$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf96c460-909e-35f7-a364-3789939a0064.roa File: bf96c460-909e-35f7-a364-3789939a0064.roa (raw, json) Hash identifier: nV76fTm+1NxCPP+cbbDLCJQ4VQSZGzDm9hp1EwaUvR0= Subject key identifier: DD:B9:F7:A8:DD:41:5B:06:81:0A:09:23:B1:33:72:E1:69:42:93:E1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201F58C41EDF79539112F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf96c460-909e-35f7-a364-3789939a0064.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f5:8c:41:ed:f7:95:39:11:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=1f5aca6d-8307-4fe8-84cf-43fd76381e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:d6:f5:94:bb:8e:50:07:64:5b:a6:55:19: e6:46:1c:27:9d:09:b7:e7:d9:c9:d0:6b:36:f7:e3: 17:35:b5:4a:a5:84:f3:e4:f7:01:a6:fd:cc:24:01: 5b:36:4d:96:04:41:aa:40:c4:45:0f:ad:4e:d5:cb: ce:ab:cc:0e:00:6f:d8:b2:a2:6c:20:a6:1d:15:c3: a7:f4:81:c3:62:5a:82:6c:11:2d:a0:01:da:18:26: 80:c5:d2:b1:1c:2d:56:20:9b:98:46:18:da:fc:ec: 2a:97:ff:2e:33:19:f0:b6:07:52:fa:00:3d:79:87: 5e:a2:8e:4f:c4:db:df:8d:6f:f8:d9:f4:19:9e:e1: e8:b0:60:ab:fc:26:d6:c2:6c:03:5e:a7:9e:25:b3: 02:c6:45:ee:ff:a8:c2:2c:09:94:fd:d7:1d:1e:10: b1:bc:db:86:ff:33:fa:6c:40:31:d8:5a:fd:ca:17: df:d7:b8:9d:4c:18:e3:8d:2b:c1:85:6d:09:1a:89: c0:c0:b4:ff:d9:b4:67:ca:06:42:f5:bb:fe:31:aa: 5e:20:da:ae:7e:e2:ed:2b:eb:6c:ab:73:4e:22:8a: 6f:fd:4c:67:0f:76:2f:08:24:43:43:1f:40:f7:11: ba:54:1d:38:78:d9:55:d5:cc:38:58:e0:c3:a7:56: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B9:F7:A8:DD:41:5B:06:81:0A:09:23:B1:33:72:E1:69:42:93:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf96c460-909e-35f7-a364-3789939a0064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b3:e8:84:cd:79:3a:6a:47:cc:64:a8:c2:72:a7:5a:e3:e3: a3:1d:34:0c:09:40:4b:a8:9c:51:d8:7d:63:64:a7:d3:a6:14: a1:ee:b4:80:3b:05:93:0d:0b:41:f6:b9:b3:8b:38:a2:e9:6b: 7c:9e:3a:a0:03:69:b9:b5:b9:4f:99:0e:ef:ac:30:ab:d5:a9: 14:84:3e:68:f0:4b:6f:42:63:04:99:83:e4:d2:23:8e:a9:38: 1c:21:87:09:2e:17:ca:41:ee:86:56:49:95:e1:71:ab:0d:7b: 1b:5a:9d:d9:40:f0:38:1e:60:0c:c2:00:11:c4:da:7a:7b:58: b4:65:51:c1:56:72:39:a7:8e:00:44:99:ef:9c:eb:d2:55:5d: 8c:6e:44:7c:83:3e:a4:05:8d:db:ca:e7:59:24:41:6f:9d:99: df:51:47:9c:eb:aa:58:83:4d:82:b4:ae:48:96:cf:5d:72:7c: d7:18:9e:32:3d:b0:44:fc:ae:0f:19:2f:91:01:3b:ba:55:99: d4:e4:e7:fd:59:ac:82:29:3c:bd:af:c5:09:84:d1:e7:55:94: c8:02:61:e3:56:52:59:ff:1f:d3:7d:ae:cc:54:fe:00:1c:8a: bd:22:65:8b:c8:51:09:56:9f:17:0f:8a:62:7d:fc:37:79:1a: 81:d0:db:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfWMQe33lTkRLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MWY1YWNhNmQtODMwNy00ZmU4LTg0Y2YtNDNmZDc2MzgxZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviXW9ZS7jlAHZFumVRnmRhwnnQm359nJ0Gs2 9+MXNbVKpYTz5PcBpv3MJAFbNk2WBEGqQMRFD61O1cvOq8wOAG/YsqJsIKYdFcOn 9IHDYlqCbBEtoAHaGCaAxdKxHC1WIJuYRhja/Owql/8uMxnwtgdS+gA9eYdeoo5P xNvfjW/42fQZnuHosGCr/CbWwmwDXqeeJbMCxkXu/6jCLAmU/dcdHhCxvNuG/zP6 bEAx2Fr9yhff17idTBjjjSvBhW0JGonAwLT/2bRnygZC9bv+MapeINqufuLtK+ts q3NOIopv/UxnD3YvCCRDQx9A9xG6VB04eNlV1cw4WODDp1bIMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2596jdQVsGgQoJI7EzcuFpQpPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmY5NmM0NjAtOTA5ZS0z NWY3LWEzNjQtMzc4OTkzOWEwMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKz6ITNeTpqR8xkqMJyp1rj46MdNAwJQEuonFHYfWNkp9OmFKHutIA7 BZMNC0H2ubOLOKLpa3yeOqADabm1uU+ZDu+sMKvVqRSEPmjwS29CYwSZg+TSI46p OBwhhwkuF8pB7oZWSZXhcasNextandlA8DgeYAzCABHE2np7WLRlUcFWcjmnjgBE me+c69JVXYxuRHyDPqQFjdvK51kkQW+dmd9RR5zrqliDTYK0rkiWz11yfNcYnjI9 sET8rg8ZL5EBO7pVmdTk5/1ZrIIpPL2vxQmE0edVlMgCYeNWUln/H9N9rsxU/gAc ir0iZYvIUQlWnxcPimJ9/Dd5GoHQ2wM= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:27 2025 by rpki-client