$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2e89f6d-6d5c-3ecc-8899-7911f3304597.roa File: d2e89f6d-6d5c-3ecc-8899-7911f3304597.roa (raw, json) Hash identifier: Wh1/BtLNVW0n36kLj0zJS7+iiT1LG13qzaaRFxj7jQE= Subject key identifier: 96:75:79:B3:7D:96:91:A2:E8:BF:9C:BD:2C:EC:33:C0:61:0B:1D:E8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673B9437612DFD132AC900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2e89f6d-6d5c-3ecc-8899-7911f3304597.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3b:94:37:61:2d:fd:13:2a:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=73a86efe-eae6-4d4a-849e-8cb9f521cd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ca:70:28:9c:dc:65:b5:62:46:5a:1a:01:64: f8:a1:6e:26:af:70:1f:06:56:47:d2:60:7a:1a:12: 96:e4:cd:c8:f1:cb:e0:bb:88:a4:b6:98:32:6a:eb: f4:4e:e1:98:7e:48:81:c1:63:72:39:18:0e:bc:5e: b5:3d:0f:a4:92:6d:59:82:76:dd:4e:08:b6:56:85: c0:61:16:10:91:17:e0:06:93:fb:ab:c7:a8:ad:58: 62:c3:99:86:10:3f:90:a2:a8:d8:a8:9d:7d:3c:a0: 29:a5:7d:d3:bc:b7:47:90:4a:0e:c9:28:ce:1f:e3: 05:e2:cd:6d:83:1e:66:c2:c5:70:f4:37:79:68:1b: 4f:73:34:05:7c:10:d0:04:0b:60:dd:61:34:34:75: 60:fc:37:0b:ba:b6:66:35:d5:49:5c:bc:35:3b:84: 5c:89:f4:b1:3d:03:c4:a5:59:61:e8:5c:45:59:fd: 62:44:ab:bf:9e:72:38:af:fb:ee:1d:93:29:66:a6: 1b:36:8e:c7:e4:1c:40:65:ae:36:74:da:aa:9c:87: 54:e1:9c:37:e9:34:9a:19:11:ca:c3:0e:8d:0f:2c: 21:12:ab:d1:b4:be:17:57:de:e4:fc:c6:69:4d:4f: a4:b0:4c:5f:1d:88:98:a8:7a:69:40:c8:48:cf:58: a6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:75:79:B3:7D:96:91:A2:E8:BF:9C:BD:2C:EC:33:C0:61:0B:1D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2e89f6d-6d5c-3ecc-8899-7911f3304597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:48:2a:9a:8f:3f:85:04:f0:85:66:6e:b1:2e:d4:20:37:83: 97:54:35:be:66:cc:3f:aa:75:3c:93:6d:9a:1f:c7:8b:b1:87: 37:17:27:24:1b:c2:43:5c:e7:a8:b2:05:22:d9:83:96:32:ef: 4f:b4:69:3a:32:a7:35:63:29:06:74:a3:da:a8:d8:d0:e5:24: bc:84:b8:8a:96:8c:56:6a:84:7f:6d:e3:ef:51:7b:ca:68:a7: 16:0b:0f:d8:7e:d2:83:f3:a2:d3:11:4a:00:60:b1:4b:ba:dc: 08:b5:2c:61:4a:2a:46:e6:63:84:51:c2:f2:52:a2:56:8e:e8: 77:dd:c5:df:94:96:e8:d8:1f:7b:2d:d7:54:6a:1b:dd:c3:00: 63:f8:3b:4b:58:9e:14:47:99:2d:21:31:a8:7f:19:e9:2e:27: ec:d7:f5:d8:ff:41:7b:e9:7e:1c:b5:45:cd:28:6f:33:00:7f: 38:70:23:51:fe:f4:6f:e9:bc:c6:65:1b:91:e0:9d:0b:bd:34: e4:18:c3:97:63:1f:5b:91:0d:96:10:d1:9c:02:ad:b8:28:16: 59:ad:20:c3:b8:b9:be:36:6b:01:36:8a:5e:8a:9c:78:fe:ee: 15:0c:18:da:81:56:01:e5:20:9e:fe:45:44:d3:6b:ea:3d:7e: ab:4e:53:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzuUN2Et/RMqyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk NzNhODZlZmUtZWFlNi00ZDRhLTg0OWUtOGNiOWY1MjFjZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMpwKJzcZbViRloaAWT4oW4mr3AfBlZH0mB6 GhKW5M3I8cvgu4iktpgyauv0TuGYfkiBwWNyORgOvF61PQ+kkm1ZgnbdTgi2VoXA YRYQkRfgBpP7q8eorVhiw5mGED+QoqjYqJ19PKAppX3TvLdHkEoOySjOH+MF4s1t gx5mwsVw9Dd5aBtPczQFfBDQBAtg3WE0NHVg/DcLurZmNdVJXLw1O4RcifSxPQPE pVlh6FxFWf1iRKu/nnI4r/vuHZMpZqYbNo7H5BxAZa42dNqqnIdU4Zw36TSaGRHK ww6NDywhEqvRtL4XV97k/MZpTU+ksExfHYiYqHppQMhIz1imnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ1ebN9lpGi6L+cvSzsM8BhCx3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDJlODlmNmQtNmQ1Yy0z ZWNjLTg4OTktNzkxMWYzMzA0NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5IKpqPP4UE8IVmbrEu1CA3g5dUNb5mzD+qdTyTbZofx4uxhzcXJyQb wkNc56iyBSLZg5Yy70+0aToypzVjKQZ0o9qo2NDlJLyEuIqWjFZqhH9t4+9Re8po pxYLD9h+0oPzotMRSgBgsUu63Ai1LGFKKkbmY4RRwvJSolaO6Hfdxd+UlujYH3st 11RqG93DAGP4O0tYnhRHmS0hMah/GekuJ+zX9dj/QXvpfhy1Rc0obzMAfzhwI1H+ 9G/pvMZlG5HgnQu9NOQYw5djH1uRDZYQ0ZwCrbgoFlmtIMO4ub42awE2il6KnHj+ 7hUMGNqBVgHlIJ7+RUTTa+o9fqtOU/8= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:44 2025 by rpki-client