$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6df1ece5-2e0a-3eaf-9062-7e22d5d33777.roa File: 6df1ece5-2e0a-3eaf-9062-7e22d5d33777.roa (raw, json) Hash identifier: S30yXd5ehTmfsgwttgEe5SHiqrfXtDSY4blJIjmJZgo= Subject key identifier: 79:1C:02:9C:83:64:2D:3C:E6:56:6C:0C:B3:CB:03:1D:5A:14:CB:48 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620204F264B032643A4DDCE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6df1ece5-2e0a-3eaf-9062-7e22d5d33777.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:04:f2:64:b0:32:64:3a:4d:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c411e5e0-557d-40b7-8f50-608d70f2f64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:0a:ab:24:89:2e:3f:68:6a:62:f8:68:83: f4:9b:c8:ec:ce:da:ef:d6:f3:3d:b5:6d:52:0e:ed: 0d:58:a8:16:ef:ed:d3:2f:0e:66:3f:97:9b:b8:94: f7:a4:f2:d1:3f:5e:50:8a:e9:7b:5d:8f:7d:3f:a0: ed:4f:bb:99:4d:cb:51:92:ff:6b:0b:0a:34:a8:e1: dc:23:d7:6d:3e:07:8c:f3:60:ae:40:3c:80:b9:61: bc:f7:fa:c2:4d:3c:01:57:77:dc:c0:9b:72:35:71: e8:f8:31:66:ea:67:9f:c9:68:f4:17:14:fd:cf:26: 8a:87:66:ca:3c:b8:5a:20:13:f4:1e:e8:af:a0:4a: fb:a3:b1:fe:63:02:f2:66:16:89:6b:23:9e:6c:ed: df:b6:08:94:1c:c5:c5:a3:df:37:ae:49:ff:63:39: e8:22:16:60:48:99:ce:4d:3b:82:5e:50:1d:b8:64: 6b:47:0c:58:08:e0:c0:d5:64:45:25:fd:d9:9c:09: 7d:d6:ea:28:e8:40:c2:6a:97:85:e2:13:98:86:a1: f3:ef:6a:87:37:d4:78:9c:a9:61:0f:03:d7:46:db: 23:f0:99:50:7a:08:96:cd:a4:b4:de:1f:14:9b:1e: d1:65:f7:6e:e7:18:f7:79:27:53:cc:04:fc:f2:2a: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:02:9C:83:64:2D:3C:E6:56:6C:0C:B3:CB:03:1D:5A:14:CB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6df1ece5-2e0a-3eaf-9062-7e22d5d33777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9f:4f:9c:9c:eb:13:d1:05:23:24:58:f5:d5:7f:47:71:ee: cb:7b:08:74:db:69:05:cb:f8:70:ba:b2:b4:8d:6e:a8:28:6e: bb:32:9e:76:90:3c:b7:98:31:c3:82:00:7e:57:43:15:c0:97: e6:5e:8b:ff:e7:8e:71:55:ce:72:ae:56:81:5a:42:1c:9b:ff: cc:c1:a8:40:52:98:ba:d2:6c:f2:86:8c:b9:5f:cf:08:b4:80: 7a:66:bf:de:32:a9:32:ea:f3:e5:fe:3c:37:5a:7e:6b:c2:fc: 2c:11:55:8b:48:d5:fe:9c:49:52:c2:0e:7d:e6:f6:88:b8:52: f7:00:1e:e4:af:c5:59:cd:e1:e7:a1:5f:b8:e8:92:bc:62:32: c1:1f:2a:9a:df:77:52:50:ea:2b:70:ec:2a:c5:3b:be:96:3c: f7:59:d9:4f:65:46:38:e4:19:52:2e:c0:36:40:de:eb:c8:96: 62:3e:d0:0b:5b:dc:00:7f:75:3d:9b:ec:3e:11:da:15:87:6c: 6f:f1:bf:13:09:ee:14:29:5e:9a:37:8b:43:1c:e0:9d:86:f4: f4:e7:9a:c0:84:99:46:f0:3f:fa:10:f0:a5:ef:ca:55:b6:11: e9:4c:1b:0a:01:8d:03:3d:77:ec:2c:99:e7:30:dd:c8:9a:f8: 38:4e:64:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgTyZLAyZDpN3OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzQxMWU1ZTAtNTU3ZC00MGI3LThmNTAtNjA4ZDcwZjJmNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8kKqySJLj9oamL4aIP0m8jsztrv1vM9tW1S Du0NWKgW7+3TLw5mP5ebuJT3pPLRP15Qiul7XY99P6DtT7uZTctRkv9rCwo0qOHc I9dtPgeM82CuQDyAuWG89/rCTTwBV3fcwJtyNXHo+DFm6mefyWj0FxT9zyaKh2bK PLhaIBP0HuivoEr7o7H+YwLyZhaJayOebO3ftgiUHMXFo983rkn/YznoIhZgSJnO TTuCXlAduGRrRwxYCODA1WRFJf3ZnAl91uoo6EDCapeF4hOYhqHz72qHN9R4nKlh DwPXRtsj8JlQegiWzaS03h8Umx7RZfdu5xj3eSdTzAT88ioVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkcApyDZC085lZsDLPLAx1aFMtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmRmMWVjZTUtMmUwYS0z ZWFmLTkwNjItN2UyMmQ1ZDMzNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHifT5yc6xPRBSMkWPXVf0dx7st7CHTbaQXL+HC6srSNbqgobrsynnaQ PLeYMcOCAH5XQxXAl+Zei//njnFVznKuVoFaQhyb/8zBqEBSmLrSbPKGjLlfzwi0 gHpmv94yqTLq8+X+PDdafmvC/CwRVYtI1f6cSVLCDn3m9oi4UvcAHuSvxVnN4eeh X7jokrxiMsEfKprfd1JQ6itw7CrFO76WPPdZ2U9lRjjkGVIuwDZA3uvIlmI+0Atb 3AB/dT2b7D4R2hWHbG/xvxMJ7hQpXpo3i0Mc4J2G9PTnmsCEmUbwP/oQ8KXvylW2 EelMGwoBjQM9d+wsmecw3cia+DhOZLI= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:42 2025 by rpki-client