$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8491e89a-6ad1-3019-82e9-d0adc0afde9f.roa File: 8491e89a-6ad1-3019-82e9-d0adc0afde9f.roa (raw, json) Hash identifier: osI8GddmeL1fsFM/3E6G8gHllDydEt3Y7TOAPSQUDYM= Subject key identifier: AB:4F:FE:94:C0:3C:D5:3A:32:C7:1C:B0:31:40:40:5E:1E:EE:A1:D6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620207EA6CF7B97F0AFA8180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8491e89a-6ad1-3019-82e9-d0adc0afde9f.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:07:ea:6c:f7:b9:7f:0a:fa:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9b50af0f-e4cb-4d3e-be86-e432ad891a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:73:32:6d:c0:84:b6:c6:8c:b2:7f:94:2c: 6c:fb:47:42:41:0a:b7:94:47:d6:98:bc:20:24:bc: 06:4c:8e:d9:99:43:4a:33:c4:71:91:8a:a2:2b:d0: 7f:98:65:31:1c:18:3d:0d:e7:0e:ae:4b:69:33:67: ed:e1:69:fd:c1:2b:e6:96:11:28:16:51:20:54:d2: ad:e4:a8:59:cf:2b:a6:a0:71:a7:2e:f2:b7:9a:45: 41:92:ed:59:67:04:e4:86:12:8d:93:c7:c6:99:b5: 2e:0f:19:ef:76:01:37:ce:0f:35:52:6a:65:3a:d8: 2d:11:fb:88:57:74:c9:ee:db:52:d1:09:0e:60:26: 04:b4:59:9d:9f:7f:31:18:42:c8:51:41:99:d1:5e: 71:60:49:0e:bc:9a:eb:62:ac:4a:1f:d8:9e:ce:48: 36:ec:e6:8a:e9:43:a6:cf:f8:df:9a:32:7b:6f:dd: 6f:b0:48:9f:9e:66:f5:52:f4:ea:ab:b0:7c:0c:75: b7:86:f8:5c:97:52:a4:e9:74:87:e9:88:79:d1:9e: b5:19:09:9f:62:55:7d:5c:7d:39:97:2c:9c:2a:db: b3:ca:1a:58:38:fd:a6:a4:66:29:22:6d:2d:a2:e3: 2d:a3:f0:85:3c:2d:19:71:e7:7e:f5:eb:a0:d4:7a: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4F:FE:94:C0:3C:D5:3A:32:C7:1C:B0:31:40:40:5E:1E:EE:A1:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8491e89a-6ad1-3019-82e9-d0adc0afde9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b1:16:b8:7b:6d:98:8e:25:a0:30:5f:32:ae:cb:30:36:c3: c1:11:89:ce:2b:de:7b:ba:42:8a:f0:a6:78:87:d2:f1:74:d6: 37:db:a7:c0:16:5c:eb:70:bf:de:20:d1:55:5c:df:28:3f:f9: 17:11:4d:77:96:b0:e4:c7:20:1e:7f:73:af:57:09:6b:38:52: 8d:af:b5:23:bf:7c:c4:02:9b:63:c5:8c:52:4d:5d:84:53:11: 3c:87:11:ac:e7:70:e2:69:f3:fc:0c:5f:58:49:ad:a5:ea:58: 68:29:f1:a9:52:77:a3:9a:0c:6a:ef:ae:51:ef:4c:61:0f:f1: 1a:b0:aa:60:72:3d:84:0b:44:90:65:ee:e2:36:06:89:26:d8: 07:9d:14:64:2d:cb:b5:23:0d:5e:40:2f:71:bd:05:ae:2e:94: 2b:c0:e1:64:67:b3:de:32:bf:31:46:02:01:15:a9:ef:82:33: fa:ad:ae:67:a7:1c:30:b6:e0:d1:f0:57:e1:0e:91:c0:96:0d: 02:de:b9:ca:2a:1d:03:aa:ed:7c:72:c7:6f:7d:44:ab:89:5c: ec:be:25:53:b0:91:c4:b7:cd:4c:84:d3:a0:d7:cb:92:89:1d: 59:bf:b7:04:3f:55:a7:7d:6f:6b:85:12:0f:6b:45:b8:21:fa: 00:94:e4:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgfqbPe5fwr6gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWI1MGFmMGYtZTRjYi00ZDNlLWJlODYtZTQzMmFkODkxYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYtzMm3AhLbGjLJ/lCxs+0dCQQq3lEfWmLwg JLwGTI7ZmUNKM8RxkYqiK9B/mGUxHBg9DecOrktpM2ft4Wn9wSvmlhEoFlEgVNKt 5KhZzyumoHGnLvK3mkVBku1ZZwTkhhKNk8fGmbUuDxnvdgE3zg81UmplOtgtEfuI V3TJ7ttS0QkOYCYEtFmdn38xGELIUUGZ0V5xYEkOvJrrYqxKH9iezkg27OaK6UOm z/jfmjJ7b91vsEifnmb1UvTqq7B8DHW3hvhcl1Kk6XSH6Yh50Z61GQmfYlV9XH05 lyycKtuzyhpYOP2mpGYpIm0touMto/CFPC0Zced+9eug1HoX9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtP/pTAPNU6MsccsDFAQF4e7qHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODQ5MWU4OWEtNmFkMS0z MDE5LTgyZTktZDBhZGMwYWZkZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSxFrh7bZiOJaAwXzKuyzA2w8ERic4r3nu6QorwpniH0vF01jfbp8AW XOtwv94g0VVc3yg/+RcRTXeWsOTHIB5/c69XCWs4Uo2vtSO/fMQCm2PFjFJNXYRT ETyHEazncOJp8/wMX1hJraXqWGgp8alSd6OaDGrvrlHvTGEP8RqwqmByPYQLRJBl 7uI2Bokm2AedFGQty7UjDV5AL3G9Ba4ulCvA4WRns94yvzFGAgEVqe+CM/qtrmen HDC24NHwV+EOkcCWDQLeucoqHQOq7Xxyx299RKuJXOy+JVOwkcS3zUyE06DXy5KJ HVm/twQ/Vad9b2uFEg9rRbgh+gCU5Ck= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:42 2025 by rpki-client