$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d8f7d72-145a-3c33-a493-7a82a86c6328.roa File: 5d8f7d72-145a-3c33-a493-7a82a86c6328.roa (raw, json) Hash identifier: 1gLbNQ2QNSZeV1uFg/dz+axSp1P5ZVIhztMeRBtCG+g= Subject key identifier: 34:8E:18:22:AC:12:87:9D:DC:F1:1B:8C:8A:5C:FE:4E:B1:16:98:A3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674CF65483771CF6F99300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d8f7d72-145a-3c33-a493-7a82a86c6328.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4c:f6:54:83:77:1c:f6:f9:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=325cc45c-2c53-4673-a622-483b2d3d4eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e4:92:66:25:51:c3:fd:6a:33:47:3e:3e:95: 2f:b5:45:7f:47:96:8f:38:9e:42:91:35:05:63:29: 5b:7e:7a:7b:53:01:e2:d0:8f:45:41:58:38:d4:e4: 33:02:2b:2f:6b:18:ed:0c:61:29:58:0f:20:cd:44: d4:c1:cb:a9:84:86:89:6b:1f:7a:7a:af:31:35:cd: 35:a3:d1:bc:9d:bf:3f:ae:e6:69:1c:5c:5f:be:74: b2:bb:e9:d3:e4:52:7c:8e:f9:81:7c:6f:b0:e4:15: bf:f2:4c:9d:ef:02:40:ee:ec:a6:15:6e:57:08:1e: 62:e4:b0:11:1b:af:39:b3:9c:e9:be:c4:a9:8a:5c: 62:8a:63:ca:0e:fb:01:be:d3:bb:59:9f:1b:0f:37: 4f:ea:17:4e:87:14:1a:ac:b5:48:2f:d3:5d:dc:c6: bd:18:21:83:66:83:b3:f6:91:a2:3c:fe:ec:d2:77: d6:e1:10:a0:0c:6b:35:10:1a:89:97:dc:8c:51:1d: 0e:a6:e6:17:3f:cc:ca:e0:57:d9:ea:ae:9e:b4:e0: 85:80:94:20:5a:4b:c3:c9:f5:2c:4f:31:5e:0a:e6: 88:16:75:25:e4:d2:85:20:c9:1e:fe:ac:af:3d:05: 54:85:75:21:9c:3c:cd:82:72:85:9a:df:d0:ae:07: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8E:18:22:AC:12:87:9D:DC:F1:1B:8C:8A:5C:FE:4E:B1:16:98:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d8f7d72-145a-3c33-a493-7a82a86c6328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e8:8d:9e:ba:4d:33:97:4e:ba:b9:f3:e2:6c:00:6a:89:e4: 3d:35:68:b0:e2:a0:c3:89:32:1a:74:6c:28:96:7e:2f:74:20: ed:46:1b:b1:b0:02:7c:27:14:3c:5b:9d:0e:60:18:07:52:cd: a3:8b:a1:29:02:f3:f3:f2:00:9d:7c:3d:cd:87:31:e1:54:d7: e1:8a:f1:e8:d8:4d:9b:ab:f2:29:0a:2b:c8:8b:b9:40:77:96: 55:08:40:5f:f7:a6:bb:cf:f7:80:5c:7d:3c:4d:f1:23:42:52: e9:34:b7:0c:12:6b:d5:50:cb:c8:a3:8c:7f:36:03:15:15:40: ca:24:9c:41:01:b8:45:d4:c1:bd:72:54:06:93:93:84:01:f5: f5:4b:e8:43:e0:6c:a3:a1:60:c8:6c:6f:4f:61:02:26:88:b1: 99:75:d9:c5:e5:d2:3e:bc:df:20:08:15:bd:b6:e5:41:8b:0c: 9b:13:2b:81:97:c3:fa:f0:ec:71:66:a4:fe:c8:a9:67:13:06: 2b:fc:0b:3d:e5:8e:38:f5:68:e4:1d:5a:6c:33:4f:25:5d:24: d2:d0:14:5b:c4:65:ca:59:9f:9b:16:2d:08:fc:b3:a6:c0:b0: 48:3c:ed:a8:58:01:cb:ab:58:bf:ee:e3:58:a0:a0:f7:7c:c3: c9:9f:3d:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0z2VIN3HPb5kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MzI1Y2M0NWMtMmM1My00NjczLWE2MjItNDgzYjJkM2Q0ZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+SSZiVRw/1qM0c+PpUvtUV/R5aPOJ5CkTUF Yylbfnp7UwHi0I9FQVg41OQzAisvaxjtDGEpWA8gzUTUwcuphIaJax96eq8xNc01 o9G8nb8/ruZpHFxfvnSyu+nT5FJ8jvmBfG+w5BW/8kyd7wJA7uymFW5XCB5i5LAR G685s5zpvsSpilxiimPKDvsBvtO7WZ8bDzdP6hdOhxQarLVIL9Nd3Ma9GCGDZoOz 9pGiPP7s0nfW4RCgDGs1EBqJl9yMUR0OpuYXP8zK4FfZ6q6etOCFgJQgWkvDyfUs TzFeCuaIFnUl5NKFIMke/qyvPQVUhXUhnDzNgnKFmt/QrgcU/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSOGCKsEoed3PEbjIpc/k6xFpijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWQ4ZjdkNzItMTQ1YS0z YzMzLWE0OTMtN2E4MmE4NmM2MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATojZ66TTOXTrq58+JsAGqJ5D01aLDioMOJMhp0bCiWfi90IO1GG7Gw AnwnFDxbnQ5gGAdSzaOLoSkC8/PyAJ18Pc2HMeFU1+GK8ejYTZur8ikKK8iLuUB3 llUIQF/3prvP94BcfTxN8SNCUuk0twwSa9VQy8ijjH82AxUVQMoknEEBuEXUwb1y VAaTk4QB9fVL6EPgbKOhYMhsb09hAiaIsZl12cXl0j683yAIFb225UGLDJsTK4GX w/rw7HFmpP7IqWcTBiv8Cz3ljjj1aOQdWmwzTyVdJNLQFFvEZcpZn5sWLQj8s6bA sEg87ahYAcurWL/u41igoPd8w8mfPe0= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:23 2025 by rpki-client