$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf93cff2-1475-3b11-b314-a4253cded5bd.roa File: bf93cff2-1475-3b11-b314-a4253cded5bd.roa (raw, json) Hash identifier: 3IuPKVoYoJvb6yOI9FRMmPF2qri56f6rVTSU0z6gcI4= Subject key identifier: 04:D4:5D:D1:A3:78:5E:03:F8:07:36:3B:DB:29:F8:45:3E:7D:67:C7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D4A48802CCFC64B5D600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf93cff2-1475-3b11-b314-a4253cded5bd.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d4:a4:88:02:cc:fc:64:b5:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=54624b8c-2f78-490d-ad13-f8cc0bf43ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:53:66:22:0b:95:ea:e0:51:22:12:01:c7:b8: 02:d2:c3:cf:04:63:de:35:7a:2d:11:88:1d:90:0f: d1:01:11:be:0b:c6:64:d6:e1:5e:c9:c3:8f:9a:de: 95:b5:c4:10:72:e1:1c:d0:49:8e:df:6a:37:50:69: b6:be:d8:a8:25:39:cf:e4:47:d8:9b:33:03:26:6d: 32:23:24:c6:b2:93:15:13:a4:73:d9:94:13:5c:73: c2:2f:57:3c:13:be:4c:12:cd:c8:84:9c:c0:44:5c: a1:cc:21:51:e7:3a:7c:92:1b:7c:70:5e:42:6d:39: 62:c5:9c:b0:7d:41:57:3a:5e:6b:05:0c:ef:23:83: 84:1d:21:56:d4:21:5a:7e:9a:e6:73:55:07:3b:b5: 31:bf:57:90:2f:5c:32:95:be:21:40:f3:07:b8:5f: b6:84:2f:98:9c:0e:68:93:21:3a:a3:36:ce:9b:32: 76:d2:e4:2f:94:9b:0c:6b:bf:25:5d:f1:50:ae:ea: f0:eb:b1:c9:e4:92:69:36:50:e7:e7:07:89:dc:00: a2:bd:4d:85:00:1f:16:5c:ee:56:8c:09:98:83:a5: e3:0d:e5:88:10:ee:4d:12:cd:0a:00:87:f5:a3:a2: 13:db:ce:e4:80:91:44:86:0c:88:09:57:0f:87:56: d2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D4:5D:D1:A3:78:5E:03:F8:07:36:3B:DB:29:F8:45:3E:7D:67:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf93cff2-1475-3b11-b314-a4253cded5bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:8b:65:61:25:07:11:c7:e5:d1:6c:6b:6f:8f:d3:09:0e:e4: 25:46:ef:2e:84:cc:ef:5a:41:d9:3d:b9:a6:a8:73:a1:ec:1b: 1f:84:d6:bd:c5:6c:44:88:b6:f8:e6:a6:05:7d:5f:9a:89:57: 69:40:c3:30:56:f3:2b:73:04:e9:6d:96:16:5b:31:91:be:03: a5:83:2d:f6:ea:80:15:2c:e4:48:f6:bb:a5:f2:7f:33:cd:ad: 8e:f2:c4:e0:0d:4d:fe:ae:d8:e2:65:37:11:ef:75:c5:3d:c2: 5c:eb:b6:71:ed:1d:7c:21:6d:ab:4f:bc:73:9c:e2:8f:52:66: c7:97:01:53:3c:63:e1:08:5a:d8:17:35:32:2a:52:4c:22:c3: b7:31:b5:1b:0d:3d:b9:fe:f6:ac:e8:2d:e3:f0:88:12:18:ca: bf:e3:23:f4:98:18:58:e5:3d:8c:da:cf:db:14:b1:a2:41:70: 21:63:fc:52:33:a8:23:17:82:06:03:47:04:2c:ad:f6:39:03: ff:8a:55:09:fc:96:e3:aa:6e:41:ac:6b:55:f7:75:1b:73:17: f8:9a:9b:91:30:6f:c6:36:32:db:ab:a0:dd:51:1e:fc:b5:ad: 1f:c3:28:4b:14:d8:ac:05:37:5a:ad:24:c8:b6:66:5e:39:1e: f4:dc:29:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdSkiALM/GS11gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTQ2MjRiOGMtMmY3OC00OTBkLWFkMTMtZjhjYzBiZjQzZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlNmIguV6uBRIhIBx7gC0sPPBGPeNXotEYgd kA/RARG+C8Zk1uFeycOPmt6VtcQQcuEc0EmO32o3UGm2vtioJTnP5EfYmzMDJm0y IyTGspMVE6Rz2ZQTXHPCL1c8E75MEs3IhJzARFyhzCFR5zp8kht8cF5CbTlixZyw fUFXOl5rBQzvI4OEHSFW1CFafprmc1UHO7Uxv1eQL1wylb4hQPMHuF+2hC+YnA5o kyE6ozbOmzJ20uQvlJsMa78lXfFQrurw67HJ5JJpNlDn5weJ3ACivU2FAB8WXO5W jAmYg6XjDeWIEO5NEs0KAIf1o6IT287kgJFEhgyICVcPh1bSzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATUXdGjeF4D+Ac2O9sp+EU+fWfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmY5M2NmZjItMTQ3NS0z YjExLWIzMTQtYTQyNTNjZGVkNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeLZWElBxHH5dFsa2+P0wkO5CVG7y6EzO9aQdk9uaaoc6HsGx+E1r3F bESItvjmpgV9X5qJV2lAwzBW8ytzBOltlhZbMZG+A6WDLfbqgBUs5Ej2u6XyfzPN rY7yxOANTf6u2OJlNxHvdcU9wlzrtnHtHXwhbatPvHOc4o9SZseXAVM8Y+EIWtgX NTIqUkwiw7cxtRsNPbn+9qzoLePwiBIYyr/jI/SYGFjlPYzaz9sUsaJBcCFj/FIz qCMXggYDRwQsrfY5A/+KVQn8luOqbkGsa1X3dRtzF/iam5Ewb8Y2MturoN1RHvy1 rR/DKEsU2KwFN1qtJMi2Zl45HvTcKfc= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:36 2025 by rpki-client