$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa File: 820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa (raw, json) Hash identifier: lBHFbPHc2ZuUisdkhx42t9UpfGQzh1eWJhv9eh4CB9s= Subject key identifier: F1:93:97:37:BA:9A:1C:15:22:CA:0B:CD:CA:B7:13:8B:65:52:26:E9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202313A4A3AA6BA3A831BC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:31:3a:4a:3a:a6:ba:3a:83:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=7a1e110b-959a-47ce-a90f-be1e9a17a865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:47:c3:e8:fa:0d:ad:f4:5d:c8:03:66:20: e6:5e:64:30:9b:f9:be:7d:11:23:3a:a5:46:49:e3: 40:9c:3b:4f:a3:59:34:db:a6:0d:fc:83:92:8f:f6: 9f:a1:86:ed:b3:a3:bb:3d:87:a5:db:64:71:88:f0: 3b:1c:92:f8:3f:c9:15:e0:ae:da:e2:6f:14:83:ef: a6:e8:3c:16:b3:b2:df:37:c7:6b:fa:e4:ce:33:5a: d6:cd:64:f3:93:f3:d9:20:1a:28:a6:03:35:eb:32: 61:bc:41:14:9b:34:b9:4e:49:4e:20:a1:cf:f3:25: a1:45:a1:e8:44:7a:b6:1b:2a:71:f5:cc:02:00:28: 66:b7:d5:42:6f:09:51:89:13:01:fc:cd:b9:d7:ac: 81:e9:d9:03:77:5f:e3:04:ac:db:4d:50:f7:31:54: 1a:ee:70:87:a0:4a:68:21:ca:7a:81:64:22:25:d8: 14:64:ef:86:f5:cf:ea:18:2b:93:23:ea:86:3d:15: 42:32:77:ef:d2:b4:ff:69:fa:3a:37:df:63:80:22: e1:67:5e:3e:28:b6:af:eb:99:85:43:fb:cd:9b:31: bf:6b:23:6c:2e:50:49:b6:a5:da:ea:06:94:e6:1d: 73:f4:fe:6e:e6:8f:79:6f:c7:51:26:74:93:83:b8: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:93:97:37:BA:9A:1C:15:22:CA:0B:CD:CA:B7:13:8B:65:52:26:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:13:71:c2:65:ac:80:81:57:91:7e:b5:67:35:2b:a0:50:af: cc:c1:da:f5:6e:56:5f:5d:c2:79:22:da:3d:0d:02:2e:d9:a2: df:e1:b6:c4:44:52:38:82:1b:76:41:c6:62:9c:83:44:db:9b: d6:f4:27:2e:8a:1d:bb:38:45:23:5f:54:d1:8f:4e:31:66:23: 9d:84:d9:63:dc:38:c5:b2:74:9e:15:63:b8:34:a5:21:15:b7: 96:67:fd:d5:ad:64:f3:90:8a:3f:50:84:d1:5a:2a:d8:6f:a8: 71:30:3a:c6:c0:55:d7:4d:79:8b:aa:bb:2b:61:6c:4f:d6:6e: 76:47:45:c4:06:ab:e3:9e:b1:f9:cd:f9:ed:05:ef:6d:70:5f: 37:1f:54:d4:2e:f5:3a:eb:e9:33:a0:05:77:a2:0c:00:e7:e0: ad:92:be:21:37:f2:e8:fa:06:1f:dd:e3:4c:17:d3:03:c5:57: a1:de:30:00:5c:0d:53:30:58:2d:87:8a:a1:32:94:ee:7b:ed: f7:80:f7:c3:79:be:bb:50:fd:68:cd:5f:09:25:2e:06:65:78: 28:79:9d:05:4c:2d:e1:28:79:33:9e:99:63:53:2d:b1:e5:8f: 80:34:99:b8:ce:aa:84:8e:74:8e:5b:63:9b:db:6d:57:a8:77: 49:e0:c3:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjE6SjqmujqDG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk N2ExZTExMGItOTU5YS00N2NlLWE5MGYtYmUxZTlhMTdhODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHRHw+j6Da30XcgDZiDmXmQwm/m+fREjOqVG SeNAnDtPo1k026YN/IOSj/afoYbts6O7PYel22RxiPA7HJL4P8kV4K7a4m8Ug++m 6DwWs7LfN8dr+uTOM1rWzWTzk/PZIBoopgM16zJhvEEUmzS5TklOIKHP8yWhRaHo RHq2Gypx9cwCAChmt9VCbwlRiRMB/M2516yB6dkDd1/jBKzbTVD3MVQa7nCHoEpo Icp6gWQiJdgUZO+G9c/qGCuTI+qGPRVCMnfv0rT/afo6N99jgCLhZ14+KLav65mF Q/vNmzG/ayNsLlBJtqXa6gaU5h1z9P5u5o95b8dRJnSTg7jTfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGTlze6mhwVIsoLzcq3E4tlUibpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODIwYzE3ZDUtYWQzMS0z NDU4LWI5ZDYtY2UwZmUxNDNhMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJITccJlrICBV5F+tWc1K6BQr8zB2vVuVl9dwnki2j0NAi7Zot/htsRE UjiCG3ZBxmKcg0Tbm9b0Jy6KHbs4RSNfVNGPTjFmI52E2WPcOMWydJ4VY7g0pSEV t5Zn/dWtZPOQij9QhNFaKthvqHEwOsbAVddNeYuquythbE/WbnZHRcQGq+OesfnN +e0F721wXzcfVNQu9Trr6TOgBXeiDADn4K2SviE38uj6Bh/d40wX0wPFV6HeMABc DVMwWC2HiqEylO577feA98N5vrtQ/WjNXwklLgZleCh5nQVMLeEoeTOemWNTLbHl j4A0mbjOqoSOdI5bY5vbbVeod0ngw8Y= -----END CERTIFICATE-----Generated at Sat Oct 11 00:02:10 2025 by rpki-client