$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa File: b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa (raw, json) Hash identifier: RpELq8k6Fozaxj4+2Xx70pE1R606SBUldCIqtvO/3SE= Subject key identifier: 36:7D:AB:E7:D3:3F:3D:04:F0:4A:42:F2:B1:BB:BE:EC:4A:EB:6F:3B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D469FC5DE73F56BA85C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d4:69:fc:5d:e7:3f:56:ba:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=537059eb-31e0-410c-87a5-10e7aaa2fec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:38:8e:6b:f2:24:e9:5c:74:dc:52:77:a7:68: dd:17:a9:d0:dc:a6:24:60:0d:5a:38:52:7b:98:df: e3:16:f9:27:4a:88:f7:06:67:9a:b9:39:dd:96:cb: 54:2c:5c:7a:02:b9:70:b7:7f:19:c2:24:b7:92:d8: 23:97:c1:ed:d0:de:d1:57:55:22:f8:90:d0:e3:15: 50:0c:30:18:a8:ae:82:5d:28:a0:4b:7b:1e:cd:4c: eb:29:c9:d8:f1:35:cd:8c:20:68:d7:1f:96:6d:3f: 35:e8:d1:c0:41:08:2d:c5:9d:59:19:cb:93:3a:9f: 65:ec:97:d8:f7:13:b9:b6:8a:bd:00:01:ae:d4:01: e3:90:25:ba:4d:9c:03:ab:7c:7b:b7:12:e1:68:c7: d2:7b:66:f3:3d:5c:45:f9:f2:a0:75:0e:e0:e7:42: 12:41:71:0b:8d:54:4a:b8:78:3c:c5:68:0f:76:f4: 83:b3:8f:da:41:40:e2:ec:80:55:90:e4:f2:dc:61: b3:89:c5:c3:8e:68:45:cd:e6:6a:33:11:bd:0d:78: 40:3c:1c:5a:ac:6b:18:61:87:9f:5c:41:38:1e:e6: 6a:1c:10:0d:4f:d3:62:e5:c7:79:ab:9d:56:c5:78: 19:2c:80:a5:84:63:8f:75:82:aa:f5:ff:99:d0:31: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7D:AB:E7:D3:3F:3D:04:F0:4A:42:F2:B1:BB:BE:EC:4A:EB:6F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2b:f2:c8:c8:c2:43:46:cb:c4:c3:8f:04:42:f1:f5:29:bf: 08:e2:12:9a:cb:d0:c5:c5:a3:d9:31:06:ff:61:48:53:8b:b4: fc:c0:ed:25:3e:75:b0:d6:d7:37:f3:00:fa:b8:4f:4e:81:e6: 43:bf:b8:1b:c0:c9:74:c6:6e:b6:92:64:26:ff:14:f9:3a:7a: 8c:1d:b0:ea:c0:ea:81:01:cd:81:8f:a7:e8:80:c8:98:09:e2: 94:73:eb:85:8f:90:5b:ee:bf:60:c6:d3:9e:09:21:fa:78:5a: 4c:40:67:8a:9e:4f:9e:41:79:0d:83:7c:41:59:46:08:67:20: 95:56:0e:01:61:e6:fc:ab:5f:4a:f1:de:4b:c0:85:14:47:32: 7d:5f:20:2e:40:3e:41:08:58:1c:6b:12:77:13:36:c6:d5:b0: 1d:db:65:8e:33:87:b6:c4:34:6f:33:22:df:52:80:5b:41:be: 4b:c7:ae:77:91:27:d4:a8:b1:00:1d:54:2b:4d:8b:31:4c:70: 1c:c1:51:dc:87:47:48:f3:2d:1f:bd:73:9f:87:81:12:b5:a5: ac:86:42:85:eb:7e:22:cd:96:37:59:d2:2e:09:c6:cd:57:f9: 90:dd:da:b1:02:60:f0:5e:80:f7:22:b0:47:15:7b:66:41:68: 5f:c2:6c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdRp/F3nP1a6hcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTM3MDU5ZWItMzFlMC00MTBjLTg3YTUtMTBlN2FhYTJmZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjziOa/Ik6Vx03FJ3p2jdF6nQ3KYkYA1aOFJ7 mN/jFvknSoj3BmeauTndlstULFx6Arlwt38ZwiS3ktgjl8Ht0N7RV1Ui+JDQ4xVQ DDAYqK6CXSigS3sezUzrKcnY8TXNjCBo1x+WbT816NHAQQgtxZ1ZGcuTOp9l7JfY 9xO5toq9AAGu1AHjkCW6TZwDq3x7txLhaMfSe2bzPVxF+fKgdQ7g50ISQXELjVRK uHg8xWgPdvSDs4/aQUDi7IBVkOTy3GGzicXDjmhFzeZqMxG9DXhAPBxarGsYYYef XEE4HuZqHBANT9Ni5cd5q51WxXgZLIClhGOPdYKq9f+Z0DE6dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZ9q+fTPz0E8EpC8rG7vuxK6287MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjQwYzJhMzMtMTFkNC0z NjNiLTlhYzgtODJhMmMzYTkzNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAr8sjIwkNGy8TDjwRC8fUpvwjiEprL0MXFo9kxBv9hSFOLtPzA7SU+ dbDW1zfzAPq4T06B5kO/uBvAyXTGbraSZCb/FPk6eowdsOrA6oEBzYGPp+iAyJgJ 4pRz64WPkFvuv2DG054JIfp4WkxAZ4qeT55BeQ2DfEFZRghnIJVWDgFh5vyrX0rx 3kvAhRRHMn1fIC5APkEIWBxrEncTNsbVsB3bZY4zh7bENG8zIt9SgFtBvkvHrneR J9SosQAdVCtNizFMcBzBUdyHR0jzLR+9c5+HgRK1payGQoXrfiLNljdZ0i4Jxs1X +ZDd2rECYPBegPcisEcVe2ZBaF/CbFQ= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:33 2025 by rpki-client