$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa File: 4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa (raw, json) Hash identifier: Urw3J24sclKIkycJEugAmbNpky4jEx0N3e7UpEV2iz4= Subject key identifier: 89:F4:6A:5B:91:CE:49:AD:53:3C:A9:BB:53:9C:66:15:18:CA:0D:CF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E262C0F510B33F155DA8 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e2:62:c0:f5:10:b3:3f:15:5d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f6f99a7f-5fca-4da7-aa2e-351bf933088f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:eb:e8:76:13:f8:16:5c:0f:9e:bb:05:dd: 6b:ca:3f:08:98:4a:a3:7c:bc:19:d6:98:72:41:27: 98:d8:2c:d7:7a:9d:10:7d:04:c9:ce:98:6a:a7:bb: 92:86:4e:d2:f3:45:40:5d:97:02:23:e1:99:34:ba: 88:bd:75:8f:f4:13:56:22:89:53:a7:35:77:40:b2: 1a:0d:83:a5:87:40:2c:38:71:e5:6c:57:35:ab:ac: a2:1b:35:96:e6:97:3e:05:8e:c8:6f:e0:46:82:b4: 44:cd:11:fe:aa:8c:97:43:46:c7:9f:31:c4:2d:7a: bd:0e:b8:30:70:60:30:25:a3:96:23:13:4e:59:b4: 53:78:bb:cc:e3:8c:f2:98:5b:9a:0b:48:ce:d4:c6: 67:8a:b0:6d:b8:38:bc:fb:32:47:72:78:c8:61:01: 84:b4:1d:1b:6d:19:b2:67:15:e7:36:b7:6f:e2:23: 4a:f0:a1:b5:be:b5:25:f9:12:d5:42:eb:9f:31:ec: 81:2b:0c:9f:92:94:e8:35:81:17:8b:ba:a2:80:2d: d1:5d:3f:ed:59:1c:1b:4b:a1:de:98:96:0f:ba:f7: a9:b6:c5:2f:db:f8:5f:72:12:97:d1:e0:ff:06:a5: c7:23:a3:1e:c5:2d:3f:c7:8f:52:46:b1:29:cf:51: d3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:6A:5B:91:CE:49:AD:53:3C:A9:BB:53:9C:66:15:18:CA:0D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:df:a3:e6:ab:1c:d5:94:7d:fe:78:85:da:16:01:a0:2a:d2: 13:23:e4:26:c5:dc:e9:70:26:fc:6f:82:d3:56:12:63:4f:d7: 0b:09:29:e2:0c:e9:58:9a:9b:36:b8:f6:b5:57:19:81:33:ac: 39:af:38:b8:10:70:54:92:24:b7:bd:75:35:bd:bf:ae:2b:43: 94:ba:2a:fe:0b:6b:8e:a7:c8:91:29:3e:b5:2f:b2:48:93:80: aa:cc:d7:59:e8:14:f2:5d:43:50:f7:12:29:8a:e8:00:bc:2e: a9:05:35:05:43:d1:a4:98:7c:3c:3a:9f:51:47:f6:c0:68:88: 42:ee:fc:60:5a:34:59:00:41:85:26:3d:0d:92:d8:3b:9d:79: 48:e3:5f:b0:b7:6a:5b:a6:cc:9d:89:24:1c:8f:0c:df:88:68: 25:2e:54:be:1c:b2:fe:5c:87:0f:a9:c5:de:e4:ef:58:10:4d: 50:80:ef:a7:ae:ee:e5:49:1d:92:df:74:a9:81:ff:4d:7f:2e: fc:3f:fa:ae:7e:3e:e6:a1:1e:72:ec:25:d0:00:07:30:4e:28: 01:ca:86:7f:5d:2e:01:2c:fb:8a:00:3f:52:fa:70:d7:0b:f2: 6c:76:1d:f0:c9:59:41:74:9e:27:37:1d:ba:9d:37:08:37:46: b5:28:d8:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeJiwPUQsz8VXagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjZmOTlhN2YtNWZjYS00ZGE3LWFhMmUtMzUxYmY5MzMwODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbPr6HYT+BZcD567Bd1ryj8ImEqjfLwZ1phy QSeY2CzXep0QfQTJzphqp7uShk7S80VAXZcCI+GZNLqIvXWP9BNWIolTpzV3QLIa DYOlh0AsOHHlbFc1q6yiGzWW5pc+BY7Ib+BGgrREzRH+qoyXQ0bHnzHELXq9Drgw cGAwJaOWIxNOWbRTeLvM44zymFuaC0jO1MZnirBtuDi8+zJHcnjIYQGEtB0bbRmy ZxXnNrdv4iNK8KG1vrUl+RLVQuufMeyBKwyfkpToNYEXi7qigC3RXT/tWRwbS6He mJYPuveptsUv2/hfchKX0eD/BqXHI6MexS0/x49SRrEpz1HTXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIn0aluRzkmtUzypu1OcZhUYyg3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGJkMmYwMTMtNjU2OC0z OWU4LTljZTMtMWExMDY4ZjI4MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7fo+arHNWUff54hdoWAaAq0hMj5CbF3OlwJvxvgtNWEmNP1wsJKeIM 6Viamza49rVXGYEzrDmvOLgQcFSSJLe9dTW9v64rQ5S6Kv4La46nyJEpPrUvskiT gKrM11noFPJdQ1D3EimK6AC8LqkFNQVD0aSYfDw6n1FH9sBoiELu/GBaNFkAQYUm PQ2S2DudeUjjX7C3alumzJ2JJByPDN+IaCUuVL4csv5chw+pxd7k71gQTVCA76eu 7uVJHZLfdKmB/01/Lvw/+q5+PuahHnLsJdAABzBOKAHKhn9dLgEs+4oAP1L6cNcL 8mx2HfDJWUF0nic3HbqdNwg3RrUo2JE= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:32 2025 by rpki-client