$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa File: a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa (raw, json) Hash identifier: 8GG780lOymeePH6hDo8HOojZDKjoPujZZluXWovILHk= Subject key identifier: 74:FE:6C:AD:00:35:37:1E:91:F3:B6:C7:A4:19:EF:7B:55:42:2F:77 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E4A41EF117227402BD80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e4:a4:1e:f1:17:22:74:02:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b7167b88-0b28-464f-9458-6b539000641a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:d2:28:14:2e:23:3d:93:81:17:34:97:b4: 64:68:a3:59:46:91:bc:ca:33:fa:b1:f6:7a:16:8b: f1:d3:45:ec:45:03:32:95:fa:be:85:7a:3e:76:c8: e3:39:f7:5f:bc:ff:04:46:7b:83:d5:79:f7:0c:b9: 93:91:67:d8:ef:cf:c1:98:45:5e:fe:0e:57:41:f8: cf:3e:e5:01:7d:94:35:51:af:11:0d:92:93:2e:15: 33:ca:f7:8e:ee:74:26:53:9f:a0:32:50:56:01:7f: ad:5f:5c:76:79:ff:c4:e7:6f:d1:a8:99:ba:e8:35: 2d:78:52:84:fb:b7:05:07:ae:fa:9b:00:f1:9a:72: 53:3e:7b:5e:75:c4:bb:44:2f:f1:ab:67:3b:36:02: a9:ba:66:03:ab:e1:eb:07:b8:0b:a1:9f:ce:2f:76: b4:33:1d:ce:0a:0d:77:81:6f:1c:95:5b:d1:bf:84: 72:9a:4a:43:6f:3f:c5:f6:3f:6a:ac:cb:56:b3:24: 74:d5:ed:8a:d4:91:5d:9e:21:a5:2c:d5:49:ea:50: 02:65:1d:f6:77:f6:16:47:49:35:5a:1f:82:7a:a1: d2:b9:a5:dd:8c:2b:ac:a9:c2:d5:43:54:47:51:6d: de:d2:c2:18:fb:3a:57:75:1e:be:3e:80:c0:96:0a: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FE:6C:AD:00:35:37:1E:91:F3:B6:C7:A4:19:EF:7B:55:42:2F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b3:08:dc:ff:8c:75:25:86:1a:06:47:83:84:18:44:e9:cd: 91:56:e1:f1:8f:35:32:d3:ae:96:80:6e:5e:c3:e9:8b:40:52: 9e:34:a0:41:7f:a1:36:81:8c:e1:26:ed:84:ef:73:1a:20:67: 3d:45:01:c8:c6:0a:b5:58:b6:c6:58:71:0d:86:71:89:97:67: 08:f8:8e:c2:c8:b8:4e:01:87:62:00:82:44:95:4d:74:36:be: 7d:c5:44:66:b0:5d:76:73:e7:75:a3:3e:ed:cd:9b:8e:8f:af: 0d:04:d1:91:96:10:e8:02:14:b0:88:6c:a3:e7:52:38:70:46: 90:3d:70:33:bd:74:0d:2c:27:f2:b4:e2:e2:99:39:23:98:ac: 23:12:b4:6c:e8:01:ad:4f:ef:e1:35:7c:3d:9e:ab:e9:dd:31: ca:d2:00:22:ef:64:0e:80:08:12:53:b1:fb:21:5d:79:c7:56: 8e:9d:40:35:55:af:a1:99:77:6a:f9:4f:8a:70:69:ee:f5:b2: 00:97:e9:8f:97:01:d0:62:63:77:c4:b0:dc:ac:8b:54:00:2f: 73:06:d9:d3:dc:d1:52:81:5f:0c:f3:49:3c:a4:79:30:2b:c4: f1:b7:33:74:4f:7c:ef:3a:d1:fb:d7:f8:8f:ca:52:41:35:6e: d7:b8:ca:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeSkHvEXInQCvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjcxNjdiODgtMGIyOC00NjRmLTk0NTgtNmI1MzkwMDA2NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE3SKBQuIz2TgRc0l7RkaKNZRpG8yjP6sfZ6 Fovx00XsRQMylfq+hXo+dsjjOfdfvP8ERnuD1Xn3DLmTkWfY78/BmEVe/g5XQfjP PuUBfZQ1Ua8RDZKTLhUzyveO7nQmU5+gMlBWAX+tX1x2ef/E52/RqJm66DUteFKE +7cFB676mwDxmnJTPntedcS7RC/xq2c7NgKpumYDq+HrB7gLoZ/OL3a0Mx3OCg13 gW8clVvRv4RymkpDbz/F9j9qrMtWsyR01e2K1JFdniGlLNVJ6lACZR32d/YWR0k1 Wh+CeqHSuaXdjCusqcLVQ1RHUW3e0sIY+zpXdR6+PoDAlgrPtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHT+bK0ANTcekfO2x6QZ73tVQi93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTFhZTFhNzctN2Y5OS0z YzJmLWE3ZjMtY2VlMTdjOTcwNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJezCNz/jHUlhhoGR4OEGETpzZFW4fGPNTLTrpaAbl7D6YtAUp40oEF/ oTaBjOEm7YTvcxogZz1FAcjGCrVYtsZYcQ2GcYmXZwj4jsLIuE4Bh2IAgkSVTXQ2 vn3FRGawXXZz53WjPu3Nm46Prw0E0ZGWEOgCFLCIbKPnUjhwRpA9cDO9dA0sJ/K0 4uKZOSOYrCMStGzoAa1P7+E1fD2eq+ndMcrSACLvZA6ACBJTsfshXXnHVo6dQDVV r6GZd2r5T4pwae71sgCX6Y+XAdBiY3fEsNysi1QAL3MG2dPc0VKBXwzzSTykeTAr xPG3M3RPfO860fvX+I/KUkE1bte4ysE= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:12 2025 by rpki-client