$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa File: 5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa (raw, json) Hash identifier: iTKb+8Ip9QSKNusvrkVk03Vnju1n3BtHugdN3ljEtgw= Subject key identifier: EB:40:8B:28:57:62:1D:94:7F:4C:FF:12:CB:A1:F4:19:0C:C7:53:7A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201F8AE8ACDCBEF1701B2E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f8:ae:8a:cd:cb:ef:17:01:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=335b8d26-3b04-4306-a21d-15fa51208eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:5b:53:68:b3:2e:dc:65:bd:9c:8c:39:64: 98:b8:40:a1:4a:07:33:27:34:c0:0f:32:fd:66:43: 82:ae:eb:93:92:0d:a8:df:74:8b:8a:90:52:6a:08: 94:a9:7e:83:d5:df:7f:63:17:21:d8:1d:58:e5:63: 95:57:14:c2:1c:9a:eb:11:d1:3b:a6:a7:1f:50:86: 84:ac:72:2f:44:67:14:66:68:b6:5d:8c:ea:28:74: 53:3a:64:bf:5c:03:c3:28:f0:f6:0d:35:25:62:a9: fa:4d:a2:08:bd:5a:3c:2f:e4:f3:83:c2:ab:70:5e: 0f:44:68:7b:2a:4e:f6:34:c5:d4:72:ca:0f:1d:60: b6:58:1f:99:e3:87:67:d6:bc:0d:a1:55:35:0f:ef: bb:53:30:90:9d:3c:b3:1b:73:36:b7:a2:8e:df:db: 4f:26:5f:43:57:bd:f7:01:3d:66:59:56:f9:cb:ce: 87:09:57:f5:cb:c6:c9:98:22:a5:6d:81:08:04:da: fa:c2:0d:e5:bf:3b:75:53:ef:33:bc:3e:fa:d0:28: ff:11:b5:17:f8:7c:8b:d0:6f:5d:8e:2c:27:95:3d: a2:81:6c:26:b5:01:ef:a7:4a:2f:3f:5a:ea:e8:91: 0b:02:de:66:77:ff:99:37:cf:77:c5:d4:72:2f:30: 19:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:40:8B:28:57:62:1D:94:7F:4C:FF:12:CB:A1:F4:19:0C:C7:53:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5f16e0c5-115d-3467-8071-ccd6fd60e48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:60:08:a9:a7:19:4f:2b:e5:8b:32:67:e3:97:45:45:92:fd: 8a:ea:10:00:8b:28:9c:35:d0:7a:9a:8e:c1:52:b1:b2:19:e6: e5:5b:d8:86:d1:de:e6:d2:56:2c:61:af:a9:cc:79:92:b9:fe: 5f:fa:eb:15:78:b6:63:c7:e2:b0:50:33:2e:a7:dd:84:d3:98: 65:c7:d2:7b:ec:aa:ac:40:95:cb:13:78:8e:6f:31:e0:f1:4d: 53:c8:2a:71:d3:6b:0f:e4:a7:75:81:e2:21:be:a6:b9:41:fb: 52:7d:fd:a9:3f:a4:e2:0d:09:c9:0e:09:3f:c6:41:e9:e4:c6: 95:c1:b0:ce:11:e1:9d:1d:c3:e7:a1:da:63:e4:87:08:9d:fb: 49:00:26:49:0a:35:2a:db:49:31:75:dc:c4:b1:05:f2:ad:65: 50:f7:3b:c2:5a:f2:1d:98:3e:1e:d5:0f:26:69:28:77:3a:0a: 86:8f:8e:2b:1f:8f:95:c3:d3:23:a2:4d:c4:27:b4:47:c0:15: 77:39:76:94:ba:b3:a5:4a:63:5f:55:d1:e3:40:9c:b6:d5:c8: 94:12:ec:5b:66:41:68:57:77:fc:bd:81:51:2a:ba:ac:1c:b9: da:de:15:b7:2c:3e:22:ee:0b:2b:7d:60:b9:77:f6:d1:dd:b8: 2e:52:50:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfiuis3L7xcBsuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MzM1YjhkMjYtM2IwNC00MzA2LWEyMWQtMTVmYTUxMjA4ZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXVbU2izLtxlvZyMOWSYuEChSgczJzTADzL9 ZkOCruuTkg2o33SLipBSagiUqX6D1d9/Yxch2B1Y5WOVVxTCHJrrEdE7pqcfUIaE rHIvRGcUZmi2XYzqKHRTOmS/XAPDKPD2DTUlYqn6TaIIvVo8L+Tzg8KrcF4PRGh7 Kk72NMXUcsoPHWC2WB+Z44dn1rwNoVU1D++7UzCQnTyzG3M2t6KO39tPJl9DV733 AT1mWVb5y86HCVf1y8bJmCKlbYEIBNr6wg3lvzt1U+8zvD760Cj/EbUX+HyL0G9d jiwnlT2igWwmtQHvp0ovP1rq6JELAt5md/+ZN893xdRyLzAZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtAiyhXYh2Uf0z/Esuh9BkMx1N6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWYxNmUwYzUtMTE1ZC0z NDY3LTgwNzEtY2NkNmZkNjBlNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFgCKmnGU8r5YsyZ+OXRUWS/YrqEACLKJw10HqajsFSsbIZ5uVb2IbR 3ubSVixhr6nMeZK5/l/66xV4tmPH4rBQMy6n3YTTmGXH0nvsqqxAlcsTeI5vMeDx TVPIKnHTaw/kp3WB4iG+prlB+1J9/ak/pOINCckOCT/GQenkxpXBsM4R4Z0dw+eh 2mPkhwid+0kAJkkKNSrbSTF13MSxBfKtZVD3O8Ja8h2YPh7VDyZpKHc6CoaPjisf j5XD0yOiTcQntEfAFXc5dpS6s6VKY19V0eNAnLbVyJQS7FtmQWhXd/y9gVEquqwc udreFbcsPiLuCyt9YLl39tHduC5SUIE= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:05 2025 by rpki-client