$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b785fca9-9332-321f-a7fd-29a5c9014040.roa File: b785fca9-9332-321f-a7fd-29a5c9014040.roa (raw, json) Hash identifier: VZKTCPbriRefKyTH+oTQKpTXXDTEAdHcEjekK0VcADs= Subject key identifier: 3D:68:F4:08:11:CD:08:BE:2B:2C:5A:60:21:3F:55:D7:7B:28:2A:EC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201DCB8A5DC1B7F9395EEC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b785fca9-9332-321f-a7fd-29a5c9014040.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:dc:b8:a5:dc:1b:7f:93:95:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d27c0cc7-81be-4b8a-9594-253983ac46c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ca:40:3f:b0:9a:ff:60:53:19:d9:70:e4:ac: a0:fd:f8:40:fc:97:05:9a:35:d2:22:76:e5:6d:4a: 24:56:bd:db:8f:27:1e:b8:ed:73:52:39:09:99:65: ea:0f:ef:58:d0:cd:1d:95:41:7e:a7:11:4c:c0:68: 6a:75:23:02:2d:b0:6c:9d:48:94:c0:b0:66:3e:31: 02:9d:c7:99:5f:d4:a5:da:8e:33:df:0a:2b:91:be: 99:4c:2c:b2:f2:43:46:9e:3d:f4:07:31:86:d4:8e: f2:e1:89:b9:5f:20:90:d9:18:99:50:bf:f3:b2:3f: eb:47:62:5e:1e:3d:73:97:f0:e6:d7:68:26:33:0f: e1:01:b6:53:0e:dd:b3:19:13:01:d0:39:5e:95:23: 57:70:e0:cc:8b:21:a0:9a:15:fd:27:19:45:08:66: 90:92:5c:be:e6:7e:0d:40:a1:6c:45:ac:fe:40:6d: e5:1a:01:29:af:cf:65:ec:7c:fd:c7:60:61:ac:e5: 37:4b:d9:e4:48:9c:9d:f7:82:6a:15:39:d3:2b:a3: 38:94:6e:74:0b:ad:63:fc:f1:f4:03:33:12:7c:ef: 87:c4:45:c6:97:60:ed:b8:81:69:ea:1b:79:52:f8: a3:c8:5e:04:31:55:87:95:68:6d:5f:b1:bd:b6:02: 3f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:68:F4:08:11:CD:08:BE:2B:2C:5A:60:21:3F:55:D7:7B:28:2A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b785fca9-9332-321f-a7fd-29a5c9014040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:91:9a:2a:6a:b3:0f:80:69:8d:40:b6:f1:8b:7f:7e:e0:b7: 97:c9:23:e6:1b:6e:30:42:d0:5b:ad:b0:be:fd:97:c5:17:42: e0:3b:43:00:f9:4e:e8:ca:19:9b:d4:53:36:41:fe:0a:6b:06: 30:8a:58:d0:db:16:87:c5:bf:18:28:dd:4e:c4:eb:be:7a:86: 0c:e1:f4:75:ce:86:69:ea:20:71:8e:ad:c7:fb:df:1a:88:cc: 9a:2a:b2:5f:6a:c7:d0:dd:80:15:cf:b1:70:93:ae:5e:fa:a9: ec:df:16:aa:7b:58:e6:fd:9f:41:25:e0:07:04:93:4c:99:77: f3:8b:6c:85:54:f0:67:b9:be:ee:bf:ca:e0:32:5f:4d:e8:85: 4b:0b:c9:81:bd:d0:2a:2c:c9:06:2b:36:f6:16:48:9a:57:23: 47:19:11:2a:d5:b1:b4:c3:d7:24:fd:ef:1f:44:be:ba:a1:01: 3a:af:cb:1d:82:37:da:e8:75:48:59:26:fa:cd:8f:9e:0a:e9: 95:8e:c5:2e:6b:ff:7e:c9:87:aa:08:77:43:f6:fb:3f:31:30: 36:65:d2:12:0b:98:50:62:79:14:32:f2:f6:d3:4c:2d:54:22: 2e:2c:12:d5:14:9a:4f:e4:e0:eb:ba:9b:d7:d0:0c:35:d8:41: 35:dd:9e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdy4pdwbf5OV7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDI3YzBjYzctODFiZS00YjhhLTk1OTQtMjUzOTgzYWM0NmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MpAP7Ca/2BTGdlw5Kyg/fhA/JcFmjXSInbl bUokVr3bjyceuO1zUjkJmWXqD+9Y0M0dlUF+pxFMwGhqdSMCLbBsnUiUwLBmPjEC nceZX9Sl2o4z3workb6ZTCyy8kNGnj30BzGG1I7y4Ym5XyCQ2RiZUL/zsj/rR2Je Hj1zl/Dm12gmMw/hAbZTDt2zGRMB0DlelSNXcODMiyGgmhX9JxlFCGaQkly+5n4N QKFsRaz+QG3lGgEpr89l7Hz9x2BhrOU3S9nkSJyd94JqFTnTK6M4lG50C61j/PH0 AzMSfO+HxEXGl2DtuIFp6ht5UvijyF4EMVWHlWhtX7G9tgI/hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1o9AgRzQi+KyxaYCE/Vdd7KCrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjc4NWZjYTktOTMzMi0z MjFmLWE3ZmQtMjlhNWM5MDE0MDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWRmipqsw+AaY1AtvGLf37gt5fJI+YbbjBC0FutsL79l8UXQuA7QwD5 TujKGZvUUzZB/gprBjCKWNDbFofFvxgo3U7E6756hgzh9HXOhmnqIHGOrcf73xqI zJoqsl9qx9DdgBXPsXCTrl76qezfFqp7WOb9n0El4AcEk0yZd/OLbIVU8Ge5vu6/ yuAyX03ohUsLyYG90CosyQYrNvYWSJpXI0cZESrVsbTD1yT97x9EvrqhATqvyx2C N9rodUhZJvrNj54K6ZWOxS5r/37Jh6oId0P2+z8xMDZl0hILmFBieRQy8vbTTC1U Ii4sEtUUmk/k4Ou6m9fQDDXYQTXdngQ= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:37 2025 by rpki-client