
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa
File: 1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa (raw, json)
Hash identifier: Fs6puAccckbRXB/o+OtRqVBjLmC6RFVCuWTsj0wmJyU=
Subject key identifier: 4C:B0:60:75:14:F9:AA:9A:8E:51:2E:0B:9B:4E:D5:2D:3E:5D:C1:DF
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584B6201F214D7923129E4BC2F00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa
Signing time: Thu 02 Oct 2025 01:00:31 +0000
ROA not before: Thu 02 Oct 2025 01:00:31 +0000
ROA not after: Wed 31 Dec 2025 02:00:31 +0000
asID: 12041
IP address blocks: 65.22.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:62:01:f2:14:d7:92:31:29:e4:bc:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Oct 2 01:00:31 2025 GMT
Not After : Dec 31 02:00:31 2025 GMT
Subject: CN=656defd9-a491-41ef-86ac-9ddd3c8938bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:19:54:f3:00:66:89:bc:9f:49:27:75:a8:
3c:ff:53:31:bd:07:bf:bc:e8:fd:1c:1e:33:f4:60:
44:89:73:de:cf:91:f7:14:b5:4e:d9:19:92:6a:95:
9f:01:7c:23:1f:aa:15:27:11:aa:32:5c:86:c3:37:
aa:14:59:cd:d9:cb:1c:d0:0b:97:6e:fc:b6:d6:cb:
b3:bb:0b:6f:d4:7d:8e:15:b5:35:5e:20:6e:01:7d:
1a:22:41:a3:a5:ab:d1:35:ab:e8:1c:a5:3a:cb:b4:
dc:ea:1f:d4:bc:a4:dd:6b:4b:96:0b:54:fb:b5:cc:
80:46:aa:41:9b:cf:6f:9c:c3:53:76:11:1d:d2:0e:
76:46:df:63:32:e4:fb:ef:39:78:0b:44:77:bf:c1:
4b:14:4c:8b:75:94:27:e4:0c:15:b6:b1:5b:9d:1e:
3d:70:1f:93:33:04:94:cd:eb:d7:47:25:1b:43:ed:
43:10:88:1f:77:f0:61:e9:fc:0f:10:f8:02:a6:09:
cf:46:0a:2a:77:6a:89:aa:51:77:3d:87:20:66:a2:
e6:91:d4:a2:d9:2c:bc:75:32:9a:53:28:4f:d9:ca:
31:ce:2d:d6:c3:09:a3:78:06:d8:90:c4:40:e9:e1:
7d:55:11:4f:88:05:38:d0:81:53:de:a3:35:27:14:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B0:60:75:14:F9:AA:9A:8E:51:2E:0B:9B:4E:D5:2D:3E:5D:C1:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:1c:7d:2c:e9:83:31:31:9a:8d:2d:3c:5f:2a:f0:58:63:a7:
cf:19:b0:e5:4b:0d:30:5c:b5:c4:01:81:f9:26:17:77:db:12:
e4:6e:1e:f0:b2:3c:d6:b5:64:06:e9:4c:0d:c6:95:1e:19:a0:
d9:6f:c8:0d:94:4a:fd:12:7b:24:43:a3:bb:70:81:1b:6e:cc:
57:0c:0d:8f:5d:ab:4e:da:7f:fd:a1:63:c5:9a:06:a6:e1:39:
e1:7a:65:39:a1:cb:9e:42:01:5d:14:22:1e:be:9a:f8:02:0d:
cf:5b:de:73:a2:b1:04:d5:16:5c:48:84:9d:55:a6:d4:c9:b3:
a9:2d:69:91:0e:0e:a7:11:86:34:16:61:84:24:b1:71:db:3a:
ac:57:32:45:7b:88:6e:4c:3a:1e:49:ac:5b:2e:b4:bb:91:22:
34:5d:1c:f4:f3:80:1c:c7:61:ae:58:58:66:52:7c:43:9d:85:
3a:b3:51:62:25:91:ae:ba:b7:8a:53:85:48:7d:c4:ad:7b:56:
da:ce:05:0f:7e:f5:2c:39:ed:51:7d:c7:c5:ca:1b:79:ee:12:
03:05:1a:28:e4:ba:29:34:f1:f0:8e:d3:67:97:9a:0b:61:f2:
39:51:30:41:c1:8e:80:ab:80:37:76:76:63:33:07:1b:9b:28:
ae:c2:d5:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfIU15IxKeS8LwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NjU2ZGVmZDktYTQ5MS00MWVmLTg2YWMtOWRkZDNjODkzOGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr20ZVPMAZom8n0kndag8/1MxvQe/vOj9HB4z
9GBEiXPez5H3FLVO2RmSapWfAXwjH6oVJxGqMlyGwzeqFFnN2csc0AuXbvy21suz
uwtv1H2OFbU1XiBuAX0aIkGjpavRNavoHKU6y7Tc6h/UvKTda0uWC1T7tcyARqpB
m89vnMNTdhEd0g52Rt9jMuT77zl4C0R3v8FLFEyLdZQn5AwVtrFbnR49cB+TMwSU
zevXRyUbQ+1DEIgfd/Bh6fwPEPgCpgnPRgoqd2qJqlF3PYcgZqLmkdSi2Sy8dTKa
UyhP2coxzi3WwwmjeAbYkMRA6eF9VRFPiAU40IFT3qM1JxTnwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEywYHUU+aqajlEuC5tO1S0+XcHfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTc1NWVmOTEtYTlhNi0z
ZmI3LWFiYmYtNTIyZmMyNjEzZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRafMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALscfSzpgzExmo0tPF8q8Fhjp88ZsOVLDTBctcQBgfkmF3fbEuRuHvCy
PNa1ZAbpTA3GlR4ZoNlvyA2USv0SeyRDo7twgRtuzFcMDY9dq07af/2hY8WaBqbh
OeF6ZTmhy55CAV0UIh6+mvgCDc9b3nOisQTVFlxIhJ1VptTJs6ktaZEODqcRhjQW
YYQksXHbOqxXMkV7iG5MOh5JrFsutLuRIjRdHPTzgBzHYa5YWGZSfEOdhTqzUWIl
ka66t4pThUh9xK17VtrOBQ9+9Sw57VF9x8XKG3nuEgMFGijkuik08fCO02eXmgth
8jlRMEHBjoCrgDd2dmMzBxubKK7C1as=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:50:11 2025 by rpki-client