$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa File: d3d48afe-6908-31d4-958a-74f7b78b9069.roa (raw, json) Hash identifier: KzxWSGZkhd5Xl1lTtn2jaKwU5O+KfBldiICwSJ/X/Pk= Subject key identifier: CE:1A:26:7F:75:E5:DB:71:D5:CF:09:2B:F3:B8:23:D8:3B:8F:3B:73 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201CA5B8C5B5E6B3A382740 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:ca:5b:8c:5b:5e:6b:3a:38:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4552e829-185e-4ab4-953e-16e1c2fc5560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d6:21:3a:3b:1f:4f:32:03:55:72:dc:d2:b2: 35:f9:21:0f:50:eb:b0:df:c4:8d:2c:9e:07:d5:50: 2f:c3:14:dc:88:c8:5d:65:99:ca:ab:45:66:bb:1e: 57:12:0d:2f:cf:7b:f3:a7:2f:5e:67:87:64:50:a9: 18:ae:ac:91:5c:e2:11:9a:a4:b4:21:44:56:2b:b8: 6e:43:97:bb:ea:5e:94:1e:79:5d:b3:8b:b8:e8:b6: 72:1a:c7:14:d2:54:d9:41:22:80:1b:70:0d:0f:90: 7b:b9:29:9b:23:9f:fa:b3:9d:51:6e:3d:ba:d5:ef: 1b:6c:08:12:69:f9:b6:1b:67:07:c5:1a:3f:c0:80: 94:ee:e4:13:14:17:db:24:41:8e:0d:eb:34:94:77: 11:a3:f0:df:13:6f:ad:6c:f2:dc:01:66:60:fb:c7: 06:17:39:b1:cf:43:5e:8a:d5:cb:1f:e8:7d:6f:2f: 4f:f6:62:26:9e:e8:54:46:6e:1b:3c:df:3b:31:68: 4b:1c:fe:fc:d6:0c:0b:1e:44:a7:40:8e:eb:36:b5: 40:46:01:d1:04:71:74:ca:4a:73:23:d2:8f:f0:5a: 93:b1:9e:49:52:bf:a5:65:db:8e:d1:3c:09:ea:08: c0:16:48:48:a7:16:3c:8b:bc:59:6a:ce:48:e7:02: 50:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1A:26:7F:75:E5:DB:71:D5:CF:09:2B:F3:B8:23:D8:3B:8F:3B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:12:32:f8:70:f6:c2:51:93:5f:8f:d7:d6:b2:b5:ff:7f:76: 98:0d:4c:7c:c9:ac:c3:fe:d7:85:da:c4:8b:4b:dc:f6:42:f8: 53:b3:9e:ee:d4:a7:76:38:f7:41:5b:21:2c:36:b1:15:ba:b9: 38:ed:e4:e5:5c:fe:b8:9a:06:52:df:3d:35:40:75:ce:ed:f8: e8:b0:7d:05:f5:8e:ee:cc:42:b0:d1:0c:7d:88:e7:45:0f:3d: 84:02:21:d6:f9:ed:02:b6:2c:49:c4:95:8a:75:28:8c:1d:59: 26:ca:83:f8:e4:c7:65:86:76:c5:17:a7:de:a5:e9:43:82:f7: 61:ee:01:f4:5e:49:3f:7b:ce:87:2b:3e:0e:5d:a3:81:f2:b2: 62:1d:67:48:c7:9e:cc:62:57:07:f2:99:fe:e2:38:66:99:fc: d2:5a:06:c6:92:aa:d8:f7:c5:b7:85:44:cf:ae:0a:49:16:b3: b6:e6:2e:74:b8:54:80:c5:c5:c1:5a:c1:c5:3c:20:06:59:85: e8:41:f3:61:85:c0:29:bf:55:05:a9:d7:01:1f:ae:0e:70:3d: be:73:18:a5:0f:57:1f:11:61:a6:f9:71:18:5f:f6:90:9b:1c: 45:45:6a:0e:fa:80:39:8d:5a:bb:77:38:bc:08:c7:d7:7a:48: 64:54:1a:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAcpbjFteazo4J0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDU1MmU4MjktMTg1ZS00YWI0LTk1M2UtMTZlMWMyZmM1NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNYhOjsfTzIDVXLc0rI1+SEPUOuw38SNLJ4H 1VAvwxTciMhdZZnKq0Vmux5XEg0vz3vzpy9eZ4dkUKkYrqyRXOIRmqS0IURWK7hu Q5e76l6UHnlds4u46LZyGscU0lTZQSKAG3AND5B7uSmbI5/6s51Rbj261e8bbAgS afm2G2cHxRo/wICU7uQTFBfbJEGODes0lHcRo/DfE2+tbPLcAWZg+8cGFzmxz0Ne itXLH+h9by9P9mImnuhURm4bPN87MWhLHP781gwLHkSnQI7rNrVARgHRBHF0ykpz I9KP8FqTsZ5JUr+lZduO0TwJ6gjAFkhIpxY8i7xZas5I5wJQ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4aJn915dtx1c8JK/O4I9g7jztzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDNkNDhhZmUtNjkwOC0z MWQ0LTk1OGEtNzRmN2I3OGI5MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKESMvhw9sJRk1+P19aytf9/dpgNTHzJrMP+14XaxItL3PZC+FOznu7U p3Y490FbISw2sRW6uTjt5OVc/riaBlLfPTVAdc7t+OiwfQX1ju7MQrDRDH2I50UP PYQCIdb57QK2LEnElYp1KIwdWSbKg/jkx2WGdsUXp96l6UOC92HuAfReST97zocr Pg5do4HysmIdZ0jHnsxiVwfymf7iOGaZ/NJaBsaSqtj3xbeFRM+uCkkWs7bmLnS4 VIDFxcFawcU8IAZZhehB82GFwCm/VQWp1wEfrg5wPb5zGKUPVx8RYab5cRhf9pCb HEVFag76gDmNWrt3OLwIx9d6SGRUGlc= -----END CERTIFICATE-----Generated at Sat Oct 11 05:55:29 2025 by rpki-client