$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/27f5d6b2-8857-38b7-a89c-6285fbd6ecf8.roa File: 27f5d6b2-8857-38b7-a89c-6285fbd6ecf8.roa (raw, json) Hash identifier: FB+zDMWtcJrYwMLahUR3X8Qx6Qck06WhPp4Z+JYy6m0= Subject key identifier: B4:C6:28:1A:3D:EC:66:1D:3E:89:14:19:D1:A5:6D:5D:CC:D8:4E:AB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674DCE0F60AD196FACCB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/27f5d6b2-8857-38b7-a89c-6285fbd6ecf8.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4d:ce:0f:60:ad:19:6f:ac:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=abd1ad58-30e0-4018-bdb2-1dbb966dcb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2b:9b:14:71:34:5a:38:ef:0a:ea:78:7d:31: 64:80:8d:56:da:37:bd:ac:ef:4d:1d:e0:bb:d0:26: 0c:e4:4d:58:c8:3d:7e:c8:f2:d9:6a:7a:56:2f:55: 8c:5c:50:57:80:ba:0a:d9:bb:f5:45:5b:45:b2:24: 16:2f:23:7f:24:b9:c9:61:91:3b:e5:17:55:95:c2: 6a:93:45:fe:af:25:c5:f9:73:c7:73:5f:50:a4:9e: 9b:c5:ed:11:46:28:4e:03:98:54:99:10:91:9e:5d: 24:65:7f:b9:9d:1c:9a:9a:c8:f4:d1:9c:1f:10:25: ed:b5:e4:8b:cb:64:82:d8:96:e5:99:cc:f2:bb:61: 14:20:1a:86:dc:0e:d0:7c:93:67:9b:72:68:2d:dd: 18:3e:89:88:df:fb:2c:f0:52:7b:1b:b6:76:84:4e: 9d:2b:f2:99:61:37:58:ee:9b:06:5c:26:c6:1a:cb: 47:58:2a:e8:8d:f7:5f:e6:20:a8:c4:ef:80:08:f6: e1:0a:c0:01:02:4f:32:0c:2e:4d:d2:ec:8f:90:5a: 76:3a:76:d0:20:4a:c9:a0:bf:e5:97:7d:16:e3:2d: 30:6f:06:58:6f:d9:77:f7:e7:2e:f1:73:94:3c:c7: a8:fa:65:7c:28:e4:19:43:58:b1:0d:a3:f8:3e:6f: 94:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C6:28:1A:3D:EC:66:1D:3E:89:14:19:D1:A5:6D:5D:CC:D8:4E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/27f5d6b2-8857-38b7-a89c-6285fbd6ecf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:d1:ed:d1:df:98:e8:50:ae:cf:0e:fd:94:11:1a:a7:3d:b2: ca:83:5b:f7:af:17:23:da:77:fe:aa:74:b5:04:d5:a6:83:5e: ee:35:d6:19:ae:2b:21:65:62:52:ad:aa:e8:5d:20:b6:b9:45: 18:0e:82:63:63:0b:4f:96:5e:b7:f6:62:5f:9e:12:dd:50:fc: 33:f9:30:4f:4c:7f:18:30:88:a8:ae:76:fd:a5:14:40:a0:d3: f2:63:b6:77:3f:0c:08:07:c4:f5:cd:be:14:15:91:40:ac:ec: a6:5e:fa:e0:7c:d6:34:8e:14:d2:28:e7:de:76:62:94:4f:53: 6d:8a:13:03:e7:f6:dc:4f:c1:a2:c1:53:f4:de:7b:f0:03:f7: bd:30:f1:14:03:d3:43:3c:7e:28:98:dc:d3:cc:bf:db:9e:51: c5:f9:8b:3e:d5:cb:a1:3e:97:36:00:73:f6:2b:bd:08:99:9e: 9d:ba:eb:71:fa:35:9f:b3:31:3c:d2:65:be:95:4b:82:56:a8: 4b:42:99:6b:33:b8:67:85:6e:92:2b:b2:e3:24:17:49:7e:a3: 6f:b9:78:dd:be:2a:09:50:ad:ce:6d:96:df:c0:10:09:19:62: 48:6b:34:92:d5:c2:57:b1:8f:53:9d:4a:09:a6:42:1d:62:c9: 3a:c9:f1:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ03OD2CtGW+sy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YWJkMWFkNTgtMzBlMC00MDE4LWJkYjItMWRiYjk2NmRjYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCubFHE0WjjvCup4fTFkgI1W2je9rO9NHeC7 0CYM5E1YyD1+yPLZanpWL1WMXFBXgLoK2bv1RVtFsiQWLyN/JLnJYZE75RdVlcJq k0X+ryXF+XPHc19QpJ6bxe0RRihOA5hUmRCRnl0kZX+5nRyamsj00ZwfECXtteSL y2SC2Jblmczyu2EUIBqG3A7QfJNnm3JoLd0YPomI3/ss8FJ7G7Z2hE6dK/KZYTdY 7psGXCbGGstHWCrojfdf5iCoxO+ACPbhCsABAk8yDC5N0uyPkFp2OnbQIErJoL/l l30W4y0wbwZYb9l39+cu8XOUPMeo+mV8KOQZQ1ixDaP4Pm+UxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTGKBo97GYdPokUGdGlbV3M2E6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjdmNWQ2YjItODg1Ny0z OGI3LWE4OWMtNjI4NWZiZDZlY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPR7dHfmOhQrs8O/ZQRGqc9ssqDW/evFyPad/6qdLUE1aaDXu411hmu KyFlYlKtquhdILa5RRgOgmNjC0+WXrf2Yl+eEt1Q/DP5ME9MfxgwiKiudv2lFECg 0/Jjtnc/DAgHxPXNvhQVkUCs7KZe+uB81jSOFNIo5952YpRPU22KEwPn9txPwaLB U/Tee/AD970w8RQD00M8fiiY3NPMv9ueUcX5iz7Vy6E+lzYAc/YrvQiZnp2663H6 NZ+zMTzSZb6VS4JWqEtCmWszuGeFbpIrsuMkF0l+o2+5eN2+KglQrc5tlt/AEAkZ YkhrNJLVwlexj1OdSgmmQh1iyTrJ8RI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:21 2025 by rpki-client