$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa File: a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa (raw, json) Hash identifier: hopNZeL5XDVCQdchZmcck9qmb+dDIKqe8AlwUwBfL60= Subject key identifier: 56:B5:B7:D3:66:69:BF:12:FF:FA:60:15:67:A1:F1:6D:F0:A1:72:C8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620229450B52476BBD6ABA5A Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:29:45:0b:52:47:6b:bd:6a:ba:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=e88d507d-a154-478f-8c8c-4f387bf470ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:55:49:e0:30:17:75:97:ad:4b:ab:4a:4d: fb:0a:cf:6b:4d:26:75:f1:b3:9e:6c:1e:ca:f2:28: cd:d1:54:24:8f:f4:ef:0f:66:69:45:00:92:db:e2: ac:15:1f:71:86:48:5c:27:a3:95:be:e5:3f:c2:30: 11:c6:3c:b5:c6:14:81:8d:7a:d1:4d:a5:27:bc:6c: ba:50:06:e0:ab:88:2b:8a:93:46:aa:ff:3a:f7:47: d6:48:01:7e:40:51:33:78:79:9d:09:d5:b0:af:e6: c5:05:6d:35:93:d4:35:7c:5c:98:74:df:20:d3:99: 2e:8d:8f:eb:b3:fa:b6:e8:d8:19:c9:6e:a8:5e:8d: ba:a7:47:53:87:9a:5e:0c:4c:24:29:67:92:16:77: b2:ac:82:24:c0:b1:bc:76:56:4a:fd:fe:82:85:e7: f5:34:61:c6:da:14:ed:93:de:c5:48:ef:04:bc:37: a6:1f:2d:c7:89:41:c7:8b:0c:60:f7:dd:db:33:c6: 0e:66:7a:df:5c:ce:fe:4e:10:98:e5:89:b4:a4:bb: 88:12:b7:df:d6:2b:cd:b2:9e:c5:67:c9:74:e8:8c: 7e:ba:da:9a:28:5c:ca:74:4e:7b:ad:47:81:ac:52: 48:c4:ab:55:52:7f:50:e3:7e:ee:11:17:c4:87:3d: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B5:B7:D3:66:69:BF:12:FF:FA:60:15:67:A1:F1:6D:F0:A1:72:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:46:27:c5:d9:9f:9c:a9:89:33:a2:b5:da:1e:ca:a5:4d:0b: c1:9d:ac:e6:df:b3:89:6e:3a:81:24:b4:4f:ba:a4:bd:1e:5c: ed:bf:75:3a:72:80:62:85:95:9f:fe:89:d1:97:05:9e:36:5d: 42:58:bc:db:3a:53:e9:19:d6:54:1f:df:c3:79:bd:bd:d1:d3: 2a:c5:65:72:19:3d:d5:bf:08:dd:e7:04:2a:bc:0e:a6:5b:a0: 47:ec:cb:72:5f:5d:8c:03:ef:c1:08:0f:ec:03:d8:fa:d7:a8: b1:ef:c6:7c:62:c4:03:1c:5a:e1:14:78:0e:92:44:94:89:a8: 51:d9:67:4f:f6:00:87:a3:4e:fb:9e:ea:2d:44:27:a1:e1:b5: 51:11:10:34:a7:11:d1:e5:d2:7c:f3:3a:73:bc:c7:e9:85:29: 20:05:da:6c:4f:cf:c1:c6:4e:62:04:29:ea:03:52:d6:9c:7f: 7d:b1:bb:7f:1f:df:17:de:fd:32:17:76:39:a5:8b:08:af:e0: 3f:e8:b1:33:fa:a3:9f:eb:3b:54:40:06:eb:fb:51:2f:64:54: 38:a0:a8:d4:76:59:c1:c8:3b:25:ce:0c:a0:59:12:8f:19:95: 62:94:22:be:5f:ec:e3:01:f4:5b:7b:aa:97:bc:25:75:b6:62: e4:d6:5b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAilFC1JHa71qulowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTg4ZDUwN2QtYTE1NC00NzhmLThjOGMtNGYzODdiZjQ3MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu1VSeAwF3WXrUurSk37Cs9rTSZ18bOebB7K 8ijN0VQkj/TvD2ZpRQCS2+KsFR9xhkhcJ6OVvuU/wjARxjy1xhSBjXrRTaUnvGy6 UAbgq4gripNGqv8690fWSAF+QFEzeHmdCdWwr+bFBW01k9Q1fFyYdN8g05kujY/r s/q26NgZyW6oXo26p0dTh5peDEwkKWeSFneyrIIkwLG8dlZK/f6Chef1NGHG2hTt k97FSO8EvDemHy3HiUHHiwxg993bM8YOZnrfXM7+ThCY5Ym0pLuIErff1ivNsp7F Z8l06Ix+utqaKFzKdE57rUeBrFJIxKtVUn9Q437uERfEhz0uzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFa1t9Nmab8S//pgFWeh8W3woXLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTZjYTdjN2YtNTMxZS0z ZTdlLThiMWUtYzkxYTUxMGJlNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1GJ8XZn5ypiTOitdoeyqVNC8GdrObfs4luOoEktE+6pL0eXO2/dTpy gGKFlZ/+idGXBZ42XUJYvNs6U+kZ1lQf38N5vb3R0yrFZXIZPdW/CN3nBCq8DqZb oEfsy3JfXYwD78EID+wD2PrXqLHvxnxixAMcWuEUeA6SRJSJqFHZZ0/2AIejTvue 6i1EJ6HhtVEREDSnEdHl0nzzOnO8x+mFKSAF2mxPz8HGTmIEKeoDUtacf32xu38f 3xfe/TIXdjmliwiv4D/osTP6o5/rO1RABuv7US9kVDigqNR2WcHIOyXODKBZEo8Z lWKUIr5f7OMB9Ft7qpe8JXW2YuTWW0c= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:08 2025 by rpki-client