$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa File: 594c4987-02d1-3bc5-a8c0-729e094b6649.roa (raw, json) Hash identifier: dkXMThsETEqZ2dSW9aytJud3liQrVi9tahA/A54/KdQ= Subject key identifier: 5B:E0:28:15:A9:C5:95:7E:93:E1:69:FD:80:7A:AD:D2:EB:93:73:6B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D1F8F19F05021A7D4080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d1:f8:f1:9f:05:02:1a:7d:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c585a733-d932-42e6-b531-3c87757878e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:32:41:90:a8:69:6b:79:64:61:b9:d5:2e:ff: ef:b5:37:62:32:3f:7c:b2:13:1d:56:14:f8:c6:1b: 4b:04:c7:68:fc:ad:d3:58:86:5b:be:95:8d:4f:34: 99:e7:ba:66:62:6e:d0:75:88:df:9b:0a:b4:68:8a: 67:49:32:80:7e:b6:fe:ee:32:0f:d9:51:79:d1:64: c4:1f:8d:b8:ba:33:87:c3:a9:92:88:91:0e:ba:4e: 5e:3f:05:cd:d5:2d:09:9c:b8:42:db:ac:a0:2c:24: a7:64:82:b8:bf:cc:1c:d6:33:14:03:ec:71:52:bf: d2:fe:6a:c5:a7:6c:aa:de:19:d7:34:a0:2d:1f:af: 5d:f5:0a:8a:c5:db:d3:a6:51:d7:ee:09:64:de:95: b2:ef:05:1f:66:06:41:9b:cc:6d:e8:89:1a:c9:e6: 30:50:20:6c:68:c2:bb:4a:4b:69:3a:9c:39:68:c7: 56:a2:fc:d3:23:2f:df:11:92:41:f4:dd:94:67:70: 00:25:4f:52:9d:5b:95:23:d2:bb:39:0e:6b:0b:2e: 05:1e:f4:0e:65:bf:c5:fd:cf:c6:2f:cc:96:9b:73: a7:19:9a:48:63:cb:f7:d7:40:55:a0:c0:08:6a:53: 6b:1e:bd:ce:21:1a:50:e7:14:96:85:d2:58:4c:4c: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E0:28:15:A9:C5:95:7E:93:E1:69:FD:80:7A:AD:D2:EB:93:73:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:18:b1:c0:96:0a:d5:e0:7a:93:20:ed:ed:b9:db:a4:e2:12: 71:25:9f:41:64:f8:7a:56:76:52:5b:fd:4a:35:88:c4:76:d0: e8:d8:9b:9f:5b:2a:a4:58:f5:f6:e3:50:6b:d4:13:79:66:83: 18:56:9a:1f:8e:38:50:92:65:82:dc:fe:b6:06:72:fc:22:57: b1:3c:5b:95:f2:4c:e6:1c:00:43:60:f2:db:aa:65:68:10:7b: 98:ed:94:e4:8b:f1:fd:91:31:d7:38:8d:65:81:68:ca:f9:b3: 3b:e1:b8:e6:3e:0a:eb:71:e8:93:53:36:89:4e:61:15:46:01: 55:e1:69:f1:bd:ac:63:bd:94:b7:0b:c7:bd:ba:36:13:ea:d2: a6:8a:f2:f9:9e:73:3c:3c:26:ed:b4:a6:29:4e:a2:dd:0d:72: 5c:2d:fa:51:e6:b1:82:65:2d:d9:52:5b:ae:e7:e9:1f:93:bf: 51:de:75:8f:23:6c:0f:2a:e2:79:2e:4c:82:87:dd:b7:3a:28: 58:d5:59:e9:35:36:5a:47:7f:ae:3f:3c:a1:a9:06:a3:5d:7c: 08:ea:ed:c7:3d:43:d4:03:1d:34:60:83:93:28:e9:3b:f5:f4: e2:d5:53:0a:86:75:36:f4:f5:61:67:dc:ed:9c:77:81:43:45: ee:65:9b:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdH48Z8FAhp9QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzU4NWE3MzMtZDkzMi00MmU2LWI1MzEtM2M4Nzc1Nzg3OGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDJBkKhpa3lkYbnVLv/vtTdiMj98shMdVhT4 xhtLBMdo/K3TWIZbvpWNTzSZ57pmYm7QdYjfmwq0aIpnSTKAfrb+7jIP2VF50WTE H424ujOHw6mSiJEOuk5ePwXN1S0JnLhC26ygLCSnZIK4v8wc1jMUA+xxUr/S/mrF p2yq3hnXNKAtH69d9QqKxdvTplHX7glk3pWy7wUfZgZBm8xt6IkayeYwUCBsaMK7 SktpOpw5aMdWovzTIy/fEZJB9N2UZ3AAJU9SnVuVI9K7OQ5rCy4FHvQOZb/F/c/G L8yWm3OnGZpIY8v310BVoMAIalNrHr3OIRpQ5xSWhdJYTEyJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvgKBWpxZV+k+Fp/YB6rdLrk3NrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTk0YzQ5ODctMDJkMS0z YmM1LWE4YzAtNzI5ZTA5NGI2NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgYscCWCtXgepMg7e2526TiEnEln0Fk+HpWdlJb/Uo1iMR20OjYm59b KqRY9fbjUGvUE3lmgxhWmh+OOFCSZYLc/rYGcvwiV7E8W5XyTOYcAENg8tuqZWgQ e5jtlOSL8f2RMdc4jWWBaMr5szvhuOY+Cutx6JNTNolOYRVGAVXhafG9rGO9lLcL x726NhPq0qaK8vmeczw8Ju20pilOot0Nclwt+lHmsYJlLdlSW67n6R+Tv1HedY8j bA8q4nkuTIKH3bc6KFjVWek1NlpHf64/PKGpBqNdfAjq7cc9Q9QDHTRgg5Mo6Tv1 9OLVUwqGdTb09WFn3O2cd4FDRe5lm+Y= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:35 2025 by rpki-client