$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa File: 5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa (raw, json) Hash identifier: HQUjcB2hg4roH5TFPr4O8VOLnt92WFhDRWg6VbKvTtY= Subject key identifier: 84:23:10:EA:A9:6C:F2:21:71:F8:6D:25:3C:38:E4:B5:33:84:A0:24 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620221A1B9E4818A8CABFD00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:21:a1:b9:e4:81:8a:8c:ab:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=2141f7d6-749d-4d03-8d4e-0b5dd8098198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:ed:e4:57:fd:23:53:bc:5f:10:f1:f8:04: 3e:ba:a2:9f:98:bd:10:11:75:90:30:06:c1:d9:c8: 7d:32:3e:91:a4:4a:7c:ba:7e:61:a2:cc:53:2a:f2: 8e:94:3a:94:1a:02:fa:2d:f7:da:08:ab:e8:80:24: cb:b4:80:e7:48:88:fb:61:9e:9b:a4:ca:fa:b2:3c: d8:bf:2c:00:f0:3a:d9:00:59:2c:53:fa:1a:13:b9: fb:f7:6a:48:c6:c8:a4:81:36:7c:39:16:42:63:56: 3d:73:af:6d:1e:39:ab:b5:58:04:a4:dc:ab:62:77: 74:d2:d1:86:18:26:42:31:f5:fc:92:a9:59:56:3d: 53:c1:5b:ce:3b:2b:e4:fb:ae:7c:5c:74:57:fe:53: 3a:d7:97:06:99:34:91:1b:30:55:48:af:05:b6:86: 4b:6e:77:e4:a2:19:8e:c3:74:73:e5:50:72:9e:6c: 86:6c:b8:30:48:24:60:ff:a1:2e:3c:6d:2e:5d:1f: 95:8b:fb:cd:c9:e4:81:87:83:3c:d1:61:bc:48:91: 84:67:e8:87:b6:dd:bb:9c:67:e4:bb:5d:40:05:20: bf:90:0b:79:73:80:79:71:8a:3c:ea:b7:f7:f4:74: d4:31:e0:80:f9:5c:19:bc:ca:00:b3:29:04:02:9c: b0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:23:10:EA:A9:6C:F2:21:71:F8:6D:25:3C:38:E4:B5:33:84:A0:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:5e:62:3c:ad:b3:0f:49:f1:55:37:14:f8:62:bc:de:f5:81: 68:2b:03:c4:4e:b2:b9:80:9d:a2:83:e4:1c:be:ff:2a:d8:f0: 1a:b6:6b:b8:dd:39:fa:85:d1:50:74:51:1a:3d:46:ec:eb:a0: 6f:e1:81:8b:71:87:03:05:b6:00:70:31:85:79:f2:14:aa:e9: f4:2f:44:3c:48:0a:8d:d4:20:06:a2:49:a5:3d:11:24:cb:32: e4:30:a6:7a:02:82:bb:48:15:71:1f:dc:65:e1:81:b7:c6:3b: 43:11:58:37:e2:36:7c:61:ba:db:94:f6:41:0d:08:a7:d1:4b: fc:c4:84:e6:e0:48:5d:68:59:6a:b9:49:40:d6:7b:ec:ef:82: f1:bc:0a:2f:87:e3:f1:af:99:19:50:2c:3d:c8:b4:80:7b:81: 22:2b:dc:9b:fa:57:72:77:72:68:c2:af:40:e7:9d:8e:63:39: 7a:1e:49:e9:d4:95:8f:d0:7f:7b:0b:d6:c1:86:75:02:4e:96: 44:b4:97:ac:3a:61:70:73:f4:0c:54:ab:6e:c0:f7:a6:66:ac: 43:a8:25:2f:f6:a2:17:ce:c8:7a:52:fc:40:d9:71:41:fe:ef: 90:69:a0:1d:a7:7c:a7:bf:2a:9c:7c:ec:60:dd:db:4a:11:ea: b7:a2:62:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiGhueSBioyr/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjE0MWY3ZDYtNzQ5ZC00ZDAzLThkNGUtMGI1ZGQ4MDk4MTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Xt5Ff9I1O8XxDx+AQ+uqKfmL0QEXWQMAbB 2ch9Mj6RpEp8un5hosxTKvKOlDqUGgL6LffaCKvogCTLtIDnSIj7YZ6bpMr6sjzY vywA8DrZAFksU/oaE7n792pIxsikgTZ8ORZCY1Y9c69tHjmrtVgEpNyrYnd00tGG GCZCMfX8kqlZVj1TwVvOOyvk+658XHRX/lM615cGmTSRGzBVSK8FtoZLbnfkohmO w3Rz5VBynmyGbLgwSCRg/6EuPG0uXR+Vi/vNyeSBh4M80WG8SJGEZ+iHtt27nGfk u11ABSC/kAt5c4B5cYo86rf39HTUMeCA+VwZvMoAsykEApywDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQjEOqpbPIhcfhtJTw45LUzhKAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWE5NDBlZWEtY2I3NC0z ZDY3LWIwY2MtYTcyNmUyODUzYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZeYjytsw9J8VU3FPhivN71gWgrA8ROsrmAnaKD5By+/yrY8Bq2a7jd OfqF0VB0URo9RuzroG/hgYtxhwMFtgBwMYV58hSq6fQvRDxICo3UIAaiSaU9ESTL MuQwpnoCgrtIFXEf3GXhgbfGO0MRWDfiNnxhutuU9kENCKfRS/zEhObgSF1oWWq5 SUDWe+zvgvG8Ci+H4/GvmRlQLD3ItIB7gSIr3Jv6V3J3cmjCr0DnnY5jOXoeSenU lY/Qf3sL1sGGdQJOlkS0l6w6YXBz9AxUq27A96ZmrEOoJS/2ohfOyHpS/EDZcUH+ 75BpoB2nfKe/Kpx87GDd20oR6reiYh4= -----END CERTIFICATE-----Generated at Fri Oct 10 19:54:13 2025 by rpki-client