$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da7c6ee0-4858-3c5f-a796-a760e2c94065.roa File: da7c6ee0-4858-3c5f-a796-a760e2c94065.roa (raw, json) Hash identifier: JktAtgeo+I0F0jFjYPjn9zg136RtwlmRYXV8CNHZGJk= Subject key identifier: D1:97:E4:27:81:0E:F9:7D:DC:60:63:41:CF:65:73:E5:C3:9B:53:AC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201DCE2EE03E9FEB3BB98C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da7c6ee0-4858-3c5f-a796-a760e2c94065.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:dc:e2:ee:03:e9:fe:b3:bb:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=5676fb20-fda4-4688-9362-e8fc4c8bdddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:f4:85:5c:9c:01:f4:32:39:cc:80:16:f3: db:45:8f:8f:4d:5e:53:e1:cb:1d:6d:2c:8e:32:bd: 7c:16:2a:85:f9:08:9d:ed:9f:ea:39:58:85:57:a4: 51:83:64:dd:c7:d4:7e:3e:8b:9b:22:9b:5b:45:7e: 25:29:86:d3:28:1a:02:75:91:7e:86:a7:82:47:1e: a9:8e:c8:a5:36:a7:45:aa:db:87:d5:47:b9:29:45: e6:9a:2a:80:b0:79:1a:73:58:e6:5f:ec:e9:0d:e3: 04:ff:77:c4:45:de:e8:2d:e2:6b:1d:62:20:c6:73: 74:3d:03:8a:ec:7e:a9:03:bc:7f:b6:b6:99:4b:fe: 99:3d:aa:17:e0:4c:01:ba:fb:c0:ff:4e:b0:aa:36: 52:0f:f7:7f:ef:83:e6:ad:3f:09:f3:2d:29:3a:f2: 2c:40:64:7a:1b:ea:a2:97:0f:18:54:27:e7:c7:6d: 25:74:71:1c:e7:14:c1:5a:8c:5e:39:c3:d3:33:e0: c3:9f:f2:f5:a4:ff:df:bb:8f:21:ff:36:e8:1e:c4: a2:a2:74:74:0d:f0:58:6c:f8:cd:8d:f0:a5:2e:89: 26:34:2e:57:04:05:e8:e9:63:14:8b:5d:f9:7c:61: 1f:c3:99:17:04:2b:37:5a:dd:e4:25:3c:89:6d:37: ea:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:97:E4:27:81:0E:F9:7D:DC:60:63:41:CF:65:73:E5:C3:9B:53:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da7c6ee0-4858-3c5f-a796-a760e2c94065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:3e:75:d7:31:4d:f4:8f:15:c1:bc:72:2d:93:bf:00:fd:fa: 01:6e:cc:08:5d:94:b9:b7:cd:1f:c6:f8:b1:29:f8:06:8f:0f: 57:f8:e0:3b:02:f7:54:cb:05:3d:88:54:40:c6:a9:a8:78:8b: 1d:81:eb:e8:f4:f9:44:08:a6:70:89:96:f6:d5:fe:56:46:f5: 69:47:eb:75:eb:3c:7a:4e:96:8d:a5:7c:50:8d:7c:17:f7:ea: b9:2b:3d:ce:bf:12:87:58:24:d6:62:87:24:a5:51:d5:bf:82: 26:3f:54:fa:13:89:87:58:c3:d4:8a:60:ae:bb:2c:a4:89:be: d3:cf:42:44:89:c4:d0:b4:52:e9:20:68:b4:82:c0:80:28:a8: 5b:96:8a:d5:56:db:9b:39:95:cc:24:d0:cb:fb:e5:f4:36:77: 93:15:8c:e9:dc:dc:7b:12:25:51:f2:8e:7c:a9:17:b2:13:ba: 17:ce:9b:7e:cf:5f:98:fe:5a:bc:f2:72:ad:ff:1a:e2:2c:d1: e1:7d:30:19:97:62:e2:8a:6a:50:bf:33:76:03:03:1d:cf:05: b7:03:4e:d4:77:37:75:0f:ab:6b:a4:7f:1d:ce:5c:3a:89:20: 2c:47:f6:22:86:64:56:0d:80:80:47:70:b1:14:49:a3:bc:be: 31:3d:6c:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdzi7gPp/rO7mMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTY3NmZiMjAtZmRhNC00Njg4LTkzNjItZThmYzRjOGJkZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl/0hVycAfQyOcyAFvPbRY+PTV5T4csdbSyO Mr18FiqF+Qid7Z/qOViFV6RRg2Tdx9R+PoubIptbRX4lKYbTKBoCdZF+hqeCRx6p jsilNqdFqtuH1Ue5KUXmmiqAsHkac1jmX+zpDeME/3fERd7oLeJrHWIgxnN0PQOK 7H6pA7x/traZS/6ZPaoX4EwBuvvA/06wqjZSD/d/74PmrT8J8y0pOvIsQGR6G+qi lw8YVCfnx20ldHEc5xTBWoxeOcPTM+DDn/L1pP/fu48h/zboHsSionR0DfBYbPjN jfClLokmNC5XBAXo6WMUi135fGEfw5kXBCs3Wt3kJTyJbTfqQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGX5CeBDvl93GBjQc9lc+XDm1OsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGE3YzZlZTAtNDg1OC0z YzVmLWE3OTYtYTc2MGUyYzk0MDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4+ddcxTfSPFcG8ci2TvwD9+gFuzAhdlLm3zR/G+LEp+AaPD1f44DsC 91TLBT2IVEDGqah4ix2B6+j0+UQIpnCJlvbV/lZG9WlH63XrPHpOlo2lfFCNfBf3 6rkrPc6/EodYJNZihySlUdW/giY/VPoTiYdYw9SKYK67LKSJvtPPQkSJxNC0Uukg aLSCwIAoqFuWitVW25s5lcwk0Mv75fQ2d5MVjOnc3HsSJVHyjnypF7ITuhfOm37P X5j+Wrzycq3/GuIs0eF9MBmXYuKKalC/M3YDAx3PBbcDTtR3N3UPq2ukfx3OXDqJ ICxH9iKGZFYNgIBHcLEUSaO8vjE9bHk= -----END CERTIFICATE-----Generated at Sat Oct 11 00:03:04 2025 by rpki-client