$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1f1e99e-dc8e-32f4-a8ce-7a4be9467bb5.roa File: e1f1e99e-dc8e-32f4-a8ce-7a4be9467bb5.roa (raw, json) Hash identifier: 0lexoS3mDbi22JZKzcClzmEkVZ+fXfPKNa6wz9Pe+cY= Subject key identifier: 72:96:8B:63:3C:7D:38:80:29:17:BF:A5:E1:57:F8:1F:7E:6B:10:EA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B8D4777F4D2529DC11F864A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1f1e99e-dc8e-32f4-a8ce-7a4be9467bb5.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 33280 IP address blocks: 65.22.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:77:f4:d2:52:9d:c1:1f:86:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=bc8bf5d7-2760-47e9-bfa8-7fb9fb61d7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bd:93:30:78:45:e4:7a:75:73:63:70:f8:52: 53:70:f6:20:1e:42:9a:a4:5a:76:2a:50:79:04:17: be:73:8b:ee:11:43:b7:6a:11:b3:fd:34:1a:41:06: 36:bd:e1:c8:07:e7:24:44:9d:70:ae:a0:15:93:14: d7:8d:64:e7:ab:fb:fe:41:53:4f:f9:c2:95:fe:33: f9:0b:aa:bf:f8:91:9e:54:1b:e6:5b:15:7a:17:ab: e1:68:25:d1:74:42:a8:95:d0:98:e6:70:81:bb:e2: ea:74:73:38:19:a5:59:41:d6:d6:40:bf:5a:6c:61: cb:02:b6:ed:e5:14:d6:c6:20:8c:61:d3:09:8d:ed: d9:5f:80:b8:e5:e7:c2:ea:97:85:15:ce:a6:59:88: 40:d6:8a:81:08:b0:55:2a:1c:b2:e9:ce:5b:dc:15: 5e:d5:79:6e:af:ea:78:b0:e5:b1:b9:42:bc:c7:33: 98:49:e7:3a:a0:82:df:55:e4:bc:a2:3a:c7:f6:20: 2e:f2:7f:c9:2c:27:b5:7d:4c:0c:2e:c9:32:50:7e: ff:a5:9d:e4:27:12:a8:f0:3e:05:30:d1:aa:b8:6d: 9e:ad:2e:aa:d5:94:93:46:ff:5b:15:8b:8a:e0:80: bb:77:53:18:0d:c0:2d:96:9d:b9:43:4d:eb:60:4d: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:96:8B:63:3C:7D:38:80:29:17:BF:A5:E1:57:F8:1F:7E:6B:10:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1f1e99e-dc8e-32f4-a8ce-7a4be9467bb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c1:5b:e5:05:35:30:c4:04:62:e7:31:17:11:2c:aa:c8:23: 15:ee:41:75:a8:96:72:69:23:5c:53:63:b2:6f:a6:02:58:04: 61:9b:dc:b2:fa:44:ec:ac:6b:12:b1:90:bb:68:69:da:5f:a8: bb:55:6e:0d:74:80:c4:f9:30:5e:f3:73:10:55:44:d7:49:0e: 68:23:91:a0:14:ef:58:d5:15:a9:3d:35:72:bb:e0:9b:81:93: 11:8b:89:83:73:96:65:42:31:17:43:ce:e5:9b:90:af:f3:9b: db:a6:4a:2f:c1:5a:38:bb:e2:24:db:99:c2:ae:54:64:9d:e8: d8:97:c8:58:b3:7b:53:cf:a6:7c:87:90:c2:77:85:0a:31:9e: 39:59:fe:62:5e:3a:cf:54:b4:ab:7c:aa:9f:2e:85:a5:25:e4: 76:39:af:c4:18:1f:bb:e5:b2:d2:c5:8a:6b:08:cd:27:db:1f: 40:8d:1a:3f:a2:9d:eb:63:3f:93:d4:52:30:48:c0:c9:9a:d6: 88:95:a7:b8:35:7f:e5:b8:ff:74:08:0d:56:fa:d7:ff:7d:58: fa:6e:a0:df:6e:32:8f:fb:10:36:bd:c9:68:4a:56:58:4f:c2: c5:de:66:a5:d6:be:02:e7:ee:ad:67:da:36:55:91:6e:ef:06: 27:27:76:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR3f00lKdwR+GSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk YmM4YmY1ZDctMjc2MC00N2U5LWJmYTgtN2ZiOWZiNjFkN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib2TMHhF5Hp1c2Nw+FJTcPYgHkKapFp2KlB5 BBe+c4vuEUO3ahGz/TQaQQY2veHIB+ckRJ1wrqAVkxTXjWTnq/v+QVNP+cKV/jP5 C6q/+JGeVBvmWxV6F6vhaCXRdEKoldCY5nCBu+LqdHM4GaVZQdbWQL9abGHLArbt 5RTWxiCMYdMJje3ZX4C45efC6peFFc6mWYhA1oqBCLBVKhyy6c5b3BVe1Xlur+p4 sOWxuUK8xzOYSec6oILfVeS8ojrH9iAu8n/JLCe1fUwMLskyUH7/pZ3kJxKo8D4F MNGquG2erS6q1ZSTRv9bFYuK4IC7d1MYDcAtlp25Q03rYE1P4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKWi2M8fTiAKRe/peFX+B9+axDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTFmMWU5OWUtZGM4ZS0z MmY0LWE4Y2UtN2E0YmU5NDY3YmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHBW+UFNTDEBGLnMRcRLKrIIxXuQXWolnJpI1xTY7JvpgJYBGGb3LL6 ROysaxKxkLtoadpfqLtVbg10gMT5MF7zcxBVRNdJDmgjkaAU71jVFak9NXK74JuB kxGLiYNzlmVCMRdDzuWbkK/zm9umSi/BWji74iTbmcKuVGSd6NiXyFize1PPpnyH kMJ3hQoxnjlZ/mJeOs9UtKt8qp8uhaUl5HY5r8QYH7vlstLFimsIzSfbH0CNGj+i netjP5PUUjBIwMma1oiVp7g1f+W4/3QIDVb61/99WPpuoN9uMo/7EDa9yWhKVlhP wsXeZqXWvgLn7q1n2jZVkW7vBicndnk= -----END CERTIFICATE-----Generated at Tue Oct 21 09:14:15 2025 by rpki-client