$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c2bd6c5-485b-3f20-add0-f4651e7c97d9.roa File: 7c2bd6c5-485b-3f20-add0-f4651e7c97d9.roa (raw, json) Hash identifier: tmCxPjRa+iIaICmvmtR5+6yDdJ3ANw3OuuGmUHln9nY= Subject key identifier: 29:EA:40:27:52:27:B5:7E:66:A5:8C:02:1C:07:C0:D0:17:84:D3:D8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E91C7F568B3DB004A100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c2bd6c5-485b-3f20-add0-f4651e7c97d9.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e9:1c:7f:56:8b:3d:b0:04:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4fe30d0b-d8b8-43ef-90b0-cf1f3a2ebf6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:32:55:7a:62:d6:bf:c8:2d:ce:31:3c:12:fe: b0:07:92:27:4a:bb:88:d2:10:93:ae:cd:69:e3:98: 1b:aa:34:25:db:9e:36:4c:73:c1:48:55:53:f0:25: 34:26:19:c8:42:c1:b2:ac:2b:6f:44:f2:89:77:39: 67:77:3e:96:3d:75:17:a4:19:39:32:88:ab:c2:7b: 93:c3:82:df:a9:4f:4f:50:8f:a9:c6:db:00:79:46: 45:33:c4:1f:29:fd:4b:ed:27:e5:67:0a:4e:2c:91: 74:b8:02:f2:bd:b3:a1:36:8f:ec:bc:95:df:fa:c9: cd:25:4a:9b:57:2a:6e:8d:ff:a8:3e:0a:49:b0:eb: a3:75:43:84:27:4c:3d:1d:d6:61:4a:e7:f1:92:04: ce:92:02:98:28:d1:b0:bc:4a:9c:8b:8d:b9:61:e7: 45:c6:38:37:12:0b:af:36:3f:2e:0e:73:46:d0:95: e0:1c:44:b8:3f:26:81:2f:8c:a2:1f:c7:be:1c:23: 46:19:0f:f1:10:33:5e:26:9b:36:52:98:3b:29:b1: c6:c6:0a:7c:fa:01:23:70:b2:ea:2c:3c:f6:66:09: 68:97:26:b6:14:7d:69:0e:c5:6d:2b:b9:af:7e:70: cc:aa:97:07:15:f8:25:fc:79:38:ff:ce:b5:30:51: e7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EA:40:27:52:27:B5:7E:66:A5:8C:02:1C:07:C0:D0:17:84:D3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c2bd6c5-485b-3f20-add0-f4651e7c97d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:93:6e:ae:6f:52:91:a7:59:96:9b:77:f1:e1:0c:06:44:b7: 51:55:38:3c:87:8d:31:03:8b:84:99:21:58:de:f9:af:f5:e4: 8b:98:e0:ca:2b:7f:4d:38:02:cb:f1:d5:f5:a8:47:1f:a1:d9: c4:c1:26:de:47:24:03:64:26:c4:fd:29:4c:4b:90:96:5c:8b: eb:5b:77:5f:0d:23:2a:f4:43:ad:25:7c:e6:e2:7d:e0:54:b5: 79:9a:75:1b:36:44:94:a6:83:18:40:90:79:31:79:4d:da:ec: 14:b7:4a:ba:80:71:e2:2a:fb:be:1d:30:a9:b9:4f:7d:38:5e: 9b:b1:ee:1a:76:b1:07:21:52:00:ac:d9:02:79:7e:ef:55:11: 62:9a:29:de:67:94:05:47:28:6a:f1:ac:9d:8b:c7:32:37:14: 79:6a:e1:55:04:e0:21:6e:b4:9d:56:70:d1:0d:02:d7:8a:10: 98:ef:a1:df:0b:80:a9:6c:8c:b5:f2:ee:9f:a9:3e:cb:bf:13: 61:53:4b:b9:83:f3:b7:c4:45:ca:1c:ce:c0:2a:b6:8a:08:16: f6:54:51:fa:ff:b4:e3:21:d3:66:79:90:63:62:f5:2d:21:ba: 41:1b:63:6a:ec:e5:8c:8a:75:dd:81:d2:84:23:da:15:4c:87: 09:7e:70:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAekcf1aLPbAEoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGZlMzBkMGItZDhiOC00M2VmLTkwYjAtY2YxZjNhMmViZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TJVemLWv8gtzjE8Ev6wB5InSruI0hCTrs1p 45gbqjQl2542THPBSFVT8CU0JhnIQsGyrCtvRPKJdzlndz6WPXUXpBk5MoirwnuT w4LfqU9PUI+pxtsAeUZFM8QfKf1L7SflZwpOLJF0uALyvbOhNo/svJXf+snNJUqb Vypujf+oPgpJsOujdUOEJ0w9HdZhSufxkgTOkgKYKNGwvEqci425YedFxjg3Eguv Nj8uDnNG0JXgHES4PyaBL4yiH8e+HCNGGQ/xEDNeJps2Upg7KbHGxgp8+gEjcLLq LDz2Zglolya2FH1pDsVtK7mvfnDMqpcHFfgl/Hk4/861MFHnDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnqQCdSJ7V+ZqWMAhwHwNAXhNPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2MyYmQ2YzUtNDg1Yi0z ZjIwLWFkZDAtZjQ2NTFlN2M5N2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKTbq5vUpGnWZabd/HhDAZEt1FVODyHjTEDi4SZIVje+a/15IuY4Mor f004Asvx1fWoRx+h2cTBJt5HJANkJsT9KUxLkJZci+tbd18NIyr0Q60lfObifeBU tXmadRs2RJSmgxhAkHkxeU3a7BS3SrqAceIq+74dMKm5T304Xpux7hp2sQchUgCs 2QJ5fu9VEWKaKd5nlAVHKGrxrJ2LxzI3FHlq4VUE4CFutJ1WcNENAteKEJjvod8L gKlsjLXy7p+pPsu/E2FTS7mD87fERcoczsAqtooIFvZUUfr/tOMh02Z5kGNi9S0h ukEbY2rs5YyKdd2B0oQj2hVMhwl+cN8= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:09 2025 by rpki-client