$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa File: 7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa (raw, json) Hash identifier: h+4FD9WLNWNsHR/HxldozJvHtze5YFot5VciM5hcZvc= Subject key identifier: 87:EE:98:CA:F2:FE:79:D6:A8:03:65:BA:FC:07:EA:30:D9:7D:B3:2B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620220D0FE89FFF6BF29E3C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:20:d0:fe:89:ff:f6:bf:29:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=68cefdfb-f38b-44d0-8e66-0aac0a40cc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fd:ad:ce:7d:43:92:9e:49:98:d3:8c:40:67: 75:f4:7c:d0:b7:c8:69:78:3b:75:29:b6:d6:62:03: d9:95:ff:e1:a0:b5:da:49:90:99:87:df:70:6f:c6: 01:8b:54:f6:db:cd:11:bf:3e:8b:d5:cd:8e:7f:6f: 4c:d3:bc:b3:db:bf:9b:31:dd:3e:fc:17:1b:25:9c: f0:5b:e2:7e:62:e9:1c:cd:c8:c8:d8:1f:2b:85:31: 01:de:f8:e4:52:d0:28:db:91:c2:f8:c0:4b:37:95: 6f:3c:44:b3:e0:6b:d5:db:96:1e:d8:87:91:28:67: 34:13:81:77:f8:1e:22:5d:7d:d6:9d:0c:0b:18:31: 68:38:1f:e2:76:1c:0c:e0:56:37:13:ab:a6:67:41: fc:9c:ed:0b:76:84:88:ad:6c:cb:88:0d:43:fe:02: 9e:1f:1e:2f:05:9f:a2:26:c7:e1:58:6d:27:cf:a9: c6:2a:35:c7:5f:b1:8c:91:1d:40:fb:e0:60:b3:ee: ad:cb:55:7f:37:96:7b:5b:9e:fe:1e:e3:c1:06:92: fa:b4:ed:52:03:f6:3a:16:34:36:f7:f4:59:33:bc: 40:ff:68:98:13:ea:a2:6f:ef:95:c7:44:6f:32:09: 97:74:f1:d3:e0:05:ae:66:2a:20:ca:0c:36:65:f7: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EE:98:CA:F2:FE:79:D6:A8:03:65:BA:FC:07:EA:30:D9:7D:B3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7013f9a6-9e1a-3f3e-a1e7-46783b71aa68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:de:91:d4:0c:5c:6d:cb:0a:f9:af:8a:40:6d:eb:b5:03:94: 43:5f:6e:62:3c:9e:85:ca:af:82:ef:9b:d5:13:c3:3c:71:d4: 7c:d3:af:55:ea:7b:8c:a3:98:47:36:9e:b0:f5:04:e5:72:25: 60:e0:cf:6c:07:6b:29:b3:81:6d:3f:e9:98:8d:8f:50:7c:e2: 7b:8e:8c:a4:c8:1e:f9:f4:81:1e:f1:35:9a:ba:6c:be:81:5a: a5:66:cb:2a:1a:a8:f3:aa:af:3f:df:08:0d:1e:b6:e7:b6:38: fe:57:f8:b6:3a:e8:1a:af:d3:1c:30:b8:e8:50:56:5c:2e:76: 9e:bc:e4:6e:27:8a:ca:18:47:6d:6e:7d:1e:38:9e:80:0b:4e: ab:eb:ff:d7:05:ba:ab:7a:f8:d9:af:e8:2b:d4:de:b8:51:90: ec:ab:b5:40:7f:5e:3d:bf:a9:c0:0e:31:28:4a:14:15:8b:37: cd:3a:5a:f6:3a:43:23:cb:6b:43:64:1f:93:c2:72:aa:35:3f: 71:fd:83:70:8c:d1:0b:59:e5:ca:db:fa:99:76:fc:a2:de:d0: 40:6f:c0:18:28:57:d0:e6:10:f8:f9:58:01:65:c2:99:a6:fb: b5:22:62:8c:5d:3f:40:d2:22:f2:5e:1a:b1:ba:11:ab:84:8e: 3e:a9:26:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiDQ/on/9r8p48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjhjZWZkZmItZjM4Yi00NGQwLThlNjYtMGFhYzBhNDBjYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6f2tzn1Dkp5JmNOMQGd19HzQt8hpeDt1KbbW YgPZlf/hoLXaSZCZh99wb8YBi1T2280Rvz6L1c2Of29M07yz27+bMd0+/BcbJZzw W+J+YukczcjI2B8rhTEB3vjkUtAo25HC+MBLN5VvPESz4GvV25Ye2IeRKGc0E4F3 +B4iXX3WnQwLGDFoOB/idhwM4FY3E6umZ0H8nO0LdoSIrWzLiA1D/gKeHx4vBZ+i JsfhWG0nz6nGKjXHX7GMkR1A++Bgs+6ty1V/N5Z7W57+HuPBBpL6tO1SA/Y6FjQ2 9/RZM7xA/2iYE+qib++Vx0RvMgmXdPHT4AWuZiogygw2ZfcHSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfumMry/nnWqANluvwH6jDZfbMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzAxM2Y5YTYtOWUxYS0z ZjNlLWExZTctNDY3ODNiNzFhYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrekdQMXG3LCvmvikBt67UDlENfbmI8noXKr4Lvm9UTwzxx1HzTr1Xq e4yjmEc2nrD1BOVyJWDgz2wHaymzgW0/6ZiNj1B84nuOjKTIHvn0gR7xNZq6bL6B WqVmyyoaqPOqrz/fCA0etue2OP5X+LY66Bqv0xwwuOhQVlwudp685G4nisoYR21u fR44noALTqvr/9cFuqt6+Nmv6CvU3rhRkOyrtUB/Xj2/qcAOMShKFBWLN806WvY6 QyPLa0NkH5PCcqo1P3H9g3CM0QtZ5crb+pl2/KLe0EBvwBgoV9DmEPj5WAFlwpmm +7UiYoxdP0DSIvJeGrG6EauEjj6pJus= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:43 2025 by rpki-client