$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/65bb8fd1-21a8-3e3f-be77-e45f5d498e47.roa File: 65bb8fd1-21a8-3e3f-be77-e45f5d498e47.roa (raw, json) Hash identifier: DigJNE8pAlCmoM7VitUcXAo+bPy+AhdZOvBZgzO4JZI= Subject key identifier: 20:4C:B1:FF:7B:E1:63:7A:DE:DD:73:39:0E:E4:42:72:D3:42:17:96 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673788C46D6D8ED1114604 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/65bb8fd1-21a8-3e3f-be77-e45f5d498e47.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:37:88:c4:6d:6d:8e:d1:11:46:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=2a8bd54a-f29a-4e74-b952-92fb45399341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dc:c6:68:fa:e0:98:3b:81:aa:04:36:3b:56: 7b:f3:00:12:e7:80:5a:94:fc:36:71:25:6f:2a:ab: 30:14:3a:cd:a5:21:c4:a3:35:05:f2:ad:05:06:e9: c9:d5:01:43:47:dd:eb:ff:7f:24:7b:82:90:56:f8: 59:86:52:31:d4:d7:bd:1c:57:13:5d:97:83:7f:6e: 18:30:92:c4:44:94:9f:e9:85:3e:39:c1:4c:7b:fc: 4a:b1:a3:ea:84:74:f5:e4:db:9c:e4:80:19:f0:92: fd:06:0d:7b:6f:e5:75:37:bc:f7:71:dc:a3:0c:29: 20:44:5f:b9:2d:ac:4a:7e:f7:10:2b:71:01:eb:3d: 1a:d8:85:67:df:01:74:62:9c:26:0a:b6:bf:88:da: 2b:f0:53:18:83:56:09:8c:86:e9:b7:8a:2d:ab:48: f5:83:b6:fc:6c:21:05:89:82:e3:6f:22:04:a4:37: 02:e2:d8:f5:f6:4b:8c:e0:8c:53:1d:a7:e0:55:70: a8:c2:0b:b0:ce:1b:bb:e0:91:54:a0:25:50:80:cc: ba:80:42:cf:87:68:f2:2e:eb:15:c8:ca:ff:85:45: b0:36:88:30:4a:e6:4a:1c:c8:22:78:75:fb:b9:0b: 74:da:77:17:0a:7a:35:27:12:82:2b:a0:e3:da:2a: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4C:B1:FF:7B:E1:63:7A:DE:DD:73:39:0E:E4:42:72:D3:42:17:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/65bb8fd1-21a8-3e3f-be77-e45f5d498e47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:0d:fa:76:43:fd:90:bb:0e:de:09:6c:79:b8:f0:7b:84:6c: 6f:d4:0a:7c:58:67:0a:ee:35:aa:81:0d:15:7b:35:01:1c:d0: be:fa:d3:f4:f1:77:6a:9e:f2:ce:36:8a:f1:11:f1:b0:18:3e: e4:1e:3d:d8:b4:29:8d:39:88:a0:fc:5e:a6:bf:4f:06:f6:1a: 6d:f9:6b:8c:3f:ff:52:67:bf:2e:46:15:bd:0c:05:dc:ed:6f: fa:43:9f:2f:99:18:5e:b6:0b:13:13:91:75:fe:d0:60:eb:f7: 72:f4:36:85:00:ae:91:89:ca:5a:b8:0d:7e:32:8b:d3:50:95: 21:cf:e2:2a:21:6e:71:b1:fd:e8:78:26:28:07:10:4b:6f:90: a2:aa:b0:17:1d:14:4f:a1:bd:26:82:58:4f:4e:34:b4:eb:26: ce:69:0c:63:b2:d6:f0:fb:89:dd:91:0f:fb:38:f7:68:e6:ee: dc:6a:dd:23:81:87:47:85:77:93:de:32:54:63:32:79:e9:0d: 27:ea:ac:6f:62:12:25:cf:ec:75:39:ba:0a:14:d5:d0:e3:12: e7:8d:52:05:a6:b4:3d:df:4c:4a:8a:7c:97:28:fc:80:b8:6d: 55:54:50:61:87:eb:c5:c3:d8:56:77:04:55:f4:9a:ee:17:41: 01:d0:1a:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzeIxG1tjtERRgQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MmE4YmQ1NGEtZjI5YS00ZTc0LWI5NTItOTJmYjQ1Mzk5MzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntzGaPrgmDuBqgQ2O1Z78wAS54BalPw2cSVv KqswFDrNpSHEozUF8q0FBunJ1QFDR93r/38ke4KQVvhZhlIx1Ne9HFcTXZeDf24Y MJLERJSf6YU+OcFMe/xKsaPqhHT15Nuc5IAZ8JL9Bg17b+V1N7z3cdyjDCkgRF+5 LaxKfvcQK3EB6z0a2IVn3wF0YpwmCra/iNor8FMYg1YJjIbpt4otq0j1g7b8bCEF iYLjbyIEpDcC4tj19kuM4IxTHafgVXCowguwzhu74JFUoCVQgMy6gELPh2jyLusV yMr/hUWwNogwSuZKHMgieHX7uQt02ncXCno1JxKCK6Dj2iovGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBMsf974WN63t1zOQ7kQnLTQheWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjViYjhmZDEtMjFhOC0z ZTNmLWJlNzctZTQ1ZjVkNDk4ZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgN+nZD/ZC7Dt4JbHm48HuEbG/UCnxYZwruNaqBDRV7NQEc0L760/Tx d2qe8s42ivER8bAYPuQePdi0KY05iKD8Xqa/Twb2Gm35a4w//1Jnvy5GFb0MBdzt b/pDny+ZGF62CxMTkXX+0GDr93L0NoUArpGJylq4DX4yi9NQlSHP4iohbnGx/eh4 JigHEEtvkKKqsBcdFE+hvSaCWE9ONLTrJs5pDGOy1vD7id2RD/s492jm7txq3SOB h0eFd5PeMlRjMnnpDSfqrG9iEiXP7HU5ugoU1dDjEueNUgWmtD3fTEqKfJco/IC4 bVVUUGGH68XD2FZ3BFX0mu4XQQHQGkk= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:21 2025 by rpki-client