$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2be93fff-4c46-33c5-9359-9e2b6eada742.roa File: 2be93fff-4c46-33c5-9359-9e2b6eada742.roa (raw, json) Hash identifier: R/phz8TAWBV6gqO4hWuAQeXsnRBVsbluB4naIGwmMac= Subject key identifier: AB:FC:52:34:03:66:30:28:2F:36:09:D8:F4:E6:C7:DA:0C:6D:74:15 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B8EACC008694802CDDA4812C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2be93fff-4c46-33c5-9359-9e2b6eada742.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13810 IP address blocks: 65.22.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c0:08:69:48:02:cd:da:48:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=a86deb58-10d9-415e-ad99-51ed5669e3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:a2:58:12:01:70:5c:a8:3c:c0:5f:0a:45: 6f:a4:1f:db:f1:9f:75:70:d2:52:ee:8b:c6:e4:51: e5:bb:a7:bd:5c:c2:81:80:e5:28:50:94:47:65:1f: 73:dc:01:6f:b8:e0:9d:4b:39:f0:a7:6b:16:e5:9d: b4:e9:72:a2:f5:8c:da:be:21:07:16:f5:47:92:6f: b3:e7:ee:2b:15:7d:c3:96:96:f3:76:5b:a4:88:1f: 32:5f:33:6e:72:6e:b2:2a:ae:5a:57:49:50:dc:80: cc:f7:23:a4:8e:dc:0f:48:0c:e3:53:6e:ee:9f:ae: 1f:36:57:bd:27:f5:af:c1:61:1e:33:27:02:96:1c: 4e:b3:cf:1a:85:18:1b:01:13:83:d5:5a:72:72:87: 1e:a7:a1:63:af:dd:81:16:5a:5a:2d:40:9b:99:25: 61:d0:ff:a7:a9:67:99:05:6b:16:57:46:e5:56:ed: 83:62:db:a5:e2:51:f8:09:42:28:1f:9b:74:3f:0e: 51:d0:97:94:01:76:9d:34:7c:da:0f:83:53:23:a3: 34:9e:95:08:57:3f:87:10:95:61:ce:9c:5d:7e:df: 29:16:57:a0:93:3e:d5:4c:0e:f1:37:a1:d3:ec:30: 63:8a:05:93:c1:5e:75:9d:78:6b:69:a4:89:d6:a4: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FC:52:34:03:66:30:28:2F:36:09:D8:F4:E6:C7:DA:0C:6D:74:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2be93fff-4c46-33c5-9359-9e2b6eada742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:16:a4:9a:9c:94:b3:fb:ab:21:02:ba:56:09:f1:89:d0:7d: 39:ce:73:2c:cf:a4:84:da:ba:3d:92:5a:2e:bf:8b:b8:50:96: ff:7d:4e:95:7c:db:09:d8:67:be:f6:47:5b:62:e8:f3:af:6d: 9b:79:08:5d:3a:01:71:c1:f7:89:0d:02:86:24:8a:83:89:46: e7:eb:10:d0:9c:73:f4:59:dd:b1:25:82:f9:be:0a:3e:b4:d8: 23:fe:bd:02:b9:bd:27:76:9a:f5:0f:04:29:2d:91:64:8e:05: 0c:b9:1c:a3:94:f6:42:f0:c0:74:b7:b7:ff:e3:1e:73:d9:54: 7e:62:2e:e2:91:64:ff:8f:4f:ad:78:cd:e4:95:05:b0:86:f7: d7:4d:b2:68:d0:d3:e4:4d:40:20:40:11:db:4d:8d:bc:dc:bf: 96:5b:38:7b:d2:3c:41:c4:f0:8c:0a:d7:94:d8:de:46:c9:9e: da:9a:f2:4d:14:1d:b4:d8:f5:42:94:01:60:49:d5:ed:f1:b6: 21:7f:95:17:91:19:e9:3c:3b:ef:5c:58:2f:01:fc:89:27:b7: 5f:c1:1f:e5:58:7c:fe:ca:33:4a:74:7f:eb:c9:bd:a4:ba:dd: 48:26:d4:35:8b:94:9a:ef:6e:d6:22:3a:64:3a:f4:42:10:82: ca:9a:33:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMAIaUgCzdpIEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YTg2ZGViNTgtMTBkOS00MTVlLWFkOTktNTFlZDU2NjllM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkeiWBIBcFyoPMBfCkVvpB/b8Z91cNJS7ovG 5FHlu6e9XMKBgOUoUJRHZR9z3AFvuOCdSznwp2sW5Z206XKi9YzaviEHFvVHkm+z 5+4rFX3DlpbzdlukiB8yXzNucm6yKq5aV0lQ3IDM9yOkjtwPSAzjU27un64fNle9 J/WvwWEeMycClhxOs88ahRgbAROD1Vpycocep6Fjr92BFlpaLUCbmSVh0P+nqWeZ BWsWV0blVu2DYtul4lH4CUIoH5t0Pw5R0JeUAXadNHzaD4NTI6M0npUIVz+HEJVh zpxdft8pFlegkz7VTA7xN6HT7DBjigWTwV51nXhraaSJ1qTeewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv8UjQDZjAoLzYJ2PTmx9oMbXQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmJlOTNmZmYtNGM0Ni0z M2M1LTkzNTktOWUyYjZlYWRhNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYWpJqclLP7qyECulYJ8YnQfTnOcyzPpITauj2SWi6/i7hQlv99TpV8 2wnYZ772R1ti6POvbZt5CF06AXHB94kNAoYkioOJRufrENCcc/RZ3bElgvm+Cj60 2CP+vQK5vSd2mvUPBCktkWSOBQy5HKOU9kLwwHS3t//jHnPZVH5iLuKRZP+PT614 zeSVBbCG99dNsmjQ0+RNQCBAEdtNjbzcv5ZbOHvSPEHE8IwK15TY3kbJntqa8k0U HbTY9UKUAWBJ1e3xtiF/lReRGek8O+9cWC8B/Iknt1/BH+VYfP7KM0p0f+vJvaS6 3Ugm1DWLlJrvbtYiOmQ69EIQgsqaMxE= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:32 2025 by rpki-client