$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa File: bf24e998-f4cb-3166-9844-bebff8d2d03a.roa (raw, json) Hash identifier: FaiQuIMYAbqhZpqeDz1cJ+BT89k3+qdrlNuc6XIOhA8= Subject key identifier: 79:8A:BA:87:67:AB:FE:79:0B:38:06:EE:0D:A3:13:06:39:03:2C:35 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673AA15CB3D8C7ACF7F880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3a:a1:5c:b3:d8:c7:ac:f7:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=c9d4df0b-ed4f-435d-8540-49c47f29ca44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:11:89:a1:69:41:b4:36:45:8d:4c:b8:da:fe: 7d:2e:cd:2a:4a:ea:aa:ed:d9:f6:b1:c8:54:4e:99: 34:ff:9a:56:26:21:71:d4:20:40:4d:9e:ad:eb:41: c2:6c:64:9f:41:06:85:b9:ba:37:d0:d3:fa:2f:c2: fe:8e:75:4f:c0:2b:7b:9e:8c:56:c8:a1:ed:bc:83: 17:34:f4:08:62:64:5f:86:60:f7:71:0b:a4:68:8c: 82:6d:70:da:49:de:ae:7a:f8:be:36:4d:63:60:98: f1:b2:a2:2a:90:7e:ff:ff:c1:1b:b0:50:e6:b0:50: a8:44:d6:4c:19:87:be:33:1c:c8:15:9c:0d:bc:09: 4d:0c:e9:b9:eb:20:f9:8d:d7:00:4f:71:39:96:db: fe:c1:1a:91:37:84:e2:9a:29:bc:40:72:a7:81:29: 21:ff:cf:c5:ff:aa:be:a5:33:59:b9:7d:94:d6:c4: 6c:4c:fc:e9:34:13:3b:27:a9:49:83:2e:5b:80:ba: d3:80:9e:2f:c9:98:cd:1f:31:f6:91:1e:ab:05:d3: 8f:d0:50:2e:70:d0:31:26:20:04:47:64:f0:27:c8: a1:15:17:19:05:9f:0d:c2:14:30:cd:2b:b8:df:4c: 95:0c:69:3a:05:9c:82:35:ab:14:2d:f7:8a:f7:33: 49:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:BA:87:67:AB:FE:79:0B:38:06:EE:0D:A3:13:06:39:03:2C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:98:e0:db:0d:65:22:b4:d3:14:d6:e5:4a:a6:00:9e:52:0e: c2:65:b6:5a:73:bc:23:24:28:ee:fa:2f:2f:0d:48:24:a5:e6: e6:52:87:e2:c9:1c:56:c3:f4:2c:7a:a1:e7:1b:bd:af:cd:f7: 69:4f:62:2f:c7:02:92:92:f2:9a:e7:a7:13:4a:46:d0:bf:b3: 7a:da:8a:88:d5:c9:ff:ee:e9:66:8e:a6:6e:e5:14:be:04:c5: ca:57:66:0b:72:4f:3d:c5:94:6e:a5:b2:f9:17:77:51:52:54: 5e:2e:90:75:dd:40:ac:e3:7b:7a:c0:a1:36:51:ed:3d:15:37: 4f:48:98:bb:8e:b6:bf:70:67:32:e9:cc:fe:14:68:0c:66:64: 6d:4d:89:18:c3:e5:68:3c:73:37:07:4a:f1:d4:a2:69:f8:cc: 3d:5b:52:aa:3c:d2:b1:af:57:cd:3a:0c:f3:b7:8c:11:b8:00: 06:d8:d4:66:92:72:38:a4:d6:7a:fe:22:53:51:c4:ed:bb:7f: c8:f1:cf:b8:6a:70:aa:c1:87:4b:62:d9:77:b8:d8:f6:b6:f5: 93:8d:05:0f:92:2f:f5:a7:b8:4c:cf:6f:72:ab:64:f8:b8:2b: 79:9c:cb:df:d5:e8:0c:74:7d:ae:78:55:d8:26:17:b9:d1:64: 12:d5:8b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzqhXLPYx6z3+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YzlkNGRmMGItZWQ0Zi00MzVkLTg1NDAtNDljNDdmMjljYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBGJoWlBtDZFjUy42v59Ls0qSuqq7dn2schU Tpk0/5pWJiFx1CBATZ6t60HCbGSfQQaFubo30NP6L8L+jnVPwCt7noxWyKHtvIMX NPQIYmRfhmD3cQukaIyCbXDaSd6uevi+Nk1jYJjxsqIqkH7//8EbsFDmsFCoRNZM GYe+MxzIFZwNvAlNDOm56yD5jdcAT3E5ltv+wRqRN4Timim8QHKngSkh/8/F/6q+ pTNZuX2U1sRsTPzpNBM7J6lJgy5bgLrTgJ4vyZjNHzH2kR6rBdOP0FAucNAxJiAE R2TwJ8ihFRcZBZ8NwhQwzSu430yVDGk6BZyCNasULfeK9zNJ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmKuodnq/55CzgG7g2jEwY5Ayw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmYyNGU5OTgtZjRjYi0z MTY2LTk4NDQtYmViZmY4ZDJkMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWY4NsNZSK00xTW5UqmAJ5SDsJltlpzvCMkKO76Ly8NSCSl5uZSh+LJ HFbD9Cx6oecbva/N92lPYi/HApKS8prnpxNKRtC/s3raiojVyf/u6WaOpm7lFL4E xcpXZgtyTz3FlG6lsvkXd1FSVF4ukHXdQKzje3rAoTZR7T0VN09ImLuOtr9wZzLp zP4UaAxmZG1NiRjD5Wg8czcHSvHUomn4zD1bUqo80rGvV806DPO3jBG4AAbY1GaS cjik1nr+IlNRxO27f8jxz7hqcKrBh0ti2Xe42Pa29ZONBQ+SL/WnuEzPb3KrZPi4 K3mcy9/V6Ax0fa54VdgmF7nRZBLViw0= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:47 2025 by rpki-client