$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0bc64e9-662a-3809-966a-851372e4e96c.roa File: d0bc64e9-662a-3809-966a-851372e4e96c.roa (raw, json) Hash identifier: h+xI0Qbhfb99b9TzHlSLTagkwz6QcqVxhjL8JLqSP0c= Subject key identifier: A9:0D:9A:DC:3B:BE:71:C2:DC:77:4B:C4:CC:5B:D6:2C:C1:95:5F:72 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62023B65796FB8CD2D559780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0bc64e9-662a-3809-966a-851372e4e96c.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:3b:65:79:6f:b8:cd:2d:55:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=a1d82cdd-b0b7-4bf1-bbda-ffd606355280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:03:8c:1c:36:51:d2:cf:5f:a6:fd:32:4d: f5:53:16:5b:d1:4e:44:f1:89:e8:19:67:4f:c8:7d: f7:7a:24:0e:44:70:12:1a:18:08:f5:a5:0a:23:e5: f3:0d:75:41:15:46:86:11:71:22:4f:68:3c:05:77: 64:17:cb:00:d5:51:8e:df:40:36:e9:fb:74:3b:43: 8c:17:cc:9b:99:a0:0e:44:ed:d4:5c:00:37:4e:58: 04:d1:c3:11:4e:b6:42:f2:9c:4d:4f:da:8a:86:9a: 0b:a9:1e:52:3c:57:b1:b0:fc:9d:eb:80:b2:2d:d2: c7:0d:a2:91:70:99:32:ab:aa:04:3b:c7:55:db:5e: 44:0b:91:8f:04:84:9e:75:1a:87:be:1f:69:0d:f8: b6:e7:a8:03:33:a6:5c:7b:0a:85:b4:74:17:72:ef: 4b:d8:72:28:73:cd:cb:53:ce:30:b4:bb:70:fe:02: 6f:63:c2:42:5a:40:7a:80:f1:06:e1:a0:f3:22:d6: 05:21:be:de:8f:89:73:99:67:68:d2:aa:cd:1e:3c: 37:2f:99:b4:de:99:9f:16:18:67:e2:8a:12:16:ab: 02:7c:c6:1f:11:fc:8a:bf:b7:b2:01:f1:29:7e:61: 03:7e:c1:2e:9a:29:ed:f8:99:8e:91:fb:81:57:bf: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0D:9A:DC:3B:BE:71:C2:DC:77:4B:C4:CC:5B:D6:2C:C1:95:5F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d0bc64e9-662a-3809-966a-851372e4e96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:89:9e:e7:1d:9a:6d:b3:a9:70:1b:26:e6:9f:63:9a:97:f6: 17:f9:5a:48:a9:3b:4b:6c:13:3b:d8:f1:67:0b:b3:a8:ff:0f: bd:de:fb:9d:22:77:12:e2:88:ce:1a:e8:45:da:65:a2:03:28: 47:c2:08:8d:a5:ea:8a:a5:39:05:23:47:37:ad:2d:eb:91:d8: 59:6b:f1:73:96:c3:75:8b:d0:cc:62:6a:22:79:f5:42:b2:4c: 4e:57:6b:19:ce:3f:cc:e3:5b:d8:75:c1:2b:90:3f:60:0e:f8: e0:c9:76:69:00:67:18:af:02:20:8f:eb:02:45:f3:52:78:fd: 79:48:d2:9f:aa:b3:12:91:3d:0d:b0:06:96:d1:cb:f6:9d:74: bf:89:32:7f:45:e4:3c:16:31:f1:86:73:c9:53:6c:e7:1d:4b: 26:db:0b:83:c5:03:01:ef:97:44:9f:ee:18:ad:b1:2a:fd:4c: a0:38:d6:10:63:b4:34:32:d3:b7:5c:ae:e4:11:db:87:9d:3f: 51:52:69:dd:56:35:ce:97:f3:e0:ed:ae:aa:4c:a6:9a:13:5e: e7:46:ff:6d:62:e2:1b:47:50:ef:c1:50:cd:16:97:a2:22:35: 2a:2e:c4:4b:55:c1:a5:3f:47:fd:3a:39:95:50:b8:8e:61:f5: 8d:08:1e:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjtleW+4zS1Vl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTFkODJjZGQtYjBiNy00YmYxLWJiZGEtZmZkNjA2MzU1MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigMDjBw2UdLPX6b9Mk31UxZb0U5E8YnoGWdP yH33eiQORHASGhgI9aUKI+XzDXVBFUaGEXEiT2g8BXdkF8sA1VGO30A26ft0O0OM F8ybmaAORO3UXAA3TlgE0cMRTrZC8pxNT9qKhpoLqR5SPFexsPyd64CyLdLHDaKR cJkyq6oEO8dV215EC5GPBISedRqHvh9pDfi256gDM6ZcewqFtHQXcu9L2HIoc83L U84wtLtw/gJvY8JCWkB6gPEG4aDzItYFIb7ej4lzmWdo0qrNHjw3L5m03pmfFhhn 4ooSFqsCfMYfEfyKv7eyAfEpfmEDfsEumint+JmOkfuBV79LewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkNmtw7vnHC3HdLxMxb1izBlV9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDBiYzY0ZTktNjYyYS0z ODA5LTk2NmEtODUxMzcyZTRlOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyJnucdmm2zqXAbJuafY5qX9hf5WkipO0tsEzvY8WcLs6j/D73e+50i dxLiiM4a6EXaZaIDKEfCCI2l6oqlOQUjRzetLeuR2Flr8XOWw3WL0MxiaiJ59UKy TE5XaxnOP8zjW9h1wSuQP2AO+ODJdmkAZxivAiCP6wJF81J4/XlI0p+qsxKRPQ2w BpbRy/addL+JMn9F5DwWMfGGc8lTbOcdSybbC4PFAwHvl0Sf7hitsSr9TKA41hBj tDQy07dcruQR24edP1FSad1WNc6X8+DtrqpMppoTXudG/21i4htHUO/BUM0Wl6Ii NSouxEtVwaU/R/06OZVQuI5h9Y0IHq4= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:34 2025 by rpki-client