$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcfbf834-d12b-3878-b10a-b9bed89a4d00.roa File: bcfbf834-d12b-3878-b10a-b9bed89a4d00.roa (raw, json) Hash identifier: OfXEuLXlqrFTM76k3nFYqPxiT4lrKUW03cFPrFaIz2M= Subject key identifier: 5F:D4:BC:55:D8:4D:E6:21:04:9B:84:59:6E:FC:5A:90:AC:F5:87:A4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674B779DF4E7206379A680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcfbf834-d12b-3878-b10a-b9bed89a4d00.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4b:77:9d:f4:e7:20:63:79:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=c45eb265-1fcf-4b06-bf42-ec3ce26d0818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:54:f5:54:36:51:1b:60:2c:6f:4c:71:c1:70: 3d:fa:5f:31:8c:b8:6d:8f:70:26:28:a6:ad:95:05: 5f:7a:1f:9c:2a:ec:35:77:f0:36:8c:91:cf:47:e5: 65:93:b8:8b:e1:7e:85:5b:61:c7:f6:75:c6:9f:07: 2c:0f:bc:da:b4:70:05:b2:47:d4:d0:1f:2b:7e:b4: 39:91:71:29:93:6d:65:cf:20:58:f8:81:f7:17:d1: f0:48:63:12:18:38:dd:85:5e:2b:32:12:cd:58:b5: 20:c5:0d:91:f3:04:7c:ff:75:d1:9b:11:d3:6c:64: 4a:09:4a:c5:98:65:0f:b8:be:f4:48:13:17:e3:15: 14:ce:07:8d:16:59:7f:b1:3b:e5:8f:33:4d:86:99: e3:7c:b2:b8:b9:5d:e3:4b:fa:0b:e5:0a:88:49:ed: da:66:1b:4f:e7:af:64:ab:ec:13:c1:6a:6b:86:ea: 65:af:fa:cb:fb:d7:3c:c7:67:91:e3:97:a6:35:cc: 00:4f:22:b9:3c:ca:a7:c6:54:45:3a:4b:ab:0c:76: d6:f7:2c:88:9b:e8:e0:e1:d4:35:b4:32:16:d0:d8: 0d:3b:0c:dd:a6:e4:5b:dc:cd:da:34:63:84:3e:dc: f9:71:e5:b2:27:93:5e:e2:45:4c:b1:49:ce:db:2e: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D4:BC:55:D8:4D:E6:21:04:9B:84:59:6E:FC:5A:90:AC:F5:87:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcfbf834-d12b-3878-b10a-b9bed89a4d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:bd:79:a2:e5:3c:3c:f1:5b:bf:0e:e4:79:da:c1:ec:8b:ac: ba:ff:ee:16:73:30:ef:1c:29:82:1d:8f:d8:25:3c:74:9e:04: 22:8c:51:f3:b6:f2:a1:7b:ad:17:86:fb:45:89:66:a6:7c:08: 20:0d:a6:5a:27:91:55:d3:13:4f:80:16:fd:42:8f:d2:9f:19: 88:05:58:9e:8b:5a:76:75:86:6d:fb:cd:2e:78:99:bc:89:9a: db:f0:ad:61:aa:71:1f:83:52:2d:79:35:0c:87:4a:43:59:1d: 3d:8a:66:53:e3:d5:d6:cf:bb:89:d1:b3:5a:0e:87:e1:45:9d: 3d:10:8a:d4:19:31:e0:1d:70:11:8f:d1:ee:9a:e1:82:d5:26: a1:3e:46:c0:c2:d8:74:df:e5:5c:0c:ab:ea:b0:36:74:4a:b6: 79:93:d2:67:5a:ba:59:ee:d7:99:b0:cc:ad:66:aa:3e:dc:a4: d9:41:d3:ea:33:d0:23:19:d1:97:55:7c:aa:41:ac:a2:65:ef: b0:6a:b8:d8:cf:6e:c5:d7:7f:2b:35:0b:48:2c:0b:ee:af:ca: 2c:01:e5:d5:13:08:d7:51:12:5d:22:c7:2c:9c:6b:78:65:08: 80:4e:0b:d3:36:ab:55:22:d8:5c:2e:68:1e:df:2b:c6:d7:8f: 27:d3:0e:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0t3nfTnIGN5poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YzQ1ZWIyNjUtMWZjZi00YjA2LWJmNDItZWMzY2UyNmQwODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VT1VDZRG2Asb0xxwXA9+l8xjLhtj3AmKKat lQVfeh+cKuw1d/A2jJHPR+Vlk7iL4X6FW2HH9nXGnwcsD7zatHAFskfU0B8rfrQ5 kXEpk21lzyBY+IH3F9HwSGMSGDjdhV4rMhLNWLUgxQ2R8wR8/3XRmxHTbGRKCUrF mGUPuL70SBMX4xUUzgeNFll/sTvljzNNhpnjfLK4uV3jS/oL5QqISe3aZhtP569k q+wTwWprhuplr/rL+9c8x2eR45emNcwATyK5PMqnxlRFOkurDHbW9yyIm+jg4dQ1 tDIW0NgNOwzdpuRb3M3aNGOEPtz5ceWyJ5Ne4kVMsUnO2y7dZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/UvFXYTeYhBJuEWW78WpCs9YekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmNmYmY4MzQtZDEyYi0z ODc4LWIxMGEtYjliZWQ4OWE0ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF69eaLlPDzxW78O5HnaweyLrLr/7hZzMO8cKYIdj9glPHSeBCKMUfO2 8qF7rReG+0WJZqZ8CCANplonkVXTE0+AFv1Cj9KfGYgFWJ6LWnZ1hm37zS54mbyJ mtvwrWGqcR+DUi15NQyHSkNZHT2KZlPj1dbPu4nRs1oOh+FFnT0QitQZMeAdcBGP 0e6a4YLVJqE+RsDC2HTf5VwMq+qwNnRKtnmT0mdaulnu15mwzK1mqj7cpNlB0+oz 0CMZ0ZdVfKpBrKJl77BquNjPbsXXfys1C0gsC+6vyiwB5dUTCNdREl0ixyyca3hl CIBOC9M2q1Ui2FwuaB7fK8bXjyfTDrE= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:39 2025 by rpki-client