$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa File: 8243bda0-f4c5-3196-872d-cda3f2256d3a.roa (raw, json) Hash identifier: S3SP7so77BvCSh0Y6mATuCNTq2/xZAGyxPLvgu0xCkY= Subject key identifier: 85:C5:B7:FB:4B:67:90:6A:E5:9A:AE:D5:E7:8F:82:51:ED:D7:8B:8A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620201D7B69909ECE6304C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:01:d7:b6:99:09:ec:e6:30:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f67906d6-8c5d-47c7-8e7e-2a8f707e26f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3c:ef:32:3e:c5:01:60:fe:50:d2:bf:63:7a: e4:82:e2:08:9a:62:fb:bf:29:50:44:13:8b:3a:71: 3c:02:ca:ee:fb:8b:f6:9d:0b:32:1d:1f:98:f5:b7: 28:e0:59:0c:95:0d:1b:ec:ea:76:0e:dd:bf:5c:2d: f6:1d:29:ee:fe:86:0c:24:c6:ff:7b:4c:74:fb:42: 38:72:73:c0:01:f2:7d:42:3d:52:f8:3b:6b:08:15: 32:06:56:da:7e:ff:d9:7d:b7:ba:59:7f:b0:92:ef: 7d:36:9d:c2:41:0c:98:a5:e9:f5:8d:fb:6d:46:8c: 60:18:b5:51:7c:e6:af:0a:ab:17:a6:0b:fa:7f:81: f3:e6:b5:3e:30:4b:14:7b:40:a4:7c:31:f4:b6:02: 84:d5:f2:a6:ba:e8:ff:0c:fa:94:12:d3:d3:71:f7: 14:b9:6f:a9:da:39:b9:56:50:2b:8e:ad:eb:ee:63: f8:07:45:56:2f:32:fb:1d:a6:94:bb:7f:49:bc:dc: 39:45:2f:30:24:bd:52:85:5e:07:13:8c:92:4c:3b: 61:5c:93:8f:0a:a6:3c:50:78:50:11:25:69:9a:14: 6d:82:67:e2:c6:ff:09:ed:fb:9c:69:1f:7c:56:54: fa:4a:0d:df:44:29:bb:41:33:c7:0f:37:94:c7:6b: c1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C5:B7:FB:4B:67:90:6A:E5:9A:AE:D5:E7:8F:82:51:ED:D7:8B:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8243bda0-f4c5-3196-872d-cda3f2256d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5e:7f:f6:70:f7:52:32:ee:8f:cc:a9:55:77:9a:35:ba:23: 12:99:74:83:0f:07:44:c9:d6:58:8a:96:2a:a9:cb:f0:c7:ac: 5b:ae:1a:e9:d1:a3:e6:79:49:64:ee:9a:fc:11:67:c4:cd:ed: 74:b4:33:28:a4:30:b1:df:27:97:d3:58:a5:39:3f:9e:7b:2d: 68:97:de:b4:95:93:99:c5:0a:8f:a5:a9:e6:55:41:5d:0c:00: 49:b9:24:67:44:1c:b6:eb:16:c5:db:47:48:a9:58:0c:51:61: 19:73:27:56:36:6c:48:17:05:ed:90:7c:f8:11:25:23:e9:40: 22:1c:91:ae:13:7b:c3:0c:12:d5:d0:e4:39:c6:85:1a:e6:80: d7:4c:5b:ad:23:41:9b:af:a8:86:e1:4a:c5:97:36:dd:02:b3: 5d:78:2d:e3:e8:b5:b5:de:80:98:48:b6:60:12:c8:18:e1:cc: 55:eb:6b:24:37:ab:8e:2a:f2:0c:c6:fd:96:ca:c8:14:1d:cf: c5:04:e4:d4:96:e5:d6:50:3f:be:38:48:a7:0b:89:61:f9:f8: 41:ff:67:b1:f2:0f:c2:63:b4:1e:3b:07:54:1d:81:c3:63:c2: 6d:54:4a:08:59:ea:94:66:c8:b4:22:3e:ef:77:6c:d1:b9:91: 16:11:50:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgHXtpkJ7OYwTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjY3OTA2ZDYtOGM1ZC00N2M3LThlN2UtMmE4ZjcwN2UyNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTzvMj7FAWD+UNK/Y3rkguIImmL7vylQRBOL OnE8Asru+4v2nQsyHR+Y9bco4FkMlQ0b7Op2Dt2/XC32HSnu/oYMJMb/e0x0+0I4 cnPAAfJ9Qj1S+DtrCBUyBlbafv/Zfbe6WX+wku99Np3CQQyYpen1jfttRoxgGLVR fOavCqsXpgv6f4Hz5rU+MEsUe0CkfDH0tgKE1fKmuuj/DPqUEtPTcfcUuW+p2jm5 VlArjq3r7mP4B0VWLzL7HaaUu39JvNw5RS8wJL1ShV4HE4ySTDthXJOPCqY8UHhQ ESVpmhRtgmfixv8J7fucaR98VlT6Sg3fRCm7QTPHDzeUx2vBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXFt/tLZ5Bq5Zqu1eePglHt14uKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODI0M2JkYTAtZjRjNS0z MTk2LTg3MmQtY2RhM2YyMjU2ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZef/Zw91Iy7o/MqVV3mjW6IxKZdIMPB0TJ1liKliqpy/DHrFuuGunR o+Z5SWTumvwRZ8TN7XS0MyikMLHfJ5fTWKU5P557LWiX3rSVk5nFCo+lqeZVQV0M AEm5JGdEHLbrFsXbR0ipWAxRYRlzJ1Y2bEgXBe2QfPgRJSPpQCIcka4Te8MMEtXQ 5DnGhRrmgNdMW60jQZuvqIbhSsWXNt0Cs114LePotbXegJhItmASyBjhzFXrayQ3 q44q8gzG/ZbKyBQdz8UE5NSW5dZQP744SKcLiWH5+EH/Z7HyD8JjtB47B1QdgcNj wm1USghZ6pRmyLQiPu93bNG5kRYRUJM= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:36 2025 by rpki-client