$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/012b129a-df50-391e-9681-b9936988d02e.roa File: 012b129a-df50-391e-9681-b9936988d02e.roa (raw, json) Hash identifier: CL4i8xyush2Hl9jHFP5GQE0OQNAHit9IUizpRepxqT0= Subject key identifier: 1F:A2:23:DE:86:E2:38:5F:FD:85:3A:1E:A8:83:DE:86:8B:48:5B:AD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674FF1995AA7683FA8B180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/012b129a-df50-391e-9681-b9936988d02e.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4f:f1:99:5a:a7:68:3f:a8:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=4f027611-cce0-4975-acb5-8e9664a28108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:73:a9:4c:ad:cb:4b:22:30:22:29:06:40: 8c:dc:f4:d2:53:1c:27:c4:ab:63:ce:9b:d5:1f:46: 03:46:ba:96:5f:48:c0:45:4e:ad:80:39:8d:09:4e: bf:25:b6:7c:ca:08:45:66:60:91:8f:f5:23:76:5d: 52:2b:37:23:85:bc:23:2c:db:5c:0a:89:90:05:c4: 56:be:f0:a4:91:cd:78:a2:de:2f:d2:e9:73:2d:ec: 65:ee:55:a6:54:6b:6b:24:c0:d3:b2:60:ef:02:e5: fa:88:62:4f:c3:09:64:d2:7e:01:26:e6:66:7b:03: 73:90:b8:6b:19:03:a2:20:d0:04:70:4b:d0:ac:07: 44:08:c2:62:e3:85:93:8d:83:be:96:e5:ae:ca:57: f7:25:78:0e:8f:2d:b7:1c:5d:38:40:42:68:a3:12: 3e:49:10:ab:2d:3e:03:23:74:c8:81:31:7b:75:70: 41:63:61:db:06:0e:e4:a1:23:53:73:1b:0c:ca:70: 6f:1c:95:5d:bc:6c:bb:59:ee:da:71:fe:b0:ba:9d: 46:ec:82:6e:cf:d9:5e:19:d2:65:ab:cb:a4:f6:37: 4a:d9:76:c5:7b:dc:b5:6e:b0:d2:5e:49:8b:66:0d: 9b:02:79:5d:92:13:10:c0:ba:0f:a9:36:89:47:39: 73:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A2:23:DE:86:E2:38:5F:FD:85:3A:1E:A8:83:DE:86:8B:48:5B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/012b129a-df50-391e-9681-b9936988d02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:3f:7a:99:9a:91:53:87:cc:c8:9d:84:22:c6:40:82:82:37: 7d:7a:23:f3:dc:80:46:e9:38:2b:e7:56:e0:e6:c6:23:81:0b: 6e:38:5e:f2:aa:0e:91:5c:16:4f:da:5f:b8:a7:b2:71:13:af: d7:a9:73:45:e6:56:86:5b:f2:90:a5:ed:9c:55:8f:39:69:6e: 54:c4:f1:1a:75:56:4a:db:af:6a:f7:fe:d9:02:88:a8:64:e1: d3:2c:76:8d:ed:f4:21:a2:56:93:6b:19:a9:f6:36:f2:15:2d: 81:63:ae:93:a6:df:4b:b8:39:71:b4:4e:f0:c1:b9:e5:be:93: 68:74:37:c0:46:cb:02:23:7c:71:4a:9c:81:aa:71:3c:52:1f: 65:13:38:74:4d:36:3c:a1:01:c1:06:ed:2c:a7:7e:a6:2d:03: 7f:ca:03:c4:cd:43:1a:9e:7f:7b:93:8c:15:38:25:05:1a:14: ca:bb:b3:39:e4:5b:c6:45:20:25:99:bd:34:03:e1:2e:80:2b: 83:5a:ad:5e:3b:4a:2c:b5:d4:e2:c0:76:eb:b2:a3:0f:63:c1: 66:fb:14:7a:3b:ac:08:59:48:8b:72:23:64:a7:12:71:99:d3: f0:1e:24:b4:b6:3c:bb:d4:d9:a2:b1:75:62:b4:0b:22:1a:6e: 67:9b:17:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0/xmVqnaD+osYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk NGYwMjc2MTEtY2NlMC00OTc1LWFjYjUtOGU5NjY0YTI4MTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKFzqUyty0siMCIpBkCM3PTSUxwnxKtjzpvV H0YDRrqWX0jARU6tgDmNCU6/JbZ8yghFZmCRj/Ujdl1SKzcjhbwjLNtcComQBcRW vvCkkc14ot4v0ulzLexl7lWmVGtrJMDTsmDvAuX6iGJPwwlk0n4BJuZmewNzkLhr GQOiINAEcEvQrAdECMJi44WTjYO+luWuylf3JXgOjy23HF04QEJooxI+SRCrLT4D I3TIgTF7dXBBY2HbBg7koSNTcxsMynBvHJVdvGy7We7acf6wup1G7IJuz9leGdJl q8uk9jdK2XbFe9y1brDSXkmLZg2bAnldkhMQwLoPqTaJRzlzVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+iI96G4jhf/YU6HqiD3oaLSFutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDEyYjEyOWEtZGY1MC0z OTFlLTk2ODEtYjk5MzY5ODhkMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJM/epmakVOHzMidhCLGQIKCN316I/PcgEbpOCvnVuDmxiOBC244XvKq DpFcFk/aX7insnETr9epc0XmVoZb8pCl7ZxVjzlpblTE8Rp1Vkrbr2r3/tkCiKhk 4dMsdo3t9CGiVpNrGan2NvIVLYFjrpOm30u4OXG0TvDBueW+k2h0N8BGywIjfHFK nIGqcTxSH2UTOHRNNjyhAcEG7SynfqYtA3/KA8TNQxqef3uTjBU4JQUaFMq7sznk W8ZFICWZvTQD4S6AK4NarV47Siy11OLAduuyow9jwWb7FHo7rAhZSItyI2SnEnGZ 0/AeJLS2PLvU2aKxdWK0CyIabmebF84= -----END CERTIFICATE-----Generated at Wed Nov 5 16:36:02 2025 by rpki-client