$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa File: d5b724de-9f61-31f2-b085-181a0a9d1526.roa (raw, json) Hash identifier: yHk7N5yee1YkMV9Xs25eWlbll0AE47tiJ5wecwVMnOU= Subject key identifier: AA:22:6D:BF:BD:EF:93:D8:DA:BF:66:6F:A8:21:A9:D4:16:0F:A3:C1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D06DC14A00795E343D40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d0:6d:c1:4a:00:79:5e:34:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=88860385-71db-4eb5-84bf-0cbf82371e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:40:47:df:33:5b:0b:30:eb:22:dc:d7:07:4e: 84:7b:bd:d1:26:97:4e:39:29:23:1c:b4:fa:eb:18: 78:b9:28:f6:f5:55:6f:9c:e5:b7:4d:7f:db:ec:50: f7:3c:15:92:fd:ea:5a:c6:f9:2f:fd:2d:ca:f2:d9: 75:01:9e:d7:4b:3b:66:72:77:23:f0:7d:ea:12:8d: 20:55:c6:e6:0c:32:bf:a7:54:72:2b:db:1d:e3:c5: 59:fd:f9:7d:b2:2f:e0:69:20:12:86:61:34:b8:8d: bf:6f:08:db:94:e6:f5:80:a8:29:a1:fe:20:70:c7: 25:8d:66:28:21:54:a2:a3:9e:c8:86:49:18:08:d5: c9:a8:4a:e6:39:8c:2e:81:b9:dc:d6:02:c1:7e:e9: b0:3c:5c:43:b6:63:82:a5:b7:0b:f3:67:04:ef:86: 33:68:13:8c:54:40:8c:cd:9b:59:b9:bc:28:cc:6c: be:a6:8d:7b:a0:5e:b7:33:f9:4c:29:e6:11:54:93: 52:5f:2f:f9:a5:4a:2a:cf:68:f2:4d:5e:da:56:7f: 5e:cb:cd:9e:30:6f:39:12:f2:5c:13:58:84:40:5b: 35:46:30:c2:60:24:a0:cd:ea:53:68:d7:8b:7d:f9: 5a:04:9e:7f:da:04:36:5d:15:c7:7e:21:5d:af:d7: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:22:6D:BF:BD:EF:93:D8:DA:BF:66:6F:A8:21:A9:D4:16:0F:A3:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d5b724de-9f61-31f2-b085-181a0a9d1526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:c8:15:4d:79:fb:46:82:51:f3:86:59:0f:59:e1:f8:52:85: e6:ea:35:9a:66:3b:3d:ca:4a:2b:bd:d9:d6:0f:22:2a:69:92: b2:d9:52:7a:98:8c:d4:c7:c1:d7:0a:a5:23:5c:17:78:bf:05: d8:6a:8a:dd:83:77:dd:8e:0b:04:e7:d9:bd:ae:d1:fb:c2:3b: 53:4c:51:0a:61:78:36:80:f0:e6:a3:8a:0b:e9:26:c9:32:3b: 1a:7f:9e:3f:14:a8:63:11:2b:51:49:9b:fb:b3:36:24:f9:97: dd:e3:24:87:95:0a:1e:ee:bb:f9:ed:f7:34:ad:b4:9e:1a:78: b2:ef:6d:59:ba:93:1c:d3:2e:99:02:6f:16:17:eb:bc:ba:66: 8f:e0:4a:c8:27:05:5a:f6:99:fc:5b:54:4b:89:3b:95:35:2f: 4c:69:35:c6:25:4d:fc:01:54:31:74:f2:44:f0:33:b4:49:ee: 5c:80:30:56:53:76:ab:14:1e:7a:aa:63:6d:0e:5c:1e:e7:0b: 81:71:48:54:bc:ae:c8:13:a7:8d:33:0f:e8:61:68:14:e6:a9: c5:87:5b:28:93:fb:0a:0b:43:ac:01:a7:d8:b2:77:66:9e:4f: 91:a3:94:bb:fe:0d:16:3b:49:b8:53:5a:f1:6e:8c:45:11:d7: 0d:39:26:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdBtwUoAeV40PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODg4NjAzODUtNzFkYi00ZWI1LTg0YmYtMGNiZjgyMzcxZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykBH3zNbCzDrItzXB06Ee73RJpdOOSkjHLT6 6xh4uSj29VVvnOW3TX/b7FD3PBWS/epaxvkv/S3K8tl1AZ7XSztmcncj8H3qEo0g VcbmDDK/p1RyK9sd48VZ/fl9si/gaSAShmE0uI2/bwjblOb1gKgpof4gcMcljWYo IVSio57IhkkYCNXJqErmOYwugbnc1gLBfumwPFxDtmOCpbcL82cE74YzaBOMVECM zZtZubwozGy+po17oF63M/lMKeYRVJNSXy/5pUoqz2jyTV7aVn9ey82eMG85EvJc E1iEQFs1RjDCYCSgzepTaNeLfflaBJ5/2gQ2XRXHfiFdr9cRwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoibb+975PY2r9mb6ghqdQWD6PBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDViNzI0ZGUtOWY2MS0z MWYyLWIwODUtMTgxYTBhOWQxNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLIFU15+0aCUfOGWQ9Z4fhShebqNZpmOz3KSiu92dYPIippkrLZUnqY jNTHwdcKpSNcF3i/Bdhqit2Dd92OCwTn2b2u0fvCO1NMUQpheDaA8OajigvpJsky Oxp/nj8UqGMRK1FJm/uzNiT5l93jJIeVCh7uu/nt9zSttJ4aeLLvbVm6kxzTLpkC bxYX67y6Zo/gSsgnBVr2mfxbVEuJO5U1L0xpNcYlTfwBVDF08kTwM7RJ7lyAMFZT dqsUHnqqY20OXB7nC4FxSFS8rsgTp40zD+hhaBTmqcWHWyiT+woLQ6wBp9iyd2ae T5GjlLv+DRY7SbhTWvFujEUR1w05JjA= -----END CERTIFICATE-----Generated at Fri Oct 10 22:19:48 2025 by rpki-client