$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c21f1766-fc74-3a08-ba8e-0dd33437395e.roa File: c21f1766-fc74-3a08-ba8e-0dd33437395e.roa (raw, json) Hash identifier: U33FW2I7GWyaHxqKyRu/L3WkV86Q8E+4Chbc0QsV+rs= Subject key identifier: 53:4B:7E:4F:0B:60:B3:32:6F:B0:A8:53:25:19:83:2A:87:B3:12:3F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D417124199450434E280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c21f1766-fc74-3a08-ba8e-0dd33437395e.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d4:17:12:41:99:45:04:34:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=8971984b-9f6f-45b9-b590-211bb11cd688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:51:97:e3:34:02:c5:55:af:ca:7e:de:8e: a6:74:6a:71:5f:a1:7d:27:15:8e:4d:fa:9d:00:2a: 28:e2:c9:f7:dc:5d:87:79:45:90:e5:83:a3:ca:b6: 5f:1c:cc:73:bf:5b:31:a6:1d:f1:5b:ff:4d:97:fa: b4:4d:d0:ed:e8:7a:d8:09:08:77:f6:5b:8b:81:93: cb:77:ac:98:27:1c:4b:aa:0c:f8:34:3e:9d:60:76: b2:55:85:23:5c:b0:83:5f:89:e0:24:21:65:3e:fa: 47:aa:2e:ba:bc:d5:e5:63:43:6a:b5:89:4b:f4:29: 9e:07:4b:0f:76:1c:7e:73:47:f5:58:2a:05:97:31: f1:d6:a4:8e:5f:e7:71:42:0d:d8:d8:d4:91:35:8c: 5a:05:3a:a9:21:96:a1:5a:00:d0:e0:a2:54:85:d9: 33:a8:9a:95:25:37:36:07:16:fb:e7:88:c9:d5:09: da:ef:6b:ea:c3:3c:ce:51:74:42:17:7b:90:e4:40: fa:8e:cc:55:f6:f6:b9:05:45:ef:69:2d:51:4f:c3: 43:25:fc:00:c0:f7:87:06:57:66:71:41:64:f3:7c: 4e:5d:ce:1b:b2:77:1d:cc:d4:d9:e9:29:89:df:d2: 33:43:2c:6c:e8:70:d6:b1:75:23:48:8c:39:d5:7e: f9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4B:7E:4F:0B:60:B3:32:6F:B0:A8:53:25:19:83:2A:87:B3:12:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c21f1766-fc74-3a08-ba8e-0dd33437395e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:1c:88:79:e6:d6:51:8e:d8:55:9e:d2:6d:4f:33:98:b4:57: 92:56:3c:54:b7:68:41:85:9f:11:2c:88:61:de:09:70:3c:0a: 80:53:48:59:52:77:d0:93:f4:53:20:4a:76:26:13:da:7c:5c: c0:77:3b:e4:c8:4a:30:ad:3f:99:33:90:93:f0:33:b4:15:27: 8c:22:8b:65:55:fe:43:a7:0a:af:39:13:75:0e:e4:d6:2a:74: f9:e3:73:11:d9:e3:0b:fe:d2:f3:06:69:5a:64:7f:e3:46:38: 28:cc:9d:de:c4:4c:7f:78:6c:1c:ff:0c:ae:59:29:b6:9b:3a: 56:8f:39:c7:7d:55:61:ed:be:ba:d6:b3:d5:fb:b0:2c:da:71: 3d:90:7f:7d:79:40:bf:74:c8:29:6d:4c:ac:35:56:7d:f2:f3: 67:ad:de:55:5b:36:2d:eb:24:84:b6:8c:47:8e:93:e8:ed:f6: 72:50:d4:6e:f7:f4:21:dc:b1:0a:50:ca:e0:51:74:0e:ac:3d: 14:d4:d7:44:4d:54:fd:c3:df:e7:6e:c1:ec:b6:d4:e4:23:20: dd:15:41:78:e5:13:ec:14:7c:96:52:f7:00:8e:5a:98:f5:7f: 0d:df:1b:e1:e0:de:1a:65:2d:e0:35:0d:01:c0:56:88:36:f7: 4e:97:dd:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdQXEkGZRQQ04oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODk3MTk4NGItOWY2Zi00NWI5LWI1OTAtMjExYmIxMWNkNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur9Rl+M0AsVVr8p+3o6mdGpxX6F9JxWOTfqd ACoo4sn33F2HeUWQ5YOjyrZfHMxzv1sxph3xW/9Nl/q0TdDt6HrYCQh39luLgZPL d6yYJxxLqgz4ND6dYHayVYUjXLCDX4ngJCFlPvpHqi66vNXlY0NqtYlL9CmeB0sP dhx+c0f1WCoFlzHx1qSOX+dxQg3Y2NSRNYxaBTqpIZahWgDQ4KJUhdkzqJqVJTc2 Bxb754jJ1Qna72vqwzzOUXRCF3uQ5ED6jsxV9va5BUXvaS1RT8NDJfwAwPeHBldm cUFk83xOXc4bsncdzNTZ6SmJ39IzQyxs6HDWsXUjSIw51X75jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNLfk8LYLMyb7CoUyUZgyqHsxI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzIxZjE3NjYtZmM3NC0z YTA4LWJhOGUtMGRkMzM0MzczOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMciHnm1lGO2FWe0m1PM5i0V5JWPFS3aEGFnxEsiGHeCXA8CoBTSFlS d9CT9FMgSnYmE9p8XMB3O+TISjCtP5kzkJPwM7QVJ4wii2VV/kOnCq85E3UO5NYq dPnjcxHZ4wv+0vMGaVpkf+NGOCjMnd7ETH94bBz/DK5ZKbabOlaPOcd9VWHtvrrW s9X7sCzacT2Qf315QL90yCltTKw1Vn3y82et3lVbNi3rJIS2jEeOk+jt9nJQ1G73 9CHcsQpQyuBRdA6sPRTU10RNVP3D3+duwey21OQjIN0VQXjlE+wUfJZS9wCOWpj1 fw3fG+Hg3hplLeA1DQHAVog2906X3fs= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:15 2025 by rpki-client