:0d:cc:32:38:f7:9f:6c:00:de: c5:28:7f:da:99:d9:17:6f:dc:c3:aa:64:15:36:6b: 8f:24:b7:b7:49:de:69:53:62:0a:81:25:cb:d0:8c: d8:63:a6:d1:44:03:44:4f:15:50:cc:0e:10:4d:a9: a6:2b:2e:fc:f3:09:da:19:66:29:7e:3d:ad:89:d1: 96:93:f2:cc:9c:8c:45:c6:84:dd:11:1b:95:52:ce: a5:a9:5c:f0:19:9d:27:4e:c6:20:8b:b4:f3:1e:05: 0a:f3:01:99:d2:5c:af:fb:cd:32:eb:7e:57:df:4e: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F4:DD:DB:DB:D5:41:20:D0:23:88:E7:30:7B:6D:85:31:3A:BD:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ff:5c:16:a6:c0:4f:87:a3:93:1f:4b:dc:7f:dd:56:49:d3: ac:d0:ed:30:91:4f:94:17:d5:ba:bf:ae:80:7b:28:fe:98:0c: b0:f8:ae:21:2c:76:27:68:df:bf:91:3d:bc:d3:1a:98:8d:e5: 63:33:6a:ff:88:1d:dc:83:7c:a9:0e:a5:3d:6f:ed:72:90:d5: 35:7e:42:0f:bd:54:41:d5:2f:fc:33:20:4e:6d:c7:64:24:80: 11:54:49:26:71:90:fb:29:cc:be:22:a1:d9:c6:ae:a8:c7:b2: 39:82:68:31:21:8f:39:84:27:ea:a3:b8:93:82:92:b7:54:a4: 11:7d:69:3e:5b:ed:9d:93:33:6f:e9:54:ad:fa:3a:15:c8:b0: e8:4b:7b:4c:9f:3d:1d:31:b4:91:95:bc:4a:10:f6:a2:0c:3a: 04:2e:77:b8:e5:86:12:30:6a:5a:48:cc:51:ff:78:b3:10:c8: 86:f1:c4:6d:e2:16:dd:09:8d:9b:c6:01:55:c9:13:80:fc:96: 3d:9e:58:7a:04:5c:96:d8:fd:09:b6:cc:9b:ec:f6:6a:3a:b6: c7:0d:b2:fa:2e:08:6d:fd:63:c6:44:06:06:e0:8c:f3:14:1d: bf:72:ce:93:8b:aa:4b:47:30:2c:3e:f1:8c:92:30:45:00:af: b4:fc:2a:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzrzvfBSAYxPMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk NTU3MzM2MjEtNmRhZS00OTBkLThmOTAtZThiMTVhNGFjOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk12nOutpnwuis/4+/8mfVOHPVbJg7rz/cniy MZasVL9Ip6RCqoYnVKYsUXBiHyoRHyHTGK9FMtoUSjOrEl+/K794naXpoW02Rpzf mcc3kLO7RKfBRDLZ+1c0Rev+1Y93cEah0wUMWTPi5e0h2BkCh1YjZkGTia+bdMrz p9z+l4E84U817AI+2kdqZ6gNzDI4959sAN7FKH/amdkXb9zDqmQVNmuPJLe3Sd5p U2IKgSXL0IzYY6bRRANETxVQzA4QTammKy788wnaGWYpfj2tidGWk/LMnIxFxoTd ERuVUs6lqVzwGZ0nTsYgi7TzHgUK8wGZ0lyv+80y635X307bvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP703dvb1UEg0COI5zB7bYUxOr1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDM3NmQzMTUtNmEzNi0z MzEyLWFhOTAtMmM0NDZlMWUzODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn/XBamwE+Ho5MfS9x/3VZJ06zQ7TCRT5QX1bq/roB7KP6YDLD4riEs dido37+RPbzTGpiN5WMzav+IHdyDfKkOpT1v7XKQ1TV+Qg+9VEHVL/wzIE5tx2Qk gBFUSSZxkPspzL4iodnGrqjHsjmCaDEhjzmEJ+qjuJOCkrdUpBF9aT5b7Z2TM2/p VK36OhXIsOhLe0yfPR0xtJGVvEoQ9qIMOgQud7jlhhIwalpIzFH/eLMQyIbxxG3i Ft0JjZvGAVXJE4D8lj2eWHoEXJbY/Qm2zJvs9mo6tscNsvouCG39Y8ZEBgbgjPMU Hb9yzpOLqktHMCw+8YySMEUAr7T8KtY= -----END CERTIFICATE-----Generated at Sat Oct 11 00:22:52 2025 by rpki-client