$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5e871f5d-702d-3fe0-832c-be6aee315200.roa File: 5e871f5d-702d-3fe0-832c-be6aee315200.roa (raw, json) Hash identifier: +CJKJq4h29Vu6wxyJ2+k2S7kbzJyxcnNPQWmaMrTnpM= Subject key identifier: CB:E5:97:05:9B:90:E4:55:00:CB:E1:80:53:24:88:8F:28:46:0C:72 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62022DA61C9ABA439D455270 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5e871f5d-702d-3fe0-832c-be6aee315200.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2d:a6:1c:9a:ba:43:9d:45:52:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9a42e9e1-d1a5-49bd-85d9-33a5f4d4ad87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6a:11:c1:2d:80:59:e4:6e:02:d0:58:1d:2c: b6:74:13:53:c9:be:ee:f6:7f:d6:d9:44:7f:4b:68: 20:0c:73:c9:21:23:03:f1:d3:91:64:4a:f3:14:7d: 55:26:5b:62:ef:59:92:0a:c8:95:55:aa:c5:8f:a0: 9e:d0:04:fd:2a:7b:74:e1:28:f8:c7:21:46:e1:8c: b4:30:6c:70:51:ea:c4:aa:b4:1c:19:82:c1:df:7f: 52:49:48:a4:ef:27:e2:07:03:32:3b:4f:09:eb:c9: c6:49:f6:b4:17:9b:88:b4:7c:d9:f9:59:bf:8e:6c: cb:7f:19:4f:84:47:b8:a7:14:55:9a:38:bb:30:f7: d0:87:34:9b:94:53:63:bf:ea:28:06:6f:12:60:bb: ec:08:05:5a:8c:7c:30:ca:e5:32:d4:4d:d2:9c:e4: 42:42:39:e2:74:f1:50:23:e9:fe:d5:72:f7:4c:59: 08:1d:da:ca:22:79:91:2a:62:bf:b1:37:fa:e5:20: 78:ef:b2:91:12:c3:95:be:b5:af:10:d9:09:70:c1: 63:54:57:7e:94:8d:c1:f5:42:0c:4f:33:b7:e3:ee: 05:19:a5:da:ca:ca:36:91:ef:cb:49:b4:33:a3:40: 47:d7:d7:18:aa:31:fb:e8:73:7a:c3:3c:6d:41:0c: f9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E5:97:05:9B:90:E4:55:00:CB:E1:80:53:24:88:8F:28:46:0C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5e871f5d-702d-3fe0-832c-be6aee315200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e3:25:52:11:a6:48:ff:17:c5:f1:35:29:23:12:0f:4e:33: 50:bd:b4:a2:b9:a8:b1:65:04:82:52:9e:1d:8b:c1:6a:ce:62: 72:8e:67:c2:65:9f:bd:93:2c:c0:86:68:f4:5b:01:eb:b2:96: ff:c9:61:13:73:04:9e:fc:34:bd:bc:d2:5e:46:89:47:b9:fb: b4:85:32:92:20:1d:70:f6:5d:2b:09:e4:74:35:fb:7f:34:78: cc:51:4c:e0:a3:d5:e5:6a:6c:3d:6a:d0:e8:96:9b:f0:0f:94: 59:2f:1c:54:66:85:ba:2e:dc:8a:0f:1e:e4:88:3f:4a:3c:2c: 59:20:7e:4c:65:8c:38:bf:23:6d:b3:d7:d0:ff:1d:40:e7:48: 35:3b:31:98:5e:c9:02:8e:79:71:75:ee:19:d6:68:08:9b:f6: b9:5c:2c:92:98:5b:07:6e:92:80:8e:58:fa:9d:a5:f5:c6:d8: 4b:1c:b7:ae:46:21:87:2f:3f:07:0e:5d:5f:56:1d:cd:08:5f: 6a:27:52:cc:97:9d:50:8b:3a:9a:7b:10:97:52:4d:81:e8:61: c2:bc:bb:9a:71:7d:82:94:46:cb:ca:db:49:17:00:ea:84:c4: 23:ec:88:c0:60:03:7f:fc:46:9a:a4:37:86:38:d9:1e:6e:31: 44:d6:d0:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAi2mHJq6Q51FUnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWE0MmU5ZTEtZDFhNS00OWJkLTg1ZDktMzNhNWY0ZDRhZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymoRwS2AWeRuAtBYHSy2dBNTyb7u9n/W2UR/ S2ggDHPJISMD8dORZErzFH1VJlti71mSCsiVVarFj6Ce0AT9Knt04Sj4xyFG4Yy0 MGxwUerEqrQcGYLB339SSUik7yfiBwMyO08J68nGSfa0F5uItHzZ+Vm/jmzLfxlP hEe4pxRVmji7MPfQhzSblFNjv+ooBm8SYLvsCAVajHwwyuUy1E3SnORCQjnidPFQ I+n+1XL3TFkIHdrKInmRKmK/sTf65SB477KREsOVvrWvENkJcMFjVFd+lI3B9UIM TzO34+4FGaXayso2ke/LSbQzo0BH19cYqjH76HN6wzxtQQz5YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvllwWbkORVAMvhgFMkiI8oRgxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWU4NzFmNWQtNzAyZC0z ZmUwLTgzMmMtYmU2YWVlMzE1MjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALjJVIRpkj/F8XxNSkjEg9OM1C9tKK5qLFlBIJSnh2LwWrOYnKOZ8Jl n72TLMCGaPRbAeuylv/JYRNzBJ78NL280l5GiUe5+7SFMpIgHXD2XSsJ5HQ1+380 eMxRTOCj1eVqbD1q0OiWm/APlFkvHFRmhbou3IoPHuSIP0o8LFkgfkxljDi/I22z 19D/HUDnSDU7MZheyQKOeXF17hnWaAib9rlcLJKYWwdukoCOWPqdpfXG2Esct65G IYcvPwcOXV9WHc0IX2onUsyXnVCLOpp7EJdSTYHoYcK8u5pxfYKURsvK20kXAOqE xCPsiMBgA3/8RpqkN4Y42R5uMUTW0Eo= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:42 2025 by rpki-client