$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/110dede2-fd8c-352e-9e3e-8c274d9b641a.roa File: 110dede2-fd8c-352e-9e3e-8c274d9b641a.roa (raw, json) Hash identifier: AxGqker5cXz9rU1z3GOYCSLInzNh9W788bDEjfYzGcM= Subject key identifier: A9:7E:87:B8:CE:9E:6A:E0:05:49:BC:AA:77:A5:DC:22:2A:BF:A6:D3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673B4252E02386D1B6C97C Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/110dede2-fd8c-352e-9e3e-8c274d9b641a.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3b:42:52:e0:23:86:d1:b6:c9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=304d2bea-d4c5-4fdb-b677-7c67bfc8942b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fb:90:d9:29:6a:07:37:af:08:fc:fb:56:0a: 29:69:38:d7:d8:eb:5f:47:9c:98:f8:1d:79:81:82: aa:24:1a:ec:d8:5e:28:0d:a0:24:fb:74:2a:5e:82: 34:10:00:d1:31:32:77:15:fa:2c:66:1e:b8:23:3b: 7e:54:9b:0c:ec:76:a9:54:1a:bf:ea:6b:e4:66:2b: b8:18:b6:40:fd:30:20:6a:6b:d2:ad:06:bc:46:0c: dd:6f:56:ee:59:57:bd:da:0d:a3:9e:24:3c:ce:a6: 97:5a:90:7a:09:7f:cf:74:ea:20:d7:c9:04:e0:b3: ce:a8:bf:73:cb:9f:30:62:56:3b:b6:a8:84:0f:d6: a7:59:5a:8a:5b:2b:b2:d4:e7:c4:33:27:65:b1:2a: c2:29:8e:c7:f3:ee:34:b0:1e:ea:c1:f8:12:88:5a: dd:5c:f3:f3:32:1a:b3:45:08:42:2c:22:25:c9:60: a6:8e:06:1f:0c:ba:ef:98:44:6c:d0:7a:99:fd:df: d0:ad:54:08:35:10:99:22:d1:91:8f:98:78:9b:4d: fd:93:d1:08:d3:2d:24:50:ec:64:76:0d:e2:5d:b8: 02:8e:ba:38:b0:ae:62:7c:da:7b:50:78:2e:12:c0: 55:be:f8:f4:9a:cc:ab:d5:7e:2d:72:9f:06:b4:e0: bb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7E:87:B8:CE:9E:6A:E0:05:49:BC:AA:77:A5:DC:22:2A:BF:A6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/110dede2-fd8c-352e-9e3e-8c274d9b641a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:15:ac:90:74:3c:28:04:c4:35:90:3b:dc:6a:3d:6a:00:c0: c0:e1:c9:2f:65:ff:2c:15:97:f2:2c:30:94:8d:33:bc:ea:f6: 9d:0a:c6:46:53:b1:94:a7:38:b5:6d:35:7d:72:d2:5a:a5:16: 8c:0a:37:be:b0:25:47:b1:9c:b5:e1:b6:5d:05:4f:de:88:54: ec:04:40:cb:7a:82:0b:5b:68:0c:f7:0a:e9:4b:88:47:35:ef: 36:8a:1a:4c:06:59:0a:f9:75:b6:76:aa:e8:f4:b6:49:74:33: 9b:ad:3f:82:23:45:81:7d:c9:66:b0:3f:22:c5:24:a9:2b:11: b2:9a:08:03:c5:c9:dc:82:98:dd:2e:3c:29:f0:39:75:82:c9: 78:3a:84:3a:ea:f1:b5:c4:2b:80:09:27:af:59:30:ed:b0:76: f1:5a:ae:aa:fa:96:e1:fc:44:9f:c0:84:99:75:b5:02:7b:ec: cc:c8:60:6b:43:57:06:0c:be:de:e1:a6:4c:23:0d:00:b1:17: 9f:89:47:c0:e2:67:07:84:79:b5:49:d4:10:29:b6:9e:c0:65: c4:75:43:5e:70:45:93:73:74:5d:e7:84:09:63:fc:7b:2d:46: 77:fd:70:e5:15:82:fa:d2:92:78:51:50:fc:11:2e:e8:25:99: 77:a1:fd:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZztCUuAjhtG2yXwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MzA0ZDJiZWEtZDRjNS00ZmRiLWI2NzctN2M2N2JmYzg5NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfuQ2SlqBzevCPz7VgopaTjX2OtfR5yY+B15 gYKqJBrs2F4oDaAk+3QqXoI0EADRMTJ3FfosZh64Izt+VJsM7HapVBq/6mvkZiu4 GLZA/TAgamvSrQa8Rgzdb1buWVe92g2jniQ8zqaXWpB6CX/PdOog18kE4LPOqL9z y58wYlY7tqiED9anWVqKWyuy1OfEMydlsSrCKY7H8+40sB7qwfgSiFrdXPPzMhqz RQhCLCIlyWCmjgYfDLrvmERs0HqZ/d/QrVQINRCZItGRj5h4m039k9EI0y0kUOxk dg3iXbgCjro4sK5ifNp7UHguEsBVvvj0msyr1X4tcp8GtOC7cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl+h7jOnmrgBUm8qnel3CIqv6bTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTEwZGVkZTItZmQ4Yy0z NTJlLTllM2UtOGMyNzRkOWI2NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEVrJB0PCgExDWQO9xqPWoAwMDhyS9l/ywVl/IsMJSNM7zq9p0KxkZT sZSnOLVtNX1y0lqlFowKN76wJUexnLXhtl0FT96IVOwEQMt6ggtbaAz3CulLiEc1 7zaKGkwGWQr5dbZ2quj0tkl0M5utP4IjRYF9yWawPyLFJKkrEbKaCAPFydyCmN0u PCnwOXWCyXg6hDrq8bXEK4AJJ69ZMO2wdvFarqr6luH8RJ/AhJl1tQJ77MzIYGtD VwYMvt7hpkwjDQCxF5+JR8DiZweEebVJ1BAptp7AZcR1Q15wRZNzdF3nhAlj/Hst Rnf9cOUVgvrSknhRUPwRLuglmXeh/bA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:03 2025 by rpki-client