$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c81b75b4-d25d-3a9c-a835-669cf97c3864.roa File: c81b75b4-d25d-3a9c-a835-669cf97c3864.roa (raw, json) Hash identifier: +KJOIkBqimlnrB9db38cN0hW5/syZTYSbTNrWhNWa7U= Subject key identifier: 02:16:3A:AE:5D:AF:13:1A:DE:98:3D:A6:6B:C2:4A:74:72:00:44:77 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62022475F3865238CAE8F300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c81b75b4-d25d-3a9c-a835-669cf97c3864.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:24:75:f3:86:52:38:ca:e8:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c88d599f-8329-4d71-a455-b352aa4e18a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:24:fe:31:3d:ed:49:3a:55:ed:e4:8a:d3:52: db:7e:18:a0:f2:8b:9c:31:c1:cd:91:e2:bb:a0:a5: 2f:93:ad:4c:de:a9:7d:48:cb:19:e7:7d:ba:ff:ba: 6b:fa:27:2e:6a:50:22:6f:66:19:af:cd:51:04:19: 82:77:e3:51:96:0b:bc:4e:68:be:48:4b:70:1d:3b: 11:80:39:09:4b:2d:a1:bb:ef:27:fd:d4:70:d8:d4: d6:7c:3b:54:e2:ce:1f:14:c0:c3:ea:05:4c:32:16: c5:de:d1:f1:a1:1f:8a:9a:b4:0e:54:f6:f7:01:0d: 13:bc:34:e2:1a:40:f7:cf:53:5e:c8:92:a3:de:52: fc:18:a3:0f:61:4b:30:14:f0:30:c0:38:a8:2d:13: 16:32:bd:df:24:ac:b5:27:a6:ec:69:75:94:ad:1d: 02:33:a2:dc:68:53:a5:c0:d4:86:bc:bd:f0:47:ce: bd:69:50:6f:33:37:19:be:5c:d1:3f:48:5d:23:7e: 58:07:24:30:bf:b8:bf:8e:f8:9a:4d:20:58:cc:c7: f5:05:c3:83:1e:a8:a3:3e:e2:0c:f0:62:ce:e7:e8: de:e0:5f:72:33:cb:04:50:e9:fb:bb:75:48:19:1e: 95:57:0a:f6:f9:64:31:40:f0:67:76:61:79:f6:84: 5c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:16:3A:AE:5D:AF:13:1A:DE:98:3D:A6:6B:C2:4A:74:72:00:44:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c81b75b4-d25d-3a9c-a835-669cf97c3864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fc:f0:54:e6:4f:01:48:9f:b6:19:d3:f8:b8:5c:ec:a7:21: bd:fa:fc:ca:12:47:a7:74:49:db:0c:6e:3d:72:79:56:b9:e5: f2:a5:96:8a:c4:c2:f6:5a:78:bf:17:c2:2c:9b:54:80:41:2f: 1e:a2:65:78:02:83:42:da:c6:5a:0c:28:01:3b:f4:2f:ab:ca: 98:2d:11:68:1d:fa:36:3a:85:03:3d:1e:02:eb:87:e1:86:c4: d3:fd:c1:56:1e:19:4d:07:11:73:f3:75:c0:0b:9f:18:34:b6: 86:e0:69:bf:b1:2d:0e:d1:5e:44:0e:21:cd:cd:46:00:94:cc: b4:47:67:d7:d1:81:20:d1:2f:ad:b0:2f:f6:8b:7e:7e:66:6f: 29:ea:49:78:d7:32:0f:08:4e:6e:a6:9b:0c:82:03:12:21:be: 0e:b4:8c:0e:ea:6f:be:61:fc:8b:63:ed:8d:a8:0c:f4:4d:d0: 0c:fb:8d:4c:ab:cc:29:69:fc:c2:19:db:3d:3f:3e:ee:4e:74: 95:3a:9c:ef:dd:83:a3:75:13:e5:93:d8:24:4d:3f:84:a2:92: ff:44:ca:9e:ce:6c:5a:eb:7d:42:76:bb:23:9b:e5:23:6b:d6: 07:81:2a:3d:c1:00:bc:2a:93:80:51:57:a3:57:11:2c:22:a6: a1:66:a6:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiR184ZSOMro8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk Yzg4ZDU5OWYtODMyOS00ZDcxLWE0NTUtYjM1MmFhNGUxOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyT+MT3tSTpV7eSK01Lbfhig8oucMcHNkeK7 oKUvk61M3ql9SMsZ5326/7pr+icualAib2YZr81RBBmCd+NRlgu8Tmi+SEtwHTsR gDkJSy2hu+8n/dRw2NTWfDtU4s4fFMDD6gVMMhbF3tHxoR+KmrQOVPb3AQ0TvDTi GkD3z1NeyJKj3lL8GKMPYUswFPAwwDioLRMWMr3fJKy1J6bsaXWUrR0CM6LcaFOl wNSGvL3wR869aVBvMzcZvlzRP0hdI35YByQwv7i/jviaTSBYzMf1BcODHqijPuIM 8GLO5+je4F9yM8sEUOn7u3VIGR6VVwr2+WQxQPBndmF59oRc6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIWOq5drxMa3pg9pmvCSnRyAER3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzgxYjc1YjQtZDI1ZC0z YTljLWE4MzUtNjY5Y2Y5N2MzODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf88FTmTwFIn7YZ0/i4XOynIb36/MoSR6d0SdsMbj1yeVa55fKllorE wvZaeL8XwiybVIBBLx6iZXgCg0LaxloMKAE79C+rypgtEWgd+jY6hQM9HgLrh+GG xNP9wVYeGU0HEXPzdcALnxg0tobgab+xLQ7RXkQOIc3NRgCUzLRHZ9fRgSDRL62w L/aLfn5mbynqSXjXMg8ITm6mmwyCAxIhvg60jA7qb75h/Itj7Y2oDPRN0Az7jUyr zClp/MIZ2z0/Pu5OdJU6nO/dg6N1E+WT2CRNP4Sikv9Eyp7ObFrrfUJ2uyOb5SNr 1geBKj3BALwqk4BRV6NXESwipqFmptQ= -----END CERTIFICATE-----Generated at Fri Oct 10 19:47:40 2025 by rpki-client