$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa File: 4575c36b-b988-3070-998f-2c18e11901f4.roa (raw, json) Hash identifier: j+lDBRmk7dPuOfC9DHNI7Hilo8FaAQr4SEkeJvH4E4o= Subject key identifier: 14:BB:2E:29:E4:85:50:BB:A6:24:3F:EC:5A:20:BF:A2:ED:28:E3:41 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D09C6494B8D33297F900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d0:9c:64:94:b8:d3:32:97:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=40cac58d-3b01-4670-9125-8a584f64a3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:a9:e9:ad:9c:51:5b:94:68:00:b3:d9:db: 29:c8:1f:82:a3:7b:09:14:39:24:ba:d8:97:31:3a: ed:d6:6c:66:4f:b4:21:20:de:b2:73:7d:a9:b4:d7: b9:b9:25:db:7e:1f:b4:ba:72:95:64:a1:87:94:e7: 08:c6:21:03:83:8e:9e:db:4d:b4:6a:04:e3:93:65: 58:07:76:76:5d:5d:f4:b5:4e:9f:79:12:6a:93:7e: bd:81:d6:5d:46:22:f0:64:ff:88:60:6f:29:d2:e7: f4:91:b0:53:c1:0b:70:87:9a:60:0e:a8:fe:5e:bc: 3a:b3:14:07:62:72:81:ae:4a:f4:28:43:4b:6f:8a: b2:7d:f4:26:30:63:58:8a:8b:66:90:92:38:39:c5: 3e:92:06:08:46:82:18:a2:4b:d6:f0:71:49:1b:13: e0:b5:4f:da:99:37:c4:74:b0:d1:94:d9:a5:df:21: 49:77:5f:7c:4e:25:3c:3a:19:77:6c:07:5a:42:1f: a1:8a:ab:0c:c0:a4:ea:20:7e:6f:4e:2b:10:98:c6: 76:7a:bd:a6:c3:fb:5b:32:80:d7:fb:a5:e6:a9:ca: e1:dd:11:42:59:1e:89:31:4c:a2:ad:eb:bf:91:99: c9:62:34:d6:1a:fd:1b:a5:f5:6c:27:8d:67:f5:80: 89:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BB:2E:29:E4:85:50:BB:A6:24:3F:EC:5A:20:BF:A2:ED:28:E3:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:52:4f:0c:ff:b2:5c:f5:c4:50:46:52:29:73:e5:2c:10:00: 0d:5a:90:98:25:62:61:2a:e2:bd:7e:d6:d1:73:65:08:27:36: 35:b5:3b:74:59:d0:fc:4e:f5:f6:6c:93:4c:27:6d:ba:c3:cc: 65:59:dd:e2:8f:01:22:d7:95:b8:5d:6b:83:17:73:c0:0a:63: 63:f2:6c:13:8f:72:83:1b:cc:58:6f:3a:d4:fb:7b:0b:90:a9: 90:cb:3b:15:4d:f3:c1:1f:aa:92:32:3c:21:88:dd:58:1b:f7: b8:0c:82:80:32:d4:bd:d5:1c:93:92:00:e6:7c:4a:b5:75:14: 4b:82:74:a7:8b:77:a2:05:7e:5f:5d:06:50:99:91:03:2e:48: 06:bd:5b:ca:d2:ed:da:25:83:9c:1b:fe:6c:68:a9:53:c1:a0: 1b:22:1b:8d:db:01:0a:20:3a:66:4e:7e:33:3b:ab:f5:d8:17: 5c:36:99:8a:4a:8a:c1:41:be:49:ea:76:3a:45:f8:4f:d9:4d: d7:10:bd:8a:7f:b5:9e:63:fb:4e:4a:db:8d:31:87:85:f2:02: 32:b9:b0:01:0c:38:2e:82:aa:2b:77:f3:a4:7f:5d:ad:05:ed: 1b:b2:a7:88:0d:42:82:17:d3:ab:02:f6:88:a4:95:af:ab:60: 20:0c:ff:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdCcZJS40zKX+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDBjYWM1OGQtM2IwMS00NjcwLTkxMjUtOGE1ODRmNjRhM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Wp6a2cUVuUaACz2dspyB+Co3sJFDkkutiX MTrt1mxmT7QhIN6yc32ptNe5uSXbfh+0unKVZKGHlOcIxiEDg46e2020agTjk2VY B3Z2XV30tU6feRJqk369gdZdRiLwZP+IYG8p0uf0kbBTwQtwh5pgDqj+Xrw6sxQH YnKBrkr0KENLb4qyffQmMGNYiotmkJI4OcU+kgYIRoIYokvW8HFJGxPgtU/amTfE dLDRlNml3yFJd198TiU8Ohl3bAdaQh+hiqsMwKTqIH5vTisQmMZ2er2mw/tbMoDX +6Xmqcrh3RFCWR6JMUyireu/kZnJYjTWGv0bpfVsJ41n9YCJdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS7LinkhVC7piQ/7Fogv6LtKONBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDU3NWMzNmItYjk4OC0z MDcwLTk5OGYtMmMxOGUxMTkwMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtSTwz/slz1xFBGUilz5SwQAA1akJglYmEq4r1+1tFzZQgnNjW1O3RZ 0PxO9fZsk0wnbbrDzGVZ3eKPASLXlbhda4MXc8AKY2PybBOPcoMbzFhvOtT7ewuQ qZDLOxVN88EfqpIyPCGI3Vgb97gMgoAy1L3VHJOSAOZ8SrV1FEuCdKeLd6IFfl9d BlCZkQMuSAa9W8rS7dolg5wb/mxoqVPBoBsiG43bAQogOmZOfjM7q/XYF1w2mYpK isFBvknqdjpF+E/ZTdcQvYp/tZ5j+05K240xh4XyAjK5sAEMOC6Cqit386R/Xa0F 7Ruyp4gNQoIX06sC9oikla+rYCAM/9Y= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:33 2025 by rpki-client