$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebffcba3-7a59-3588-8d5f-c0fe56337c6d.roa File: ebffcba3-7a59-3588-8d5f-c0fe56337c6d.roa (raw, json) Hash identifier: q4o/eGK5hFYzTznkdGScDCRUwJNsUoyXHBjHdETLqLI= Subject key identifier: 18:3A:E9:A6:6C:0E:16:D8:A5:93:B0:6C:67:E2:08:11:BF:62:5E:2F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674ACB2D97D1D205B48C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebffcba3-7a59-3588-8d5f-c0fe56337c6d.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4a:cb:2d:97:d1:d2:05:b4:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=ace348cc-a926-45c2-9f2f-38daa2a1cd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:31:98:a0:1e:9d:2a:4e:11:95:c6:d2:1c: 65:7f:ef:c7:92:f7:d4:8a:e1:25:9e:d3:b2:4e:cb: 04:fc:b3:7a:25:58:01:c0:d5:b7:2d:78:f8:fa:46: de:94:1f:e9:e9:87:c4:54:3c:fe:da:f8:70:ae:d9: 77:3d:3d:a2:6e:42:2e:e8:cf:25:85:b5:dc:36:25: 70:2d:62:16:a8:4e:22:d5:be:69:cb:bb:f0:51:f5: 00:51:d8:09:ae:a5:80:22:5e:d7:21:46:86:81:86: 84:3d:fd:12:e6:9f:17:3d:7f:07:9d:f5:01:ca:56: 91:34:c5:e8:b8:fd:cd:09:98:7a:a6:5f:a6:24:24: 99:a1:02:49:9c:44:d5:f2:67:86:73:56:4c:c7:70: c7:ed:49:22:c0:72:6f:02:d3:5e:f7:e1:76:5e:d8: 99:52:f1:77:7d:a9:cf:2e:bb:1d:f3:5e:0b:0c:d9: d2:08:f0:63:43:e4:dc:6e:4e:f3:16:ae:b2:32:e8: ae:e8:1c:c5:60:e9:5d:b3:23:72:1e:ee:df:34:07: e8:e7:d1:65:22:7a:d3:18:83:7a:74:df:7c:1b:5a: 77:0b:52:96:c0:20:c5:5c:c1:07:f9:e3:fe:2d:e5: f9:48:dd:d6:1d:56:c1:84:b4:d7:e5:58:00:2a:87: 0b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3A:E9:A6:6C:0E:16:D8:A5:93:B0:6C:67:E2:08:11:BF:62:5E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebffcba3-7a59-3588-8d5f-c0fe56337c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:de:8d:18:94:fa:ed:8a:5b:eb:57:15:a6:26:1c:9f:90:9d: 66:ff:40:f3:a0:c5:c2:66:99:6c:b3:4e:22:1f:70:92:cd:a8: ce:f9:4d:b9:0d:8f:3b:a3:a3:e3:42:a0:49:6b:1b:0a:06:a9: e1:cd:47:33:8a:8a:44:23:03:d1:45:70:bf:a7:ef:80:8e:cb: 90:72:e5:b4:74:ef:88:2b:58:33:d4:84:6d:05:d4:f9:30:7d: a3:04:79:c7:28:2a:d7:e7:78:87:f5:27:30:98:14:a8:ae:ca: 04:f0:c8:58:81:6a:b8:36:16:9a:1b:c4:94:1d:b3:8a:0b:e8: f3:ea:4e:71:53:8c:26:18:8a:dd:08:a8:f5:d7:e3:73:b7:15: 5c:46:56:3e:61:19:45:88:de:6b:0a:da:19:d4:4c:5f:1e:2b: 7e:3b:87:82:08:6d:b5:b4:6c:f5:e1:05:e4:be:3a:f1:71:c5: f6:e1:80:00:b4:8c:73:28:4c:af:a2:25:a2:4b:4b:c2:38:bf: 03:12:2c:36:c7:5a:5b:e0:20:79:8c:3d:99:94:76:4c:5e:25: 48:40:07:f8:ea:49:f7:bf:c5:c5:a4:67:ec:ca:80:7b:6b:70: 51:e6:1a:27:f6:d9:84:63:a6:8f:f4:12:c8:44:74:9c:29:e0: fd:81:a1:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0rLLZfR0gW0jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YWNlMzQ4Y2MtYTkyNi00NWMyLTlmMmYtMzhkYWEyYTFjZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIsxmKAenSpOEZXG0hxlf+/HkvfUiuElntOy TssE/LN6JVgBwNW3LXj4+kbelB/p6YfEVDz+2vhwrtl3PT2ibkIu6M8lhbXcNiVw LWIWqE4i1b5py7vwUfUAUdgJrqWAIl7XIUaGgYaEPf0S5p8XPX8HnfUBylaRNMXo uP3NCZh6pl+mJCSZoQJJnETV8meGc1ZMx3DH7UkiwHJvAtNe9+F2XtiZUvF3fanP Lrsd814LDNnSCPBjQ+Tcbk7zFq6yMuiu6BzFYOldsyNyHu7fNAfo59FlInrTGIN6 dN98G1p3C1KWwCDFXMEH+eP+LeX5SN3WHVbBhLTX5VgAKocLtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBg66aZsDhbYpZOwbGfiCBG/Yl4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWJmZmNiYTMtN2E1OS0z NTg4LThkNWYtYzBmZTU2MzM3YzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/ejRiU+u2KW+tXFaYmHJ+QnWb/QPOgxcJmmWyzTiIfcJLNqM75TbkN jzujo+NCoElrGwoGqeHNRzOKikQjA9FFcL+n74COy5By5bR074grWDPUhG0F1Pkw faMEeccoKtfneIf1JzCYFKiuygTwyFiBarg2FpobxJQds4oL6PPqTnFTjCYYit0I qPXX43O3FVxGVj5hGUWI3msK2hnUTF8eK347h4IIbbW0bPXhBeS+OvFxxfbhgAC0 jHMoTK+iJaJLS8I4vwMSLDbHWlvgIHmMPZmUdkxeJUhAB/jqSfe/xcWkZ+zKgHtr cFHmGif22YRjpo/0EshEdJwp4P2BoZw= -----END CERTIFICATE-----Generated at Sat Oct 11 00:05:35 2025 by rpki-client