$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8b2af232-5d2c-3804-9ceb-5daa6472bc30.roa File: 8b2af232-5d2c-3804-9ceb-5daa6472bc30.roa (raw, json) Hash identifier: 0H6usG6iSi6OMQMoynktJ7x3qn5KEAmRTfjMQ/IDdqo= Subject key identifier: 11:A6:50:84:0C:B2:01:81:77:E8:7E:5E:2E:61:65:78:8A:BC:5F:4D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D56AF8B12ADBB51C9680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8b2af232-5d2c-3804-9ceb-5daa6472bc30.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d5:6a:f8:b1:2a:db:b5:1c:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=6d5be9ae-6b44-4b2b-a416-087965690ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:6a:cb:20:15:bb:ab:47:32:93:3e:aa:5f: d6:e9:99:37:31:35:0f:cc:20:f7:89:61:d4:7f:b9: 16:5a:c3:27:cb:92:cc:02:72:50:7d:42:4c:86:f5: 03:04:2c:d3:b3:ea:c5:d0:e0:38:96:93:24:f3:91: 30:c6:7a:72:94:bd:75:e2:a9:87:2b:a3:ee:c9:7b: 38:18:ed:06:95:33:4b:cd:8e:6d:47:c6:02:b4:d3: b7:20:c9:0a:9b:61:3a:21:92:c1:7b:25:56:a7:27: 10:7b:68:c3:11:d3:df:80:dc:1a:38:48:00:c8:9e: 92:95:46:bf:a2:1f:a2:30:e1:fb:62:8d:e0:98:92: 3b:8e:d0:f8:1a:c8:9d:d4:39:bc:04:c2:b7:6e:f1: c6:25:01:50:85:a1:6c:03:2d:0f:df:1c:61:36:47: 72:ff:57:80:f6:cc:2a:cb:c1:da:df:05:7e:41:04: 27:a0:62:3e:6f:1e:05:f8:bd:c6:b0:ed:05:4d:4c: 93:72:c7:7f:1a:be:1e:bb:a5:d4:ab:c9:02:bb:96: e3:9f:d3:c4:14:fa:86:71:83:dd:39:12:84:16:14: 18:6f:cb:00:3b:48:98:2b:e8:64:76:e6:54:53:da: c9:09:20:a6:7c:f4:7b:a0:9c:fc:1e:7a:76:2b:8e: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A6:50:84:0C:B2:01:81:77:E8:7E:5E:2E:61:65:78:8A:BC:5F:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8b2af232-5d2c-3804-9ceb-5daa6472bc30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:57:88:fa:ac:c6:ae:5f:51:3e:fe:62:db:56:7a:f9:a9:12: 67:b9:6c:0d:61:39:a3:80:37:35:f6:20:aa:75:50:ec:17:0b: dc:36:86:b0:3c:05:6b:81:7b:6d:e7:55:2f:3b:c7:a2:91:63: 67:88:b2:cb:77:a1:e6:eb:18:79:09:35:d5:ad:04:65:5f:ca: 09:d4:1f:1f:03:fb:81:ad:b3:16:fd:36:76:8a:8e:3e:1d:18: 70:17:d1:f8:e5:af:9c:07:1e:e7:2f:31:bd:57:d8:ed:77:60: d3:c3:a3:a0:e4:4e:bb:bd:17:79:fe:9b:33:0d:22:7e:9b:fe: bd:e1:9d:02:57:aa:cb:ae:90:9f:5c:7b:c8:7a:b3:57:ac:a4: da:00:2c:e0:c5:c4:4e:26:69:08:c1:a9:f2:0a:68:d5:3a:2f: 20:71:10:e8:94:2c:c8:38:11:89:45:34:18:12:84:0c:2f:e9: a5:b4:0e:28:a5:a4:49:3c:c0:72:1f:a0:c5:6f:7c:15:5f:95: 7f:cc:51:e5:b2:b4:84:53:b2:d6:8d:ef:4b:25:7b:ee:a0:6a: 3d:95:db:73:e1:f7:2a:bc:4c:08:b1:0d:5e:20:d5:98:3e:04: af:58:9f:91:bc:c0:8c:19:14:17:4b:6f:f8:66:3d:50:5f:6b: 6b:f5:4f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdVq+LEq27UcloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NmQ1YmU5YWUtNmI0NC00YjJiLWE0MTYtMDg3OTY1NjkwZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyatqyyAVu6tHMpM+ql/W6Zk3MTUPzCD3iWHU f7kWWsMny5LMAnJQfUJMhvUDBCzTs+rF0OA4lpMk85EwxnpylL114qmHK6PuyXs4 GO0GlTNLzY5tR8YCtNO3IMkKm2E6IZLBeyVWpycQe2jDEdPfgNwaOEgAyJ6SlUa/ oh+iMOH7Yo3gmJI7jtD4Gsid1Dm8BMK3bvHGJQFQhaFsAy0P3xxhNkdy/1eA9swq y8Ha3wV+QQQnoGI+bx4F+L3GsO0FTUyTcsd/Gr4eu6XUq8kCu5bjn9PEFPqGcYPd ORKEFhQYb8sAO0iYK+hkduZUU9rJCSCmfPR7oJz8Hnp2K45AvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGmUIQMsgGBd+h+Xi5hZXiKvF9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGIyYWYyMzItNWQyYy0z ODA0LTljZWItNWRhYTY0NzJiYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVXiPqsxq5fUT7+YttWevmpEme5bA1hOaOANzX2IKp1UOwXC9w2hrA8 BWuBe23nVS87x6KRY2eIsst3oebrGHkJNdWtBGVfygnUHx8D+4Gtsxb9NnaKjj4d GHAX0fjlr5wHHucvMb1X2O13YNPDo6DkTru9F3n+mzMNIn6b/r3hnQJXqsuukJ9c e8h6s1espNoALODFxE4maQjBqfIKaNU6LyBxEOiULMg4EYlFNBgShAwv6aW0Diil pEk8wHIfoMVvfBVflX/MUeWytIRTstaN70sle+6gaj2V23Ph9yq8TAixDV4g1Zg+ BK9Yn5G8wIwZFBdLb/hmPVBfa2v1T+Q= -----END CERTIFICATE-----Generated at Fri Oct 10 22:21:54 2025 by rpki-client