$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa File: 1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa (raw, json) Hash identifier: Fs6puAccckbRXB/o+OtRqVBjLmC6RFVCuWTsj0wmJyU= Subject key identifier: 4C:B0:60:75:14:F9:AA:9A:8E:51:2E:0B:9B:4E:D5:2D:3E:5D:C1:DF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201F214D7923129E4BC2F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f2:14:d7:92:31:29:e4:bc:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=656defd9-a491-41ef-86ac-9ddd3c8938bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:19:54:f3:00:66:89:bc:9f:49:27:75:a8: 3c:ff:53:31:bd:07:bf:bc:e8:fd:1c:1e:33:f4:60: 44:89:73:de:cf:91:f7:14:b5:4e:d9:19:92:6a:95: 9f:01:7c:23:1f:aa:15:27:11:aa:32:5c:86:c3:37: aa:14:59:cd:d9:cb:1c:d0:0b:97:6e:fc:b6:d6:cb: b3:bb:0b:6f:d4:7d:8e:15:b5:35:5e:20:6e:01:7d: 1a:22:41:a3:a5:ab:d1:35:ab:e8:1c:a5:3a:cb:b4: dc:ea:1f:d4:bc:a4:dd:6b:4b:96:0b:54:fb:b5:cc: 80:46:aa:41:9b:cf:6f:9c:c3:53:76:11:1d:d2:0e: 76:46:df:63:32:e4:fb:ef:39:78:0b:44:77:bf:c1: 4b:14:4c:8b:75:94:27:e4:0c:15:b6:b1:5b:9d:1e: 3d:70:1f:93:33:04:94:cd:eb:d7:47:25:1b:43:ed: 43:10:88:1f:77:f0:61:e9:fc:0f:10:f8:02:a6:09: cf:46:0a:2a:77:6a:89:aa:51:77:3d:87:20:66:a2: e6:91:d4:a2:d9:2c:bc:75:32:9a:53:28:4f:d9:ca: 31:ce:2d:d6:c3:09:a3:78:06:d8:90:c4:40:e9:e1: 7d:55:11:4f:88:05:38:d0:81:53:de:a3:35:27:14: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B0:60:75:14:F9:AA:9A:8E:51:2E:0B:9B:4E:D5:2D:3E:5D:C1:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:1c:7d:2c:e9:83:31:31:9a:8d:2d:3c:5f:2a:f0:58:63:a7: cf:19:b0:e5:4b:0d:30:5c:b5:c4:01:81:f9:26:17:77:db:12: e4:6e:1e:f0:b2:3c:d6:b5:64:06:e9:4c:0d:c6:95:1e:19:a0: d9:6f:c8:0d:94:4a:fd:12:7b:24:43:a3:bb:70:81:1b:6e:cc: 57:0c:0d:8f:5d:ab:4e:da:7f:fd:a1:63:c5:9a:06:a6:e1:39: e1:7a:65:39:a1:cb:9e:42:01:5d:14:22:1e:be:9a:f8:02:0d: cf:5b:de:73:a2:b1:04:d5:16:5c:48:84:9d:55:a6:d4:c9:b3: a9:2d:69:91:0e:0e:a7:11:86:34:16:61:84:24:b1:71:db:3a: ac:57:32:45:7b:88:6e:4c:3a:1e:49:ac:5b:2e:b4:bb:91:22: 34:5d:1c:f4:f3:80:1c:c7:61:ae:58:58:66:52:7c:43:9d:85: 3a:b3:51:62:25:91:ae:ba:b7:8a:53:85:48:7d:c4:ad:7b:56: da:ce:05:0f:7e:f5:2c:39:ed:51:7d:c7:c5:ca:1b:79:ee:12: 03:05:1a:28:e4:ba:29:34:f1:f0:8e:d3:67:97:9a:0b:61:f2: 39:51:30:41:c1:8e:80:ab:80:37:76:76:63:33:07:1b:9b:28: ae:c2:d5:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfIU15IxKeS8LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjU2ZGVmZDktYTQ5MS00MWVmLTg2YWMtOWRkZDNjODkzOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr20ZVPMAZom8n0kndag8/1MxvQe/vOj9HB4z 9GBEiXPez5H3FLVO2RmSapWfAXwjH6oVJxGqMlyGwzeqFFnN2csc0AuXbvy21suz uwtv1H2OFbU1XiBuAX0aIkGjpavRNavoHKU6y7Tc6h/UvKTda0uWC1T7tcyARqpB m89vnMNTdhEd0g52Rt9jMuT77zl4C0R3v8FLFEyLdZQn5AwVtrFbnR49cB+TMwSU zevXRyUbQ+1DEIgfd/Bh6fwPEPgCpgnPRgoqd2qJqlF3PYcgZqLmkdSi2Sy8dTKa UyhP2coxzi3WwwmjeAbYkMRA6eF9VRFPiAU40IFT3qM1JxTnwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEywYHUU+aqajlEuC5tO1S0+XcHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTc1NWVmOTEtYTlhNi0z ZmI3LWFiYmYtNTIyZmMyNjEzZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALscfSzpgzExmo0tPF8q8Fhjp88ZsOVLDTBctcQBgfkmF3fbEuRuHvCy PNa1ZAbpTA3GlR4ZoNlvyA2USv0SeyRDo7twgRtuzFcMDY9dq07af/2hY8WaBqbh OeF6ZTmhy55CAV0UIh6+mvgCDc9b3nOisQTVFlxIhJ1VptTJs6ktaZEODqcRhjQW YYQksXHbOqxXMkV7iG5MOh5JrFsutLuRIjRdHPTzgBzHYa5YWGZSfEOdhTqzUWIl ka66t4pThUh9xK17VtrOBQ9+9Sw57VF9x8XKG3nuEgMFGijkuik08fCO02eXmgth 8jlRMEHBjoCrgDd2dmMzBxubKK7C1as= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:43 2025 by rpki-client