$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c36ed45e-c507-3ec8-8e83-34f33c91e4a4.roa File: c36ed45e-c507-3ec8-8e83-34f33c91e4a4.roa (raw, json) Hash identifier: c4lRtA4e7pUi8MMdX6fM+Kh+CkTf4AZtIZbjlmPIu4w= Subject key identifier: 10:1D:86:D0:D3:E0:34:EE:30:A8:4A:36:0F:75:51:48:B6:FA:C2:6F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202342433C464FFED7C7800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c36ed45e-c507-3ec8-8e83-34f33c91e4a4.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:34:24:33:c4:64:ff:ed:7c:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c652b413-447c-460c-ae21-0c77733967fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:27:2b:19:e8:42:6b:d0:93:32:b8:d2:78: c9:24:e2:3a:c3:b0:8e:eb:49:4c:32:c4:4e:8f:55: 19:ac:91:50:f7:6a:61:e1:d3:b7:93:47:56:78:ec: 7c:e9:6d:ed:ae:62:c8:da:24:48:33:32:b8:28:7c: 89:47:cd:a4:5e:e5:f5:66:95:54:e2:68:08:20:0f: 1b:f8:d0:d4:7a:f7:6b:be:12:5b:e2:49:b2:3d:80: c2:15:59:f7:17:38:04:98:90:52:61:04:4b:41:ee: 67:21:95:96:85:4e:cd:86:38:ce:11:72:7f:cf:08: 16:2f:58:40:8e:38:bc:48:e3:04:9a:89:ff:7a:a8: 66:98:d2:f6:9e:7a:df:7e:51:74:46:d5:be:cc:49: f9:bb:11:dd:eb:67:0e:3d:ec:79:d9:b3:b8:e1:32: 3a:01:cb:18:96:d4:45:51:75:f0:0c:6a:92:75:c7: f4:e7:75:a6:91:07:71:47:11:47:29:af:fb:a8:5d: 4a:79:3c:ef:79:cf:4e:53:9e:f3:58:a1:00:0d:27: fc:96:c1:b1:bc:64:40:5e:40:c3:57:9c:0b:f6:d8: ae:05:8c:87:e6:67:98:ef:db:13:22:55:b6:fa:45: bd:d9:d6:0d:61:af:b4:26:66:24:de:33:9b:2e:85: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1D:86:D0:D3:E0:34:EE:30:A8:4A:36:0F:75:51:48:B6:FA:C2:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c36ed45e-c507-3ec8-8e83-34f33c91e4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:2e:84:9b:7d:fd:4f:f5:70:90:b7:2b:60:fa:7a:5c:91:fb: 77:a7:fb:aa:b8:aa:ed:e7:bb:b1:a3:a2:b7:6f:d7:0c:53:a9: 5a:24:ad:8f:48:4e:22:ef:e8:6e:f1:55:2f:59:5c:94:04:f6: 83:6b:b5:28:8c:83:1c:a6:22:e6:df:b6:81:db:cb:53:30:39: e9:ed:94:49:47:42:4d:3f:1a:8a:74:84:17:ff:0e:cc:41:a5: a9:a2:00:68:1f:2c:c1:e1:e6:cb:e2:78:48:e9:89:41:62:8b: 2e:ed:80:34:15:76:13:b2:4a:0f:48:0b:e8:e4:d0:d8:8b:85: ba:06:d1:01:37:37:51:b3:c3:37:a1:89:65:2a:92:ab:6e:f8: ef:e4:9c:53:16:99:db:f1:29:24:96:e9:f7:6c:9d:83:53:5b: ca:1c:c6:9c:d6:b8:94:9d:48:c4:df:1a:0b:35:b3:92:d0:da: ae:f5:ce:a2:84:60:df:fa:61:2a:d6:b8:35:37:90:1c:78:78: c6:99:51:48:10:de:6f:bd:35:1f:3c:ca:e2:52:35:fa:16:44: 99:f8:34:fa:2c:63:80:c3:06:09:1c:d5:19:00:73:96:4f:75: 5f:1c:84:55:46:18:25:49:5e:73:48:0b:e9:40:4b:03:e1:00: cb:9b:ec:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjQkM8Rk/+18eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzY1MmI0MTMtNDQ3Yy00NjBjLWFlMjEtMGM3NzczMzk2N2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1AnKxnoQmvQkzK40njJJOI6w7CO60lMMsRO j1UZrJFQ92ph4dO3k0dWeOx86W3trmLI2iRIMzK4KHyJR82kXuX1ZpVU4mgIIA8b +NDUevdrvhJb4kmyPYDCFVn3FzgEmJBSYQRLQe5nIZWWhU7NhjjOEXJ/zwgWL1hA jji8SOMEmon/eqhmmNL2nnrfflF0RtW+zEn5uxHd62cOPex52bO44TI6AcsYltRF UXXwDGqSdcf053WmkQdxRxFHKa/7qF1KeTzvec9OU57zWKEADSf8lsGxvGRAXkDD V5wL9tiuBYyH5meY79sTIlW2+kW92dYNYa+0JmYk3jObLoVlKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAdhtDT4DTuMKhKNg91UUi2+sJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzM2ZWQ0NWUtYzUwNy0z ZWM4LThlODMtMzRmMzNjOTFlNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRazMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkuhJt9/U/1cJC3K2D6elyR+3en+6q4qu3nu7Gjordv1wxTqVokrY9I TiLv6G7xVS9ZXJQE9oNrtSiMgxymIubftoHby1MwOentlElHQk0/Gop0hBf/DsxB pamiAGgfLMHh5svieEjpiUFiiy7tgDQVdhOySg9IC+jk0NiLhboG0QE3N1Gzwzeh iWUqkqtu+O/knFMWmdvxKSSW6fdsnYNTW8ocxpzWuJSdSMTfGgs1s5LQ2q71zqKE YN/6YSrWuDU3kBx4eMaZUUgQ3m+9NR88yuJSNfoWRJn4NPosY4DDBgkc1RkAc5ZP dV8chFVGGCVJXnNIC+lASwPhAMub7FY= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:41 2025 by rpki-client