$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/852f197f-8ee8-3b2f-be94-916f32fe7e25.roa File: 852f197f-8ee8-3b2f-be94-916f32fe7e25.roa (raw, json) Hash identifier: fQQV4lraVU/mU4HjmfpzUuanuNSiMwZoJ72dEAazeVM= Subject key identifier: BB:4E:9A:E6:AE:52:2C:24:E7:EF:F3:EB:EC:19:A9:A8:AC:32:81:06 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620234361BCF5A3B25ECBB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/852f197f-8ee8-3b2f-be94-916f32fe7e25.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:34:36:1b:cf:5a:3b:25:ec:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=cf13c103-a0a1-4019-880a-d689f4c5d26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:87:49:6e:02:68:93:30:c5:69:ca:04:04: 41:c0:fd:a7:ba:66:d3:e1:22:be:31:6b:6b:1f:f3: 3f:50:dd:ca:a4:a2:a8:36:6f:cb:2e:09:ad:6c:e8: 60:69:2a:ac:30:4a:11:e1:80:49:d0:e5:3a:2d:87: ea:9c:b1:8f:51:62:d3:20:94:17:53:1b:04:92:9d: 7a:c9:2c:bb:68:af:c2:f0:c3:cb:00:80:0c:0c:e3: b6:7e:15:ec:f0:e9:85:24:26:d1:7a:1d:16:88:48: 0b:7a:4c:8a:63:fe:c8:fa:56:74:6c:ef:3a:56:6c: 99:9e:1d:dd:fb:18:06:ac:30:8c:37:f8:86:37:29: 2a:44:67:6a:17:e3:26:de:44:d8:59:18:38:65:6b: 12:f3:c4:de:4e:d6:87:ce:a2:0a:2b:bc:4b:57:2a: 63:de:2e:a6:5d:60:6d:f3:b4:4f:4c:e5:82:aa:00: e3:d2:92:8e:81:1e:75:3d:42:93:3e:80:ef:0b:7a: f6:d7:f1:62:72:c3:c4:b4:a7:6e:6d:4d:ce:07:e8: e1:49:d5:c3:39:e9:47:a4:b8:d6:77:0e:3e:82:04: 1c:46:c0:ce:e2:11:ab:cd:e9:e0:fe:f9:0f:66:64: b0:69:c6:55:20:05:1d:ab:51:c6:2b:16:94:9d:a1: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4E:9A:E6:AE:52:2C:24:E7:EF:F3:EB:EC:19:A9:A8:AC:32:81:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/852f197f-8ee8-3b2f-be94-916f32fe7e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c7:58:73:ff:a7:f2:8b:c4:33:db:d5:6b:03:9f:95:22:2e: 5b:c0:91:01:44:40:ab:b8:fd:db:3f:bf:c8:b5:26:20:c4:98: b7:3b:bb:b4:66:ea:d5:4b:b1:32:85:2f:f5:9a:ff:98:e5:5d: 9e:88:ab:87:1f:ef:8e:6a:4d:9d:8d:77:02:12:94:16:aa:2a: b9:cc:de:4e:63:d0:fd:fc:58:8d:1e:d6:ab:51:e1:26:08:a9: cb:3e:f0:e3:a7:f4:dc:c2:25:32:75:a6:14:cc:70:c8:9e:23: 55:27:d4:a4:48:fa:b3:20:0f:6a:c8:64:ec:00:aa:fe:24:99: 2d:9b:20:16:78:83:22:a1:87:68:9f:48:a7:b6:bb:f0:08:0b: ad:3f:36:dc:4a:64:17:b1:9b:80:4b:49:43:89:ef:86:85:ef: 85:44:89:2b:b5:ab:02:f1:63:b8:ec:5d:9a:2f:26:f2:92:9a: 0d:1c:53:a4:94:30:21:d4:f5:fe:d1:00:43:2e:09:d9:ab:51: 7c:1e:6f:83:13:f1:01:c6:dd:7a:6c:84:b6:7a:79:65:78:76: 44:17:ec:fd:a6:62:5d:1d:54:1a:02:5a:f6:62:9d:6a:a6:7b: 73:fa:e6:78:9b:b5:3f:97:4b:2d:6b:38:b8:18:cc:bb:2d:94: 5a:51:e9:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjQ2G89aOyXsu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2YxM2MxMDMtYTBhMS00MDE5LTg4MGEtZDY4OWY0YzVkMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieSHSW4CaJMwxWnKBARBwP2numbT4SK+MWtr H/M/UN3KpKKoNm/LLgmtbOhgaSqsMEoR4YBJ0OU6LYfqnLGPUWLTIJQXUxsEkp16 ySy7aK/C8MPLAIAMDOO2fhXs8OmFJCbReh0WiEgLekyKY/7I+lZ0bO86VmyZnh3d +xgGrDCMN/iGNykqRGdqF+Mm3kTYWRg4ZWsS88TeTtaHzqIKK7xLVypj3i6mXWBt 87RPTOWCqgDj0pKOgR51PUKTPoDvC3r21/FicsPEtKdubU3OB+jhSdXDOelHpLjW dw4+ggQcRsDO4hGrzeng/vkPZmSwacZVIAUdq1HGKxaUnaGSNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtOmuauUiwk5+/z6+wZqaisMoEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODUyZjE5N2YtOGVlOC0z YjJmLWJlOTQtOTE2ZjMyZmU3ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvHWHP/p/KLxDPb1WsDn5UiLlvAkQFEQKu4/ds/v8i1JiDEmLc7u7Rm 6tVLsTKFL/Wa/5jlXZ6Iq4cf745qTZ2NdwISlBaqKrnM3k5j0P38WI0e1qtR4SYI qcs+8OOn9NzCJTJ1phTMcMieI1Un1KRI+rMgD2rIZOwAqv4kmS2bIBZ4gyKhh2if SKe2u/AIC60/NtxKZBexm4BLSUOJ74aF74VEiSu1qwLxY7jsXZovJvKSmg0cU6SU MCHU9f7RAEMuCdmrUXweb4MT8QHG3XpshLZ6eWV4dkQX7P2mYl0dVBoCWvZinWqm e3P65nibtT+XSy1rOLgYzLstlFpR6TE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:43 2025 by rpki-client