$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa File: d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa (raw, json) Hash identifier: l0BacjCnbK/xzflA30AvJQ7nTUo6NyGuhQNTTVx3YNI= Subject key identifier: 09:98:18:95:E2:9C:E3:E3:DB:3F:C8:E0:AC:2F:A6:EC:8D:4B:60:14 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673D137A7D243DF3C2EB00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3d:13:7a:7d:24:3d:f3:c2:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=af43c96f-13b0-475e-ab74-f289bb1e4064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:e9:77:df:61:5c:58:5a:72:95:22:e9:42: ea:5d:4c:91:c7:47:d4:69:46:d4:92:05:6a:db:fa: 14:52:56:be:e2:4c:fc:eb:71:03:eb:b9:be:f5:5a: 1f:11:01:0b:60:b0:3b:56:54:ab:c2:2b:17:d2:0e: cb:ba:28:a4:48:14:78:5a:ad:88:9a:48:50:f5:b1: 4e:37:b9:f1:81:e8:8d:bc:a6:27:56:98:57:0a:ec: 7c:10:d1:0b:fe:bc:bb:cd:c9:73:92:4f:8f:86:85: 9b:2e:dc:bc:64:ee:c5:49:b8:fd:27:60:3b:b3:a0: c4:87:00:fb:2f:9e:c8:eb:31:08:62:25:05:9c:51: 17:44:d5:f8:71:c5:de:e6:11:15:fd:25:05:4a:29: 77:db:8e:85:c8:cb:65:b5:cd:5e:b6:d7:fc:23:6a: 4b:8a:4d:d0:f2:4a:b0:69:1e:d6:dd:41:fe:1b:ec: 4f:4d:9a:c4:d0:13:95:3b:1d:99:f8:71:27:8c:d6: e4:e8:4f:82:6f:cf:86:f5:b6:09:5e:8a:8c:4b:75: 02:69:2e:49:e4:99:6f:ce:42:3a:4c:f8:16:2b:5f: cf:4e:39:58:5f:e2:88:5a:56:e1:a7:77:db:40:09: e9:4b:b7:04:8c:d5:6c:2f:63:f2:d7:3e:2b:69:62: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:98:18:95:E2:9C:E3:E3:DB:3F:C8:E0:AC:2F:A6:EC:8D:4B:60:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d46f3219-aff8-3156-bb3a-6df9c94b1af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:59:a8:77:3b:f9:0c:fe:45:b8:a0:d3:ca:d7:9b:5c:ec:82: 3b:bd:64:9c:40:fc:9f:28:9a:d7:ec:85:1b:a8:a7:92:b5:f1: b7:5d:97:d0:9c:da:e2:e8:f1:56:45:df:0c:95:8f:6d:80:c0: 18:f2:83:ad:9b:57:b1:2b:0a:1f:bc:28:0d:38:1c:7e:f3:76: fe:e6:9d:5a:8f:15:33:e6:55:8e:b1:16:83:0e:0c:d9:7b:64: 7e:20:1f:2d:bc:00:cc:e3:3d:38:db:e4:b0:1f:ba:bf:99:2f: a9:7c:9a:ac:99:5c:ff:31:f9:16:4b:f5:90:96:f5:a3:dd:bf: 13:ab:27:54:05:10:0b:02:03:29:ed:57:08:ff:85:4e:a8:66: 7b:83:43:89:2a:60:35:5a:43:5d:5f:78:0e:31:de:d7:f3:42: 0c:23:c1:58:ea:6c:ba:62:7f:10:25:0b:64:67:8f:16:ee:c9: 53:ac:3b:7b:21:e4:cb:5d:dd:53:42:8b:1c:b7:22:b9:b5:d1: 21:1b:43:0e:28:21:f9:f3:76:ea:d5:15:d7:eb:ed:3c:2f:07: ac:2c:14:37:ef:ed:44:f0:9b:68:cd:7c:bf:14:88:b2:dd:c6: 3f:76:89:f3:47:a9:0f:6a:67:1f:dd:7c:61:58:5e:81:14:64: ec:33:d6:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZz0Ten0kPfPC6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YWY0M2M5NmYtMTNiMC00NzVlLWFiNzQtZjI4OWJiMWU0MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU7pd99hXFhacpUi6ULqXUyRx0fUaUbUkgVq 2/oUUla+4kz863ED67m+9VofEQELYLA7VlSrwisX0g7LuiikSBR4Wq2ImkhQ9bFO N7nxgeiNvKYnVphXCux8ENEL/ry7zclzkk+PhoWbLty8ZO7FSbj9J2A7s6DEhwD7 L57I6zEIYiUFnFEXRNX4ccXe5hEV/SUFSil3246FyMtltc1ettf8I2pLik3Q8kqw aR7W3UH+G+xPTZrE0BOVOx2Z+HEnjNbk6E+Cb8+G9bYJXoqMS3UCaS5J5JlvzkI6 TPgWK1/PTjlYX+KIWlbhp3fbQAnpS7cEjNVsL2Py1z4raWLNRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmYGJXinOPj2z/I4KwvpuyNS2AUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDQ2ZjMyMTktYWZmOC0z MTU2LWJiM2EtNmRmOWM5NGIxYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNZqHc7+Qz+Rbig08rXm1zsgju9ZJxA/J8omtfshRuop5K18bddl9Cc 2uLo8VZF3wyVj22AwBjyg62bV7ErCh+8KA04HH7zdv7mnVqPFTPmVY6xFoMODNl7 ZH4gHy28AMzjPTjb5LAfur+ZL6l8mqyZXP8x+RZL9ZCW9aPdvxOrJ1QFEAsCAynt Vwj/hU6oZnuDQ4kqYDVaQ11feA4x3tfzQgwjwVjqbLpifxAlC2RnjxbuyVOsO3sh 5Mtd3VNCixy3Irm10SEbQw4oIfnzdurVFdfr7TwvB6wsFDfv7UTwm2jNfL8UiLLd xj92ifNHqQ9qZx/dfGFYXoEUZOwz1rE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:13 2025 by rpki-client