$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41758d69-049a-3c34-bc9f-336becf7d819.roa File: 41758d69-049a-3c34-bc9f-336becf7d819.roa (raw, json) Hash identifier: J4+oxFJIzYriB3uVf0Eutre1+3D0ZL0ibjEBsBr+o/o= Subject key identifier: 3A:1B:BB:E7:D5:0F:01:49:4D:4D:09:70:92:37:B6:15:F5:7E:2F:D0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E883A33662134601C480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41758d69-049a-3c34-bc9f-336becf7d819.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e8:83:a3:36:62:13:46:01:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4d684594-9703-43fd-b30d-e85a3e3f88b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:3c:2b:72:f2:a6:04:3b:3f:ae:94:d6:25: 9a:de:36:49:dd:2c:1d:d4:90:f3:8a:e5:07:77:70: f6:e2:40:61:48:fe:d2:d5:d6:5e:46:62:f1:e7:07: 9c:7a:e9:21:40:87:f3:88:75:af:58:5c:a5:21:9f: 20:ed:21:7d:2a:82:6a:bb:ff:2b:28:02:7f:d8:3f: d1:00:d9:06:de:ba:6f:ba:ee:a8:dc:42:2d:81:52: 61:c4:78:fc:96:80:3c:f5:73:6c:bb:2c:37:01:a0: a7:cc:f1:b1:13:c0:75:13:8a:7e:4d:32:d2:ce:ec: b0:15:71:da:89:24:a0:8b:16:06:e9:ba:02:c6:8a: 25:9b:c9:1c:a7:64:e1:df:23:89:94:bb:41:ef:b4: 6a:a0:6b:0b:7a:c6:7b:48:4f:8d:17:65:86:8d:de: 5f:8d:47:1c:e2:8f:3b:c5:2e:d4:39:a6:3e:30:8b: 47:d0:67:de:2a:43:44:de:0d:6b:99:d2:45:81:25: 88:84:36:11:36:3e:d4:89:e1:91:9c:51:83:5f:42: b0:7b:fe:46:bd:16:bc:c0:65:78:d2:1c:59:e4:de: ca:55:c7:83:b0:c0:5e:6d:5e:bb:1f:09:40:27:32: d4:78:44:66:cf:3a:a0:cf:99:d2:01:74:22:79:ad: dc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1B:BB:E7:D5:0F:01:49:4D:4D:09:70:92:37:B6:15:F5:7E:2F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41758d69-049a-3c34-bc9f-336becf7d819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ea:0e:35:a2:bc:55:7a:af:40:60:d4:74:bf:b7:8e:dd:02: 42:4c:57:30:44:83:24:8b:41:b7:e3:5a:29:e5:52:2b:87:40: e4:7c:f6:25:ae:a5:4f:9c:33:8c:02:e9:a5:34:ee:2c:a9:2c: fa:5b:7e:69:52:12:2c:e2:d0:5a:22:96:59:ce:41:39:df:66: 30:2f:dc:f6:67:c7:54:4e:1a:fe:7c:9c:50:e8:d3:f0:1d:c2: 00:dd:16:4c:b6:44:e2:b3:ce:62:44:b5:d9:73:c0:4c:df:da: d0:e8:bd:9e:5f:ab:e4:a6:2b:ee:2c:48:c5:3a:63:19:d8:9b: 5e:5b:f6:af:46:b1:a3:a5:74:5d:7b:a1:92:6b:01:98:1b:97: da:ab:a8:d4:77:17:2e:60:be:bd:48:96:05:f7:0d:0d:b8:0f: 41:94:75:0f:00:b8:44:f3:a3:9d:4d:d0:91:2a:d2:0e:68:7e: cb:63:21:a5:4f:ea:af:8d:a5:26:7f:53:fa:71:a2:62:e4:0a: d9:d1:0f:c3:4b:bc:74:35:2b:69:77:f7:f5:ca:02:7a:bb:0a: be:ed:bc:d5:a8:8e:96:d6:93:d8:89:9c:8f:0b:2a:46:e2:63: 99:b4:5e:fb:ae:18:14:67:36:15:1e:42:bf:ab:46:af:c5:9e: f3:cf:6f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeiDozZiE0YBxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGQ2ODQ1OTQtOTcwMy00M2ZkLWIzMGQtZTg1YTNlM2Y4OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl48K3LypgQ7P66U1iWa3jZJ3Swd1JDziuUH d3D24kBhSP7S1dZeRmLx5weceukhQIfziHWvWFylIZ8g7SF9KoJqu/8rKAJ/2D/R ANkG3rpvuu6o3EItgVJhxHj8loA89XNsuyw3AaCnzPGxE8B1E4p+TTLSzuywFXHa iSSgixYG6boCxoolm8kcp2Th3yOJlLtB77RqoGsLesZ7SE+NF2WGjd5fjUcc4o87 xS7UOaY+MItH0GfeKkNE3g1rmdJFgSWIhDYRNj7UieGRnFGDX0Kwe/5GvRa8wGV4 0hxZ5N7KVceDsMBebV67HwlAJzLUeERmzzqgz5nSAXQiea3ckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDobu+fVDwFJTU0JcJI3thX1fi/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDE3NThkNjktMDQ5YS0z YzM0LWJjOWYtMzM2YmVjZjdkODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrqDjWivFV6r0Bg1HS/t47dAkJMVzBEgySLQbfjWinlUiuHQOR89iWu pU+cM4wC6aU07iypLPpbfmlSEizi0FoillnOQTnfZjAv3PZnx1ROGv58nFDo0/Ad wgDdFky2ROKzzmJEtdlzwEzf2tDovZ5fq+SmK+4sSMU6YxnYm15b9q9GsaOldF17 oZJrAZgbl9qrqNR3Fy5gvr1IlgX3DQ24D0GUdQ8AuETzo51N0JEq0g5ofstjIaVP 6q+NpSZ/U/pxomLkCtnRD8NLvHQ1K2l39/XKAnq7Cr7tvNWojpbWk9iJnI8LKkbi Y5m0XvuuGBRnNhUeQr+rRq/FnvPPbyc= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:35 2025 by rpki-client