$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d612a76-6a6e-3cb1-8404-866fdaa11230.roa File: 0d612a76-6a6e-3cb1-8404-866fdaa11230.roa (raw, json) Hash identifier: WB950jruSBhAjD5pfuTMmmdzQOhJfcIJtPxcKeHYZhs= Subject key identifier: C5:3C:ED:35:D9:77:30:49:EA:34:D2:A7:73:EB:1A:45:59:9E:76:C0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674E2328BF2CC8E8FC33F0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d612a76-6a6e-3cb1-8404-866fdaa11230.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4e:23:28:bf:2c:c8:e8:fc:33:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=0d0d3477-d871-4eb1-b7a9-2f6929fbbacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:12:9f:95:d0:86:94:01:36:68:9e:6b:74:eb: d5:eb:4c:5d:dd:80:68:49:31:c1:87:41:aa:c2:72: 98:72:85:6a:36:ad:a4:06:9a:ae:b2:31:89:9e:bb: d5:68:87:e4:13:c3:17:ee:ba:81:d0:e3:64:36:c6: 18:12:47:23:59:a9:79:29:a6:fc:55:9e:ab:22:93: ff:4a:83:63:a4:bf:aa:ab:30:e1:9c:46:ca:2f:2c: 0e:da:e2:6a:b4:c4:b5:98:32:df:a1:c2:c7:34:94: 54:49:d5:c9:3f:00:23:bc:da:24:fa:d7:30:5c:db: 0d:38:0b:7d:f8:43:d7:7f:d1:7a:f3:4d:82:e4:50: b5:03:d3:88:0d:7f:7e:3e:62:01:0b:ce:e0:c3:ad: 89:f4:4f:aa:da:17:46:34:ca:3f:f8:08:fa:fc:97: 9c:d9:4b:55:cb:c5:3d:cb:26:c3:96:a5:82:b1:15: 37:05:18:2a:e2:9b:9a:af:be:79:90:2a:7a:b1:0c: 80:a0:cf:cf:87:29:a4:b7:b8:6a:00:51:4a:f4:b5: fe:1a:94:ea:17:67:83:88:63:fc:34:ef:d3:ce:7c: 79:f6:6c:90:0b:8a:55:59:eb:d9:c7:e2:39:22:3e: 0b:5e:5b:77:cc:ed:84:78:89:93:8e:b0:af:b0:c7: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3C:ED:35:D9:77:30:49:EA:34:D2:A7:73:EB:1A:45:59:9E:76:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d612a76-6a6e-3cb1-8404-866fdaa11230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bd:4f:3e:ba:f2:55:8e:0c:65:47:13:73:d4:de:f3:8f:2d: 85:ed:3f:f7:c1:08:60:d9:5b:61:95:f8:24:11:b4:a4:a4:c7: 3b:7d:a6:2e:14:4a:30:d8:32:b4:9d:c8:bd:b8:64:52:c6:5c: 40:ae:0d:69:2c:60:f9:9e:a0:47:aa:55:e4:21:db:84:78:af: c8:ac:38:bb:2f:9d:36:5f:58:9b:ef:16:d5:4a:08:d6:d3:65: a0:9d:8b:61:f1:25:c1:80:33:91:b6:22:a4:f4:23:7c:67:f7: 53:32:b8:de:b5:6c:3b:74:ba:f6:be:2e:b2:f0:82:91:2c:54: 5f:40:bd:20:32:f8:5c:96:a8:9a:7a:f7:e6:63:fd:37:f2:2d: f9:d5:ba:0e:b4:d6:92:9b:be:47:9a:a1:86:e9:62:09:45:51: 32:53:68:bb:ed:49:48:bd:7d:de:4f:41:55:7a:5a:2e:71:bc: 13:d3:09:1b:14:10:e3:ff:06:0c:81:78:d9:a9:4e:c6:13:4e: f4:58:95:b7:0b:43:d2:54:dc:64:d5:02:ce:09:54:71:16:2f: b1:4c:75:81:f7:1b:52:d1:21:85:85:e4:2a:f4:b4:7e:b1:21: 5f:ae:8c:d1:10:5c:32:f1:f5:7b:f1:67:7a:a7:6b:76:35:ba: 23:d1:56:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ04jKL8syOj8M/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MGQwZDM0NzctZDg3MS00ZWIxLWI3YTktMmY2OTI5ZmJiYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhKfldCGlAE2aJ5rdOvV60xd3YBoSTHBh0Gq wnKYcoVqNq2kBpqusjGJnrvVaIfkE8MX7rqB0ONkNsYYEkcjWal5Kab8VZ6rIpP/ SoNjpL+qqzDhnEbKLywO2uJqtMS1mDLfocLHNJRUSdXJPwAjvNok+tcwXNsNOAt9 +EPXf9F6802C5FC1A9OIDX9+PmIBC87gw62J9E+q2hdGNMo/+Aj6/Jec2UtVy8U9 yybDlqWCsRU3BRgq4puar755kCp6sQyAoM/Phymkt7hqAFFK9LX+GpTqF2eDiGP8 NO/Tznx59myQC4pVWevZx+I5Ij4LXlt3zO2EeImTjrCvsMeLlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU87TXZdzBJ6jTSp3PrGkVZnnbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGQ2MTJhNzYtNmE2ZS0z Y2IxLTg0MDQtODY2ZmRhYTExMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC9Tz668lWODGVHE3PU3vOPLYXtP/fBCGDZW2GV+CQRtKSkxzt9pi4U SjDYMrSdyL24ZFLGXECuDWksYPmeoEeqVeQh24R4r8isOLsvnTZfWJvvFtVKCNbT ZaCdi2HxJcGAM5G2IqT0I3xn91MyuN61bDt0uva+LrLwgpEsVF9AvSAy+FyWqJp6 9+Zj/TfyLfnVug601pKbvkeaoYbpYglFUTJTaLvtSUi9fd5PQVV6Wi5xvBPTCRsU EOP/BgyBeNmpTsYTTvRYlbcLQ9JU3GTVAs4JVHEWL7FMdYH3G1LRIYWF5Cr0tH6x IV+ujNEQXDLx9XvxZ3qna3Y1uiPRVrY= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:34 2025 by rpki-client