$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa File: 73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa (raw, json) Hash identifier: vdUMXGBDDHqfA6O9kf0QWu+UjMC3ItxDT2je6hkjISg= Subject key identifier: 3F:A8:DB:5E:73:FB:21:4C:F8:91:CE:E5:55:A0:CE:AF:9D:EF:CC:5E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62021BD2B9CF2AEA466DD440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1b:d2:b9:cf:2a:ea:46:6d:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=df96db9a-040a-46b5-88f3-0be8ae9e3925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:ad:46:49:d6:51:4a:72:4d:ca:34:bf:d5: 5b:29:5d:cd:38:63:4a:e3:d3:d0:b2:c7:23:02:4f: 07:46:7b:15:63:71:49:a4:5c:f5:e7:60:f2:73:37: 59:4b:09:8d:7e:e1:6b:1f:b9:8f:3a:50:12:d3:0e: a7:06:52:82:66:76:d7:f9:e7:03:65:ed:53:f5:8d: 82:a7:f5:c6:85:d5:d8:4f:ef:24:14:4f:35:8b:2a: fc:1f:45:cb:7c:53:b0:0f:d0:15:f7:2e:3a:5e:db: 41:14:9e:6e:7e:f9:f4:b7:7a:93:8d:06:5d:72:c8: 59:0e:9e:b8:fa:dc:cc:84:45:75:7c:76:e7:93:a5: 1a:b7:91:b3:2a:46:f2:8a:44:1b:2d:27:4c:a9:57: 6f:88:a7:da:95:b2:25:1d:48:bd:5d:5e:18:8b:87: 81:bd:47:18:b1:dd:4f:39:b2:08:51:b7:58:50:07: 39:e7:fc:4b:ac:81:7f:88:07:61:15:fa:95:99:47: 3c:2d:be:60:6c:3b:06:2d:bc:e0:bf:c2:bc:90:23: d1:ba:90:c5:81:43:09:dd:c0:6a:ba:65:fb:b6:b6: 1b:ef:35:27:8f:e4:fa:56:b9:d8:86:b6:fc:11:af: fb:c4:c6:66:28:c3:1f:ae:22:9d:e1:7d:6e:34:88: 7e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A8:DB:5E:73:FB:21:4C:F8:91:CE:E5:55:A0:CE:AF:9D:EF:CC:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9e:2d:86:dd:a2:e5:ea:41:d1:06:fd:e7:41:97:f5:96:43: 9c:bc:df:1e:67:6a:90:58:07:95:7f:77:42:33:3b:0d:eb:96: 13:3e:f8:d9:05:ae:d4:30:53:e4:a2:a7:4d:44:ac:b9:d9:4a: be:36:c1:1d:e7:24:87:da:f0:bd:dc:5b:6f:24:cb:c1:60:62: 68:e1:67:7c:24:25:da:2e:c2:c5:37:ef:80:81:8e:35:21:20: ba:63:da:3d:dc:6f:01:97:76:06:fc:9d:7d:c3:67:0a:eb:4c: 22:de:7c:cd:64:fa:3c:d5:dd:60:e9:58:e3:b6:b0:d0:51:bb: 52:48:ff:37:1a:af:2c:a3:be:07:d9:1b:a8:7c:dd:e2:b5:31: b6:c0:b1:4f:41:d4:6f:4f:53:82:9b:70:31:25:d2:42:28:9f: 36:63:99:21:9d:f9:75:87:a8:bb:d5:7d:2d:6d:41:0f:d7:8e: 72:ea:9f:ec:6d:ca:bc:dc:5d:d4:2b:1b:f7:3b:82:9d:53:33: c1:ab:41:cb:30:4a:0b:b2:e7:d1:27:c4:f3:c3:e5:19:d4:ee: 8e:dc:19:c6:cf:d4:dc:c4:7e:e7:4c:b0:30:ca:05:4f:2b:c5: 6e:3c:45:74:f0:54:66:73:7c:7b:10:79:17:d2:b5:e1:78:3a: 22:ca:57:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhvSuc8q6kZt1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZGY5NmRiOWEtMDQwYS00NmI1LTg4ZjMtMGJlOGFlOWUzOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuitRknWUUpyTco0v9VbKV3NOGNK49PQsscj Ak8HRnsVY3FJpFz152DyczdZSwmNfuFrH7mPOlAS0w6nBlKCZnbX+ecDZe1T9Y2C p/XGhdXYT+8kFE81iyr8H0XLfFOwD9AV9y46XttBFJ5ufvn0t3qTjQZdcshZDp64 +tzMhEV1fHbnk6Uat5GzKkbyikQbLSdMqVdviKfalbIlHUi9XV4Yi4eBvUcYsd1P ObIIUbdYUAc55/xLrIF/iAdhFfqVmUc8Lb5gbDsGLbzgv8K8kCPRupDFgUMJ3cBq umX7trYb7zUnj+T6VrnYhrb8Ea/7xMZmKMMfriKd4X1uNIh+2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+o215z+yFM+JHO5VWgzq+d78xeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzNjMjBhMjUtM2M3OS0z MTZmLWI3MTAtN2VjNGE4YWQ2ZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6eLYbdouXqQdEG/edBl/WWQ5y83x5napBYB5V/d0IzOw3rlhM++NkF rtQwU+Sip01ErLnZSr42wR3nJIfa8L3cW28ky8FgYmjhZ3wkJdouwsU374CBjjUh ILpj2j3cbwGXdgb8nX3DZwrrTCLefM1k+jzV3WDpWOO2sNBRu1JI/zcaryyjvgfZ G6h83eK1MbbAsU9B1G9PU4KbcDEl0kIonzZjmSGd+XWHqLvVfS1tQQ/XjnLqn+xt yrzcXdQrG/c7gp1TM8GrQcswSguy59EnxPPD5RnU7o7cGcbP1NzEfudMsDDKBU8r xW48RXTwVGZzfHsQeRfSteF4OiLKV/k= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:35 2025 by rpki-client