$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf4ce8fa-f5ae-30c2-a540-74321fab2610.roa File: bf4ce8fa-f5ae-30c2-a540-74321fab2610.roa (raw, json) Hash identifier: Bm3F5Sf95hZNmXz1ZNQtMbtEoxgvzQsec93BYR+XMns= Subject key identifier: 7A:0F:0F:2A:5F:18:C8:08:7A:CB:7F:BA:C3:C9:54:65:82:2D:F0:28 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E23BBE40F68626988880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf4ce8fa-f5ae-30c2-a540-74321fab2610.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e2:3b:be:40:f6:86:26:98:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=ec1255ac-c56a-4750-adc4-6567f107de34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:f7:e5:6c:de:0b:b3:8f:36:54:b0:4e:49: 45:c0:f3:a1:f8:7c:9a:3f:a2:80:95:85:35:18:57: e6:49:9a:1a:d1:ee:53:30:e4:1d:cd:5e:99:32:d4: 50:b9:2a:1c:46:fe:14:70:bf:1c:65:e9:fc:71:79: 6d:ed:b3:51:5f:dd:07:e7:da:ed:5b:75:2f:4f:77: 4f:f4:6a:2a:24:39:d3:ce:14:1c:81:ff:27:59:d6: e1:0b:7a:c2:e9:ad:0d:59:32:d2:7a:65:22:84:df: 5f:2e:dc:89:32:98:b8:3a:f8:da:a2:67:b6:d3:19: 4e:cf:96:e8:e7:d5:94:c0:ff:f2:2e:96:10:92:2e: fd:22:9f:1e:89:b1:61:12:d9:70:e1:09:89:83:ff: 36:c6:03:d3:54:be:00:5d:2f:43:85:29:a2:03:37: b7:c0:d7:30:8a:50:bd:58:61:62:3c:90:6c:22:d0: 98:05:e1:44:18:88:90:8b:4b:1d:3a:06:92:fa:99: 57:95:9c:c5:03:ee:9b:a7:b0:11:b2:6f:8c:45:fa: 16:2c:c7:75:2d:f8:8e:a1:a0:34:2c:d9:bf:41:96: ed:e1:85:86:71:18:17:c4:a5:0f:df:5e:62:c3:41: 51:9b:8a:bb:a9:3c:5d:fb:89:fb:a7:49:1d:b3:40: 45:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0F:0F:2A:5F:18:C8:08:7A:CB:7F:BA:C3:C9:54:65:82:2D:F0:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf4ce8fa-f5ae-30c2-a540-74321fab2610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f7:54:34:7b:31:57:0e:40:93:e2:27:ed:85:ca:8a:37:93: d5:46:b3:1a:6f:ac:9f:48:96:0a:b0:2a:21:38:9a:b3:da:c2: d7:51:83:a6:6d:7b:e0:c1:71:cc:2d:b3:ea:d4:fa:2f:28:d7: e1:d9:c9:02:c9:1a:eb:a1:af:78:94:35:d0:72:86:e4:ef:de: 8e:23:ee:79:fd:34:87:03:e1:9e:2d:f6:4c:8f:0b:8f:ad:a9: d4:30:f6:df:1a:2e:c4:c2:b6:6f:7c:ef:15:4d:d4:06:76:a1: 53:18:8b:2c:12:97:58:f2:1e:f9:d5:52:11:03:d6:db:a2:ac: 33:1d:ff:a3:b5:07:74:a5:01:90:06:de:0f:90:7f:a0:de:38: 7d:21:8c:f2:21:2b:db:55:df:4c:bb:cf:ee:a2:43:7e:aa:1a: 87:b2:cb:23:fe:31:ea:22:6a:2d:5b:25:43:06:1d:73:f6:d0: 27:99:5c:e9:f9:2e:5f:d4:09:11:ac:46:c3:90:f8:3f:a8:e7: 84:2c:fb:5a:3a:86:a0:3d:74:e5:4a:ab:0c:a3:a8:c7:74:a2: 31:23:d2:94:28:6e:b2:fa:db:d6:3a:26:43:34:07:09:cb:b2: 5c:5b:6b:2d:f2:6a:73:49:14:56:72:75:a9:d0:cd:15:13:cb: dc:d5:53:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeI7vkD2hiaYiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWMxMjU1YWMtYzU2YS00NzUwLWFkYzQtNjU2N2YxMDdkZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycv35WzeC7OPNlSwTklFwPOh+HyaP6KAlYU1 GFfmSZoa0e5TMOQdzV6ZMtRQuSocRv4UcL8cZen8cXlt7bNRX90H59rtW3UvT3dP 9GoqJDnTzhQcgf8nWdbhC3rC6a0NWTLSemUihN9fLtyJMpi4Ovjaome20xlOz5bo 59WUwP/yLpYQki79Ip8eibFhEtlw4QmJg/82xgPTVL4AXS9DhSmiAze3wNcwilC9 WGFiPJBsItCYBeFEGIiQi0sdOgaS+plXlZzFA+6bp7ARsm+MRfoWLMd1LfiOoaA0 LNm/QZbt4YWGcRgXxKUP315iw0FRm4q7qTxd+4n7p0kds0BFbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoPDypfGMgIest/usPJVGWCLfAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmY0Y2U4ZmEtZjVhZS0z MGMyLWE1NDAtNzQzMjFmYWIyNjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI73VDR7MVcOQJPiJ+2Fyoo3k9VGsxpvrJ9IlgqwKiE4mrPawtdRg6Zt e+DBccwts+rU+i8o1+HZyQLJGuuhr3iUNdByhuTv3o4j7nn9NIcD4Z4t9kyPC4+t qdQw9t8aLsTCtm987xVN1AZ2oVMYiywSl1jyHvnVUhED1tuirDMd/6O1B3SlAZAG 3g+Qf6DeOH0hjPIhK9tV30y7z+6iQ36qGoeyyyP+Meoiai1bJUMGHXP20CeZXOn5 Ll/UCRGsRsOQ+D+o54Qs+1o6hqA9dOVKqwyjqMd0ojEj0pQobrL629Y6JkM0BwnL slxbay3yanNJFFZydanQzRUTy9zVU9I= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:43 2025 by rpki-client