$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/207a1c3d-3f68-3335-bba2-7651a99a336b.roa File: 207a1c3d-3f68-3335-bba2-7651a99a336b.roa (raw, json) Hash identifier: h/4dmiWXVPatM3qAoVPdUP+SF4W6w+K60Yj09hL33io= Subject key identifier: D5:A5:0C:DA:3A:7F:BD:20:DE:FD:BD:77:00:37:04:6B:59:EB:FA:47 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674AE5C09AC54DB10B86A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/207a1c3d-3f68-3335-bba2-7651a99a336b.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4a:e5:c0:9a:c5:4d:b1:0b:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=fdca6e7e-87c5-4eea-9f08-1e74f68504c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bf:7c:b3:6e:aa:c4:bc:54:4e:6d:16:ae:98: 99:43:84:9d:dd:1f:19:f2:6f:6e:b1:e9:6f:ec:a3: 5c:54:b7:5c:90:49:2e:38:0c:1c:47:fd:e5:88:83: a6:ac:ce:8c:95:52:c2:8f:12:b5:f7:bc:93:4c:66: ec:eb:93:6d:83:5f:9b:2a:34:23:de:81:ef:58:38: 05:72:17:c9:e1:3b:60:1f:bb:86:ba:22:07:db:71: a4:73:4d:96:d5:87:26:df:3a:d4:84:11:2e:7f:d4: 27:1f:cc:b9:98:b3:16:08:80:f7:c5:86:10:cf:8a: a0:0e:50:b9:16:9b:7f:5a:02:be:86:80:49:ea:62: cc:dc:8f:27:d3:03:33:42:af:75:a4:93:25:cf:05: 4b:df:38:b0:d6:e2:d7:95:15:f8:79:a2:5f:40:42: 19:47:e0:d1:c0:b0:6c:8f:03:a2:12:d4:26:9a:19: 19:a7:06:37:2f:07:9f:03:63:91:26:43:b5:70:49: b6:f0:20:ab:d4:51:63:57:f2:03:40:a2:6f:e7:6d: 27:1b:5a:71:3d:a0:2e:51:77:0a:03:04:86:60:ee: 0e:48:10:ea:af:2d:46:61:40:a1:da:82:e6:d8:65: 2b:27:11:2c:72:82:4f:d6:a1:15:e9:9a:5c:bf:72: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A5:0C:DA:3A:7F:BD:20:DE:FD:BD:77:00:37:04:6B:59:EB:FA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/207a1c3d-3f68-3335-bba2-7651a99a336b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ac:49:05:b9:5b:76:3e:3a:ba:f4:85:b2:c2:a6:e7:03:8e: 34:fb:ba:47:84:68:20:d5:99:71:6f:38:b0:89:ae:4c:e0:d8: ee:c9:84:7e:66:e2:12:98:49:e1:56:ab:2b:53:ae:9c:05:dd: b3:cb:12:77:8d:d7:8e:15:d4:41:92:2a:06:9a:18:f7:4e:27: 68:61:26:48:89:4f:f5:fe:f3:27:80:36:9a:ef:54:4d:a6:b0: 30:a1:12:9f:17:97:30:fd:48:32:3c:64:16:18:7f:c2:14:b5: e1:4e:76:0f:4d:e8:a1:8f:77:74:b4:a7:99:ba:c9:2b:65:46: 87:c4:3f:0d:a7:cb:96:ab:0f:dc:fc:b6:12:4f:fb:fb:f6:68: be:c4:85:89:54:e7:36:d8:15:b2:ee:93:05:ac:3a:1d:fc:b0: 12:61:91:78:3c:da:23:ca:17:24:5c:c1:b3:bb:f9:a8:c3:eb: fa:ce:37:2e:a0:d1:ba:03:2c:da:e6:c9:5f:4e:f0:3c:62:66: f6:83:2e:0f:bc:d5:d0:b6:ff:ab:8e:8f:b0:17:72:e8:8f:b8: 0c:b4:5a:6e:1c:66:b4:a3:02:a5:69:8c:29:eb:45:77:45:78: b0:c0:af:d8:cb:b8:62:06:cf:7c:bd:0c:ef:fb:ba:44:bf:ff: 68:8a:35:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0rlwJrFTbELhqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZmRjYTZlN2UtODdjNS00ZWVhLTlmMDgtMWU3NGY2ODUwNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb98s26qxLxUTm0WrpiZQ4Sd3R8Z8m9uselv 7KNcVLdckEkuOAwcR/3liIOmrM6MlVLCjxK197yTTGbs65Ntg1+bKjQj3oHvWDgF chfJ4TtgH7uGuiIH23Gkc02W1Ycm3zrUhBEuf9QnH8y5mLMWCID3xYYQz4qgDlC5 Fpt/WgK+hoBJ6mLM3I8n0wMzQq91pJMlzwVL3ziw1uLXlRX4eaJfQEIZR+DRwLBs jwOiEtQmmhkZpwY3LwefA2ORJkO1cEm28CCr1FFjV/IDQKJv520nG1pxPaAuUXcK AwSGYO4OSBDqry1GYUCh2oLm2GUrJxEscoJP1qEV6Zpcv3IzXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWlDNo6f70g3v29dwA3BGtZ6/pHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjA3YTFjM2QtM2Y2OC0z MzM1LWJiYTItNzY1MWE5OWEzMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIusSQW5W3Y+Orr0hbLCpucDjjT7ukeEaCDVmXFvOLCJrkzg2O7JhH5m 4hKYSeFWqytTrpwF3bPLEneN144V1EGSKgaaGPdOJ2hhJkiJT/X+8yeANprvVE2m sDChEp8XlzD9SDI8ZBYYf8IUteFOdg9N6KGPd3S0p5m6yStlRofEPw2ny5arD9z8 thJP+/v2aL7EhYlU5zbYFbLukwWsOh38sBJhkXg82iPKFyRcwbO7+ajD6/rONy6g 0boDLNrmyV9O8DxiZvaDLg+81dC2/6uOj7AXcuiPuAy0Wm4cZrSjAqVpjCnrRXdF eLDAr9jLuGIGz3y9DO/7ukS//2iKNck= -----END CERTIFICATE-----Generated at Wed Nov 5 20:47:14 2025 by rpki-client