$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8a600ed-b0a7-3813-9b4a-468fe007275d.roa File: f8a600ed-b0a7-3813-9b4a-468fe007275d.roa (raw, json) Hash identifier: C3uZZv6rCD/53Dp1Z3AN3SXnCgQqdV7xLxRp/QRZoAI= Subject key identifier: FF:A0:CD:6F:CF:89:56:B2:BE:89:2A:89:BD:FF:B2:CA:5E:CF:7E:7B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620223CCCD050629B17B4140 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8a600ed-b0a7-3813-9b4a-468fe007275d.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:23:cc:cd:05:06:29:b1:7b:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0fb82a1c-aaa8-4b46-95ff-e04fc6e641a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:83:85:eb:1c:66:47:67:4e:10:ff:f6:2b: be:e9:a1:11:29:9d:c7:4f:ad:94:1f:96:c2:a2:54: 19:bf:fb:73:75:54:ba:73:c5:2c:ac:a0:9d:d4:00: 0e:d8:e8:16:76:89:8f:65:8c:6a:6a:ca:e4:52:ea: af:6d:cb:f0:39:ba:98:0e:68:bb:a4:64:d4:e4:6f: e9:d3:48:61:16:0d:81:7c:1f:bc:f6:5c:0f:ed:74: 8b:fd:92:8a:52:7b:22:79:af:45:39:a2:88:41:66: 24:66:11:de:2f:08:11:0e:70:39:43:86:4f:bb:3f: 8c:ac:4d:a7:8a:00:de:13:7d:18:ec:68:63:25:bc: a5:fd:1b:39:6c:87:21:c5:35:16:ba:90:3c:63:c8: 5b:03:09:eb:2d:d5:b5:c6:1f:20:73:34:94:79:d5: ce:d4:4e:10:06:33:fe:b9:8d:23:ba:17:27:6a:fb: 00:4a:b7:40:fd:fd:eb:76:31:aa:7f:8b:c1:41:d3: 4b:62:ed:53:d3:d1:78:22:dc:7c:22:9e:6d:09:59: fc:54:18:9c:f9:17:2c:0c:e4:1b:c0:aa:61:92:49: 4b:27:ef:80:72:ab:2a:8d:1e:95:cc:ca:1a:28:e9: c9:d4:29:39:e9:46:9c:0a:4a:c0:c1:33:35:48:62: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:CD:6F:CF:89:56:B2:BE:89:2A:89:BD:FF:B2:CA:5E:CF:7E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8a600ed-b0a7-3813-9b4a-468fe007275d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:01:21:f0:f2:7e:be:fe:50:5b:78:9b:1c:69:34:6b:32:48: 69:bb:e9:47:fa:e2:c0:bc:5a:b6:35:44:6c:8a:3c:b6:7c:67: 0a:37:15:1f:a5:24:51:57:2e:94:c5:1d:66:e8:ac:4e:9d:5b: cb:82:be:d9:91:b2:4b:86:8b:87:13:a7:78:ec:42:c7:5b:92: bd:b3:63:42:96:c9:f5:06:47:0b:01:e8:f5:38:20:c8:80:4a: df:af:82:df:b1:7a:17:db:c7:75:e7:42:b9:8f:bb:a1:84:77: 7b:bc:db:2a:d0:20:cf:c2:73:ab:b3:fd:ba:d9:eb:60:00:4b: 4d:3d:53:92:45:bc:b0:74:bf:de:27:23:17:7d:09:ec:65:3e: 48:cf:33:24:c6:c2:fe:db:96:66:40:f4:db:fc:54:3c:1b:e3: b8:4e:df:c0:f6:35:a6:47:dc:a3:3a:9b:7b:40:41:f5:ce:b6: 97:cb:78:16:82:dd:b1:d8:f7:9f:61:91:c8:da:45:9c:0f:52: d1:19:08:91:c3:03:79:44:62:c9:b0:75:59:7d:b6:13:8a:57: 41:31:99:f3:b9:40:39:93:9c:05:06:3e:a2:23:10:73:9f:24: 66:b8:cd:cf:ff:2f:ed:cb:67:a7:0e:51:8d:39:e5:a0:ce:ea: e6:43:04:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiPMzQUGKbF7QUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGZiODJhMWMtYWFhOC00YjQ2LTk1ZmYtZTA0ZmM2ZTY0MWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2qDhescZkdnThD/9iu+6aERKZ3HT62UH5bC olQZv/tzdVS6c8UsrKCd1AAO2OgWdomPZYxqasrkUuqvbcvwObqYDmi7pGTU5G/p 00hhFg2BfB+89lwP7XSL/ZKKUnsiea9FOaKIQWYkZhHeLwgRDnA5Q4ZPuz+MrE2n igDeE30Y7GhjJbyl/Rs5bIchxTUWupA8Y8hbAwnrLdW1xh8gczSUedXO1E4QBjP+ uY0juhcnavsASrdA/f3rdjGqf4vBQdNLYu1T09F4Itx8Ip5tCVn8VBic+RcsDOQb wKphkklLJ++AcqsqjR6VzMoaKOnJ1Ck56UacCkrAwTM1SGKfzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+gzW/PiVayvokqib3/sspez357MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjhhNjAwZWQtYjBhNy0z ODEzLTliNGEtNDY4ZmUwMDcyNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMBIfDyfr7+UFt4mxxpNGsySGm76Uf64sC8WrY1RGyKPLZ8Zwo3FR+l JFFXLpTFHWborE6dW8uCvtmRskuGi4cTp3jsQsdbkr2zY0KWyfUGRwsB6PU4IMiA St+vgt+xehfbx3XnQrmPu6GEd3u82yrQIM/Cc6uz/brZ62AAS009U5JFvLB0v94n Ixd9CexlPkjPMyTGwv7blmZA9Nv8VDwb47hO38D2NaZH3KM6m3tAQfXOtpfLeBaC 3bHY959hkcjaRZwPUtEZCJHDA3lEYsmwdVl9thOKV0ExmfO5QDmTnAUGPqIjEHOf JGa4zc//L+3LZ6cOUY055aDO6uZDBMY= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:26 2025 by rpki-client