$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa File: a32b982b-80c0-30f4-9738-db8d8a2a0644.roa (raw, json) Hash identifier: CFh7YdvaFqJ7DpV+Hos6ILKh737hXx5DQUoM4oXh9dQ= Subject key identifier: 1D:E5:1A:DE:24:4E:93:7F:17:7E:FC:E4:FA:89:A8:01:81:E2:D9:CD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202037F0DC3EA067EBB6360 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:03:7f:0d:c3:ea:06:7e:bb:63:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=cd8d343e-214a-4e72-8dff-44993da7c698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:a9:d1:7b:b8:cd:00:fe:d1:73:a3:2a:6f: 87:22:25:09:a8:d3:8c:a6:4e:47:d5:37:c6:96:62: 9b:b6:8d:a2:a9:12:39:6a:30:ce:4e:b2:43:e9:17: d9:65:1a:1b:c7:df:72:e9:6d:0b:82:f0:52:eb:45: 0a:30:e7:f5:68:18:59:b5:3b:3b:e7:a3:2b:8e:74: 7e:92:7f:bd:ab:e9:ae:74:e1:f3:29:91:51:68:f6: e8:af:e0:4b:0e:51:9c:24:e5:e8:46:9c:92:7f:f2: 49:35:53:e4:ca:07:4f:04:42:4b:f6:e2:bb:36:a8: 63:b2:d3:0c:ef:cd:b4:81:17:8b:a1:78:0b:7c:b6: a7:03:86:33:30:d7:2d:3d:2c:3a:90:c7:3f:e5:6c: 20:36:01:f4:12:71:74:5e:36:8e:9b:82:2c:fe:38: 8f:d9:ad:02:ea:cb:c8:72:23:64:40:76:3f:bf:70: 93:26:05:1a:60:7b:4b:06:90:00:49:70:12:7b:24: a0:85:11:06:d4:e6:8d:20:25:a0:31:94:65:e0:5f: f5:e9:6a:e4:bc:1d:c4:aa:d7:45:1f:c2:b5:78:52: bf:fc:76:52:64:67:a0:cf:80:e2:32:c7:d6:2a:b6: d9:42:62:44:e6:6f:7b:b1:e3:f0:b3:c5:cc:37:98: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E5:1A:DE:24:4E:93:7F:17:7E:FC:E4:FA:89:A8:01:81:E2:D9:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:57:51:3c:cf:09:4a:3b:66:3e:15:6c:79:af:1c:d6:df:d8: 66:03:1e:7a:97:d9:a6:0c:fc:28:8d:11:61:3a:d7:44:39:66: b1:5e:c1:41:57:7f:5a:0f:0b:e3:4d:8a:be:56:c2:fb:69:01: 25:94:70:0b:92:09:2f:14:9b:c2:3d:89:5e:ea:e6:e1:00:52: e4:b3:a5:1b:c8:81:3a:54:9e:e3:5a:2d:29:66:01:43:61:6e: f1:70:95:07:ee:af:46:70:ba:cd:8b:de:f3:68:8e:1d:d7:d7: c1:69:91:cd:36:b2:24:2f:f7:c0:e4:d7:7d:1b:0f:88:ba:8b: a5:77:4a:58:4b:7c:6a:7c:dd:f7:2a:a8:41:fa:6b:9e:d0:fa: bd:03:74:c0:d8:c4:e7:b5:f9:50:d1:d9:05:4d:04:a7:6d:e9: c7:29:58:57:25:17:84:71:9b:86:e8:7d:aa:dc:9c:ad:da:46: 6a:83:d7:c8:a0:7c:1a:c5:50:cc:0f:97:ea:1b:6d:25:a1:58: e0:51:7f:0d:18:c3:81:c3:78:69:06:e5:8b:82:32:0d:bd:06: a3:03:2e:c9:16:34:33:a2:22:ba:f0:0a:bd:35:0d:56:71:d2: 88:0a:11:92:0f:61:fc:4b:fd:ad:4c:57:8b:c0:0e:b1:50:17: de:c2:e3:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgN/DcPqBn67Y2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2Q4ZDM0M2UtMjE0YS00ZTcyLThkZmYtNDQ5OTNkYTdjNjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwKp0Xu4zQD+0XOjKm+HIiUJqNOMpk5H1TfG lmKbto2iqRI5ajDOTrJD6RfZZRobx99y6W0LgvBS60UKMOf1aBhZtTs756MrjnR+ kn+9q+mudOHzKZFRaPbor+BLDlGcJOXoRpySf/JJNVPkygdPBEJL9uK7NqhjstMM 7820gReLoXgLfLanA4YzMNctPSw6kMc/5WwgNgH0EnF0XjaOm4Is/jiP2a0C6svI ciNkQHY/v3CTJgUaYHtLBpAASXASeySghREG1OaNICWgMZRl4F/16WrkvB3EqtdF H8K1eFK//HZSZGegz4DiMsfWKrbZQmJE5m97sePws8XMN5iJywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3lGt4kTpN/F3785PqJqAGB4tnNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTMyYjk4MmItODBjMC0z MGY0LTk3MzgtZGI4ZDhhMmEwNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtXUTzPCUo7Zj4VbHmvHNbf2GYDHnqX2aYM/CiNEWE610Q5ZrFewUFX f1oPC+NNir5WwvtpASWUcAuSCS8Um8I9iV7q5uEAUuSzpRvIgTpUnuNaLSlmAUNh bvFwlQfur0Zwus2L3vNojh3X18Fpkc02siQv98Dk130bD4i6i6V3SlhLfGp83fcq qEH6a57Q+r0DdMDYxOe1+VDR2QVNBKdt6ccpWFclF4Rxm4bofarcnK3aRmqD18ig fBrFUMwPl+obbSWhWOBRfw0Yw4HDeGkG5YuCMg29BqMDLskWNDOiIrrwCr01DVZx 0ogKEZIPYfxL/a1MV4vADrFQF97C460= -----END CERTIFICATE-----Generated at Fri Oct 10 19:47:37 2025 by rpki-client