$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c0b08461-85d4-35c8-96cb-c1064855b466.roa File: c0b08461-85d4-35c8-96cb-c1064855b466.roa (raw, json) Hash identifier: iQj9gMJOcfCHAbOYOb0qrwNXKtde/a/BTeoaiJQnzaI= Subject key identifier: 76:D9:50:33:CB:9D:32:D2:68:99:DC:40:96:E1:15:62:E0:1D:13:37 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62023CF83F7621E38D073780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c0b08461-85d4-35c8-96cb-c1064855b466.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:3c:f8:3f:76:21:e3:8d:07:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4ee7d3c5-62ef-4919-8547-442d3117ed66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:f8:a9:f3:87:8d:18:5a:e8:8c:a8:1d:e4: 02:a8:99:52:a1:ef:cd:4d:b9:1c:d5:ce:23:6b:8f: 9e:7d:cb:4c:27:3b:c8:59:69:59:8e:65:17:0a:f8: 63:3b:43:52:40:cd:8d:22:b6:1d:88:cb:e4:7c:55: 5d:fd:cc:a5:76:e7:f7:77:6c:a6:b9:7e:c0:13:5b: b4:9b:51:57:1d:d4:51:1d:a8:9a:3f:af:2f:18:8b: fa:15:30:d9:fa:53:32:09:70:4f:46:f1:f0:9c:98: 35:e3:ad:e3:49:fc:74:b7:d5:45:af:fa:a4:89:fe: 9a:96:e0:5d:e1:c6:07:fe:94:31:d6:46:3e:fa:1e: fa:49:73:77:c8:9d:7c:b4:36:6d:71:a2:2b:de:e4: 66:1f:2f:39:c9:a1:ff:0d:86:a3:3b:1b:6d:fc:60: c1:ce:40:f9:59:2d:9e:37:4b:57:63:d7:18:a1:0d: e9:a3:a8:f8:1b:dc:78:24:c4:ac:59:a8:16:c0:9b: e5:06:50:b3:b5:80:44:61:27:73:28:7e:b3:b5:5c: 60:d3:ab:44:94:2d:68:c5:10:7f:02:29:5b:a4:a2: cd:62:11:27:65:61:41:b9:0a:f8:b3:49:0a:1a:51: 40:37:4b:26:89:6e:1e:e3:ba:a4:c9:8c:42:d1:c0: 63:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D9:50:33:CB:9D:32:D2:68:99:DC:40:96:E1:15:62:E0:1D:13:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c0b08461-85d4-35c8-96cb-c1064855b466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:85:1f:45:4c:44:95:d6:1a:99:3e:b8:88:67:87:2b:88:84: c7:e4:dc:1b:7e:92:41:2d:b8:4f:5b:3f:ae:7c:0d:47:31:2d: 58:8e:6c:e3:ff:62:f1:ef:41:f2:30:7c:c8:8f:0d:dd:e4:6b: d2:ec:82:62:60:3c:90:35:69:c6:96:6c:76:76:22:92:14:27: 2b:01:c2:d9:7b:e9:4d:cb:b2:80:73:50:18:c7:79:d5:b7:1c: 86:2a:c7:d8:c8:e3:ff:f4:2f:71:8b:11:9a:01:72:04:89:5e: 4c:d7:48:52:e7:75:1f:15:5a:66:e1:3b:dc:8d:13:cd:6d:b1: 5c:ed:8a:56:f1:1b:18:4e:fb:39:c2:a3:e8:5d:d1:37:55:f7: 13:f8:6d:90:f4:e5:74:67:ac:91:2c:7f:94:84:97:72:21:7a: 89:24:d7:e2:bc:39:19:ad:ec:56:ca:5d:c0:95:79:17:53:97: ba:e7:de:7a:57:14:85:24:53:2a:e4:5c:68:5b:9b:12:36:f8: fa:b2:17:0f:de:e1:60:51:9d:b4:77:8b:80:59:5e:71:0b:31: 1d:93:23:6a:3c:e7:a7:b2:da:a1:67:d1:54:a0:84:43:ab:c9: b0:cb:8d:32:a4:0e:9b:a9:82:49:79:c2:1b:db:5e:6d:93:43: a9:35:3f:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjz4P3Yh440HN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGVlN2QzYzUtNjJlZi00OTE5LTg1NDctNDQyZDMxMTdlZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2H4qfOHjRha6IyoHeQCqJlSoe/NTbkc1c4j a4+efctMJzvIWWlZjmUXCvhjO0NSQM2NIrYdiMvkfFVd/cylduf3d2ymuX7AE1u0 m1FXHdRRHaiaP68vGIv6FTDZ+lMyCXBPRvHwnJg1463jSfx0t9VFr/qkif6aluBd 4cYH/pQx1kY++h76SXN3yJ18tDZtcaIr3uRmHy85yaH/DYajOxtt/GDBzkD5WS2e N0tXY9cYoQ3po6j4G9x4JMSsWagWwJvlBlCztYBEYSdzKH6ztVxg06tElC1oxRB/ AilbpKLNYhEnZWFBuQr4s0kKGlFAN0smiW4e47qkyYxC0cBj5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbZUDPLnTLSaJncQJbhFWLgHRM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzBiMDg0NjEtODVkNC0z NWM4LTk2Y2ItYzEwNjQ4NTViNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqFH0VMRJXWGpk+uIhnhyuIhMfk3Bt+kkEtuE9bP658DUcxLViObOP/ YvHvQfIwfMiPDd3ka9LsgmJgPJA1acaWbHZ2IpIUJysBwtl76U3LsoBzUBjHedW3 HIYqx9jI4//0L3GLEZoBcgSJXkzXSFLndR8VWmbhO9yNE81tsVztilbxGxhO+znC o+hd0TdV9xP4bZD05XRnrJEsf5SEl3Iheokk1+K8ORmt7FbKXcCVeRdTl7rn3npX FIUkUyrkXGhbmxI2+PqyFw/e4WBRnbR3i4BZXnELMR2TI2o856ey2qFn0VSghEOr ybDLjTKkDpupgkl5whvbXm2TQ6k1P7s= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:36 2025 by rpki-client