$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa File: f1432ee2-0ae6-32fb-950a-ffa05a901073.roa (raw, json) Hash identifier: aJ/70abCoq6SXb+Vz+6XAYjmwyFD8lOvI93Wx9jR9a0= Subject key identifier: DB:66:2E:D6:3C:F6:1E:E8:87:BE:F6:56:F7:6D:5E:F1:01:06:0B:77 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620236EEB624D4DE8F141F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:36:ee:b6:24:d4:de:8f:14:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=70c321fe-143b-41be-a028-fdda7a409ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:61:19:35:48:2a:63:8e:c7:2b:a0:d8:39: b9:15:c2:d8:48:8a:df:1c:83:e1:bc:e0:9c:16:8a: f3:37:c7:07:7d:14:7d:78:8c:f5:9f:f2:ae:a7:9a: f3:bf:4f:40:6b:35:63:a3:8b:93:c3:ab:ae:09:22: 69:19:72:4d:73:ff:bf:ef:a0:7c:cb:8f:d3:ff:9c: 4f:0c:ed:93:e4:83:79:07:23:53:34:f0:c9:ea:3b: fb:65:54:0a:e3:94:d2:a7:32:3c:b6:92:24:e4:b6: e8:98:36:4c:83:b3:73:e3:c1:fd:18:22:01:d0:a2: 09:1f:46:ba:3c:a7:82:58:cf:97:bc:6a:b9:70:be: ac:29:28:9c:80:3a:23:bc:a1:4d:01:e3:1d:73:95: 53:c9:30:47:0e:bb:85:12:73:06:61:6c:d1:6b:ea: 11:81:c7:eb:c2:20:d6:d8:de:d8:3d:ab:6d:63:04: 55:34:0b:07:39:88:c7:8e:94:f7:7c:ca:14:f2:26: 6e:f6:9f:da:9e:8f:82:35:2b:f9:0c:7b:09:07:69: ff:6b:d4:d2:0c:b0:cc:92:ac:e0:cb:69:70:33:c8: 6d:d2:9d:49:79:1e:2f:b4:59:b6:d4:ff:0f:ef:69: d0:bb:d3:dd:e9:b7:c0:f6:a3:fd:24:56:a7:c4:a8: d8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:66:2E:D6:3C:F6:1E:E8:87:BE:F6:56:F7:6D:5E:F1:01:06:0B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:dc:22:35:2c:60:d2:5d:30:9d:ab:13:06:89:44:01:a0:05: 60:34:3c:a3:fa:98:67:83:92:31:38:e5:ac:5d:22:05:93:64: ab:1e:dc:d6:9b:1d:bf:39:86:23:57:96:a9:3f:2e:de:ce:27: fc:c7:0e:17:4a:13:62:95:f7:9d:a9:2b:6a:0c:8e:8e:a8:ef: 61:2a:99:27:71:ab:13:6b:e7:93:68:6f:ff:f1:12:e6:6f:7a: 62:eb:19:14:4c:e2:fe:de:e1:35:56:ba:ae:96:3b:47:62:e6: e3:42:07:77:b0:fc:5c:cc:2f:4a:7a:37:38:42:a2:d2:3b:22: ea:97:48:29:0c:ef:9e:19:de:69:2d:cf:90:03:67:f0:28:dc: 20:41:df:c6:8d:c3:40:0f:b3:45:49:73:1d:2c:32:a4:f4:a9: 82:a6:17:68:65:df:ac:5c:f4:62:09:8f:d3:0e:be:09:06:45: 01:79:39:86:00:a8:5b:2d:c2:5a:97:b2:dd:0f:91:d2:16:e1: 26:ef:e8:f5:63:70:76:f5:3c:ef:07:4c:01:f5:f9:d4:13:b9: 3f:7d:1e:3b:e3:14:3f:31:5f:ad:bd:d5:b1:6d:47:11:78:3b: 66:72:08:af:13:0c:28:18:62:1b:1c:59:ab:e6:5e:a0:6f:19: e1:7b:75:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjbutiTU3o8UH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzBjMzIxZmUtMTQzYi00MWJlLWEwMjgtZmRkYTdhNDA5YWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5d1hGTVIKmOOxyug2Dm5FcLYSIrfHIPhvOCc ForzN8cHfRR9eIz1n/Kup5rzv09AazVjo4uTw6uuCSJpGXJNc/+/76B8y4/T/5xP DO2T5IN5ByNTNPDJ6jv7ZVQK45TSpzI8tpIk5LbomDZMg7Nz48H9GCIB0KIJH0a6 PKeCWM+XvGq5cL6sKSicgDojvKFNAeMdc5VTyTBHDruFEnMGYWzRa+oRgcfrwiDW 2N7YPattYwRVNAsHOYjHjpT3fMoU8iZu9p/ano+CNSv5DHsJB2n/a9TSDLDMkqzg y2lwM8ht0p1JeR4vtFm21P8P72nQu9Pd6bfA9qP9JFanxKjYQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtmLtY89h7oh772VvdtXvEBBgt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjE0MzJlZTItMGFlNi0z MmZiLTk1MGEtZmZhMDVhOTAxMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErcIjUsYNJdMJ2rEwaJRAGgBWA0PKP6mGeDkjE45axdIgWTZKse3Nab Hb85hiNXlqk/Lt7OJ/zHDhdKE2KV952pK2oMjo6o72EqmSdxqxNr55Nob//xEuZv emLrGRRM4v7e4TVWuq6WO0di5uNCB3ew/FzML0p6NzhCotI7IuqXSCkM754Z3mkt z5ADZ/Ao3CBB38aNw0APs0VJcx0sMqT0qYKmF2hl36xc9GIJj9MOvgkGRQF5OYYA qFstwlqXst0PkdIW4Sbv6PVjcHb1PO8HTAH1+dQTuT99HjvjFD8xX6291bFtRxF4 O2ZyCK8TDCgYYhscWavmXqBvGeF7dQI= -----END CERTIFICATE-----Generated at Fri Oct 10 19:54:16 2025 by rpki-client