$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/568ac0ff-6926-33db-8182-74e126530140.roa File: 568ac0ff-6926-33db-8182-74e126530140.roa (raw, json) Hash identifier: aC/d5RVmtOXNAasCcobkb3CN8i71FhDCahKzdIFdqic= Subject key identifier: 6A:9E:85:AA:7E:DC:41:C0:37:8A:76:18:51:7A:5F:C9:B9:57:21:20 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62021C1F2874D8BF0CA90000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/568ac0ff-6926-33db-8182-74e126530140.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1c:1f:28:74:d8:bf:0c:a9:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=74a65e2a-6f21-4684-a21f-bbde6f868d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:10:2c:17:5f:9c:d7:d7:e2:71:22:71:81: fe:01:7d:9e:32:e1:45:0b:d7:fe:4f:9d:61:8e:1e: 5f:7c:4b:bb:ab:8b:96:e8:5f:b2:16:f9:51:10:3f: 15:b5:f9:5c:32:4c:84:85:3d:0f:98:c1:7e:55:81: 8c:be:8a:e3:0c:11:ab:b6:9a:f5:ca:e9:0e:78:e2: 3b:55:1d:08:3f:09:8e:2c:00:24:e1:9d:f4:ae:dd: 51:98:c4:cf:31:e9:b7:c5:32:95:5a:ff:e3:e4:25: c8:de:70:d8:a2:f5:d7:e7:a0:f1:17:1f:ac:46:81: 81:93:48:6b:59:9f:f4:9c:c9:79:dd:33:1a:ea:65: b7:89:8f:48:e4:93:d7:61:e4:5e:fa:f0:95:db:f1: 65:d6:8f:35:e0:42:1b:53:99:1f:14:16:51:44:96: c7:c7:a6:e5:73:75:91:59:a4:70:ce:23:c3:11:b9: 64:18:39:0d:e7:75:dc:da:db:54:0a:65:f6:78:ac: cc:a3:df:8e:4c:08:e2:76:6d:c1:77:59:22:0e:b1: 45:fd:25:4f:33:b2:9c:1d:f1:2c:52:52:65:17:75: e2:a4:59:dd:f9:fb:74:39:78:31:0b:4b:00:2b:d2: b5:15:75:9b:95:e6:b0:51:be:f2:f5:aa:27:1b:2f: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9E:85:AA:7E:DC:41:C0:37:8A:76:18:51:7A:5F:C9:B9:57:21:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/568ac0ff-6926-33db-8182-74e126530140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ca:e9:17:1f:61:63:69:f2:2f:46:82:c0:8f:6d:96:2d:07: 6d:4c:3c:98:a8:b3:c7:46:ec:d6:09:2c:00:4f:c9:6b:be:57: 47:d6:f7:6b:6d:db:58:53:46:e4:f5:7e:0e:eb:bc:15:6d:dc: 71:65:b0:95:0c:b1:10:93:ec:40:30:2a:bf:1e:3b:e0:dd:65: 31:9e:2b:f6:9d:ee:39:0d:18:f2:3c:d4:b3:2f:15:36:e8:8d: e2:46:44:be:e0:ee:18:27:1b:71:0c:4c:b4:3f:c6:00:01:74: fa:a5:4f:3b:01:c9:80:d8:54:a1:c8:99:5c:e8:bb:8d:b8:c0: 89:cb:83:85:eb:1d:bd:86:db:3f:3e:4b:15:13:16:cb:07:0e: 47:23:e6:1b:c7:de:4f:d8:22:6c:c7:08:6c:ea:92:f9:95:7f: d0:f3:0b:0d:b7:4c:11:28:a8:9a:ca:37:3e:b9:e9:67:b9:64: 96:3e:b6:70:c2:5a:c9:a5:df:17:db:b9:37:19:92:fa:4b:d2: 28:0d:41:81:96:14:df:5e:13:f5:76:4b:5d:66:53:33:3b:e5: d0:24:f6:da:fc:ae:6a:87:01:7a:e1:9f:7b:ca:f5:3f:21:7e: d0:da:87:81:4e:5b:71:38:68:2b:17:f9:de:30:96:24:aa:f2: c9:6c:a8:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhwfKHTYvwypAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzRhNjVlMmEtNmYyMS00Njg0LWEyMWYtYmJkZTZmODY4ZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDEQLBdfnNfX4nEicYH+AX2eMuFFC9f+T51h jh5ffEu7q4uW6F+yFvlRED8VtflcMkyEhT0PmMF+VYGMvorjDBGrtpr1yukOeOI7 VR0IPwmOLAAk4Z30rt1RmMTPMem3xTKVWv/j5CXI3nDYovXX56DxFx+sRoGBk0hr WZ/0nMl53TMa6mW3iY9I5JPXYeRe+vCV2/Fl1o814EIbU5kfFBZRRJbHx6blc3WR WaRwziPDEblkGDkN53Xc2ttUCmX2eKzMo9+OTAjidm3Bd1kiDrFF/SVPM7KcHfEs UlJlF3XipFnd+ft0OXgxC0sAK9K1FXWbleawUb7y9aonGy9hywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqehap+3EHAN4p2GFF6X8m5VyEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTY4YWMwZmYtNjkyNi0z M2RiLTgxODItNzRlMTI2NTMwMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLK6RcfYWNp8i9GgsCPbZYtB21MPJios8dG7NYJLABPyWu+V0fW92tt 21hTRuT1fg7rvBVt3HFlsJUMsRCT7EAwKr8eO+DdZTGeK/ad7jkNGPI81LMvFTbo jeJGRL7g7hgnG3EMTLQ/xgABdPqlTzsByYDYVKHImVzou424wInLg4XrHb2G2z8+ SxUTFssHDkcj5hvH3k/YImzHCGzqkvmVf9DzCw23TBEoqJrKNz656We5ZJY+tnDC Wsml3xfbuTcZkvpL0igNQYGWFN9eE/V2S11mUzM75dAk9tr8rmqHAXrhn3vK9T8h ftDah4FOW3E4aCsX+d4wliSq8slsqCM= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:48 2025 by rpki-client