$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4725fcfe-b6f5-3187-a026-4e534e121a37.roa File: 4725fcfe-b6f5-3187-a026-4e534e121a37.roa (raw, json) Hash identifier: i+EH+VDXIB4d36K2bBgGQEP6SL407xWZnndtoSM3ILI= Subject key identifier: 8D:74:FC:61:F6:8B:F6:90:C5:53:BD:1F:53:0D:FB:08:48:42:9D:DE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674BE492C804F773AD1D80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4725fcfe-b6f5-3187-a026-4e534e121a37.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4b:e4:92:c8:04:f7:73:ad:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=3bd8dfe5-c05e-4c0b-9437-919d631f89bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:b2:3a:fb:7b:e8:25:91:f1:07:89:c1:4e: ee:2e:4c:a5:ee:75:2b:49:95:1c:58:d8:b8:68:ed: 1b:1d:fc:9b:cc:72:bc:61:c1:2c:ee:30:56:89:60: 2e:62:a1:17:03:33:98:0f:ad:fb:97:4d:57:86:dc: 0d:4c:3f:e0:91:65:f7:5f:49:c2:d4:1b:9a:ba:f8: f0:8d:e2:76:3e:2c:c1:f6:59:0d:0f:2e:81:4f:d6: ad:e1:b7:28:bc:31:97:57:e9:66:12:ad:cb:28:82: 43:14:3b:54:31:4e:92:21:1c:5c:1f:67:e7:a3:89: 2c:03:0d:44:c0:0a:92:25:3a:9e:26:cc:d7:ea:60: 36:de:f0:25:3b:49:0c:74:f5:98:cc:a4:64:4b:03: d2:27:e7:76:0d:41:e7:3e:a6:b6:5b:24:68:c2:12: b7:1f:7e:fb:bf:86:3a:ad:ee:41:d5:a9:a1:47:5b: 13:f7:87:9f:d9:b6:e8:8d:45:ae:93:66:8f:b4:05: a3:16:37:e6:e2:ea:f8:31:22:c1:01:9a:b0:70:84: 2f:d2:a6:4b:74:c3:98:51:a7:6c:a5:1f:84:e7:80: 0d:c9:a8:0d:ec:f9:1a:b2:ec:9b:b8:45:0b:d5:cc: f8:e4:38:7c:bb:a6:76:16:81:df:a7:eb:3f:f2:6f: 45:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:74:FC:61:F6:8B:F6:90:C5:53:BD:1F:53:0D:FB:08:48:42:9D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4725fcfe-b6f5-3187-a026-4e534e121a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:b7:54:18:eb:23:00:2d:d7:e5:21:37:2e:d4:f4:32:3f:d7: e6:b7:58:ec:68:36:a5:53:bb:76:f3:e5:83:28:f6:6c:c9:1f: 70:1b:35:c2:eb:f6:a1:f3:6f:f6:54:5d:82:1f:61:95:18:e4: 46:d3:10:15:2d:c0:6c:26:84:9a:36:43:ec:5f:d4:d2:47:82: a7:b4:65:b3:4b:4c:23:57:52:53:b4:ca:ab:49:5a:d8:82:f7: 11:a3:42:1a:4e:df:e8:85:08:07:cb:9f:34:e2:40:88:64:74: 7d:8f:9d:96:86:b9:23:7e:c9:66:c5:c3:ee:88:04:e3:ce:12: ad:da:16:4d:07:e2:d3:b8:ac:47:76:c3:4c:42:24:db:7b:50: 91:b5:bc:c9:5c:9e:ed:85:b4:c6:fc:77:19:9c:d1:03:ac:7c: 0f:fb:18:69:64:2a:11:52:43:14:5b:63:96:36:fb:95:8f:9e: 67:3d:59:77:b7:95:2d:5f:95:7e:5d:d1:cb:f5:97:31:60:bf: c3:91:a0:dd:95:82:5d:60:3c:32:69:31:ae:86:43:01:3c:03: b6:a7:4e:4a:13:2c:4c:13:c9:0f:95:ef:46:eb:d1:7b:1f:88: 60:a0:e1:81:11:1e:70:44:c4:75:6d:be:21:8f:08:0b:e4:f8: 4d:b0:0a:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0vkksgE93OtHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk M2JkOGRmZTUtYzA1ZS00YzBiLTk0MzctOTE5ZDYzMWY4OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wCyOvt76CWR8QeJwU7uLkyl7nUrSZUcWNi4 aO0bHfybzHK8YcEs7jBWiWAuYqEXAzOYD637l01XhtwNTD/gkWX3X0nC1Buauvjw jeJ2PizB9lkNDy6BT9at4bcovDGXV+lmEq3LKIJDFDtUMU6SIRxcH2fno4ksAw1E wAqSJTqeJszX6mA23vAlO0kMdPWYzKRkSwPSJ+d2DUHnPqa2WyRowhK3H377v4Y6 re5B1amhR1sT94ef2bbojUWuk2aPtAWjFjfm4ur4MSLBAZqwcIQv0qZLdMOYUads pR+E54ANyagN7PkasuybuEUL1cz45Dh8u6Z2FoHfp+s/8m9FIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI10/GH2i/aQxVO9H1MN+whIQp3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDcyNWZjZmUtYjZmNS0z MTg3LWEwMjYtNGU1MzRlMTIxYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJy3VBjrIwAt1+UhNy7U9DI/1+a3WOxoNqVTu3bz5YMo9mzJH3AbNcLr 9qHzb/ZUXYIfYZUY5EbTEBUtwGwmhJo2Q+xf1NJHgqe0ZbNLTCNXUlO0yqtJWtiC 9xGjQhpO3+iFCAfLnzTiQIhkdH2PnZaGuSN+yWbFw+6IBOPOEq3aFk0H4tO4rEd2 w0xCJNt7UJG1vMlcnu2FtMb8dxmc0QOsfA/7GGlkKhFSQxRbY5Y2+5WPnmc9WXe3 lS1flX5d0cv1lzFgv8ORoN2Vgl1gPDJpMa6GQwE8A7anTkoTLEwTyQ+V70br0Xsf iGCg4YERHnBExHVtviGPCAvk+E2wCn8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:46 2025 by rpki-client