$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/481d5140-bced-3c85-85fe-23073f514263.roa File: 481d5140-bced-3c85-85fe-23073f514263.roa (raw, json) Hash identifier: 7vuf5QLCR/qdSINYImOXOAfUTZpYyi2esVVLPqNPAJE= Subject key identifier: 49:6B:AC:52:4D:9B:26:61:19:89:CA:F8:FD:D1:08:CB:1B:97:D6:5E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202252FE8200E44F08FD880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/481d5140-bced-3c85-85fe-23073f514263.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:25:2f:e8:20:0e:44:f0:8f:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=7b8b10f5-e5bf-41b6-8396-29bb78e41a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:c4:88:f9:e4:6e:da:71:31:8e:bd:b5:0b: 5f:29:95:bf:71:24:a3:e3:fa:55:ee:b7:73:4e:0c: ce:46:ce:e5:51:61:43:2d:1c:f3:9e:7c:fc:d5:60: ea:6d:37:70:7e:64:a2:79:96:ed:d2:f2:50:65:a9: 10:eb:06:ad:bd:d0:b1:6e:72:86:4a:2e:af:5e:18: 12:0b:4c:9b:cc:e2:26:3b:cd:4d:8e:b7:17:37:6e: ee:e8:0f:b4:dc:e4:8a:81:5d:09:f6:36:41:24:c6: 9f:01:60:c4:09:d1:9d:44:99:44:b8:b7:da:7a:f1: f9:e6:6a:fb:05:57:c4:34:ce:e0:63:c4:6e:aa:e6: 06:d0:3e:ad:2b:fa:b8:7b:45:0f:eb:14:5e:e4:b4: 75:c1:55:a8:82:ba:4e:fb:a4:72:f4:c6:d1:e2:61: 3c:c3:6c:80:1c:28:ff:f0:02:a7:e9:e1:d5:d3:c4: 44:c2:6a:99:ba:b1:f7:8b:b0:f6:2d:c9:c7:23:9b: 14:26:e3:0a:61:07:39:e4:19:10:7d:af:b1:29:cf: 21:38:07:df:6b:5e:1b:74:bd:05:00:7a:9f:e9:71: 7f:3b:a9:ab:f7:0b:23:52:27:ec:36:bf:14:30:86: fc:81:ec:5d:02:5e:5f:dd:ca:60:e6:60:65:6b:3d: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6B:AC:52:4D:9B:26:61:19:89:CA:F8:FD:D1:08:CB:1B:97:D6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/481d5140-bced-3c85-85fe-23073f514263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:31:38:2d:0d:79:c8:4d:14:21:b2:6d:05:7a:00:41:6c:92: ed:ef:18:9f:a4:d6:c3:b1:b4:f2:09:ad:11:f8:4f:bc:15:81: d6:1c:84:1a:87:3a:a9:7d:19:1b:63:f5:d5:ca:c8:14:32:e6: b9:bb:52:5e:80:90:f2:79:08:83:c1:39:bf:00:aa:65:ce:73: d9:0a:f3:85:7d:92:50:d4:51:ae:4b:12:11:67:13:08:75:0a: b9:4b:e2:24:94:a0:c6:9d:5d:37:1b:8a:af:63:3e:8c:c5:07: a2:55:54:13:61:c0:da:48:e5:a6:6a:a8:b6:8c:89:ac:38:40: e2:58:56:7d:76:08:9d:ce:02:ad:7c:56:a0:9d:f1:d8:ca:29: 35:87:ed:a0:fb:54:f0:82:06:de:58:3b:f2:e0:6d:2c:99:e0: 0c:0e:4d:81:97:0b:62:f8:36:f9:9a:d0:99:0d:b2:7a:f6:5f: e3:6c:e1:41:d7:5d:d8:e1:cd:68:08:29:64:86:4f:79:91:b0: 39:17:dd:1f:66:c7:fe:ef:7e:08:62:3f:45:cf:d9:79:99:53: 46:b5:77:2e:f8:53:a9:ff:c1:49:26:56:6c:bb:a1:ea:f1:e2: 58:bf:25:b9:11:fe:51:a8:e9:19:fc:6a:c0:39:86:51:4c:7b: 52:af:b0:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiUv6CAORPCP2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk N2I4YjEwZjUtZTViZi00MWI2LTgzOTYtMjliYjc4ZTQxYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sPEiPnkbtpxMY69tQtfKZW/cSSj4/pV7rdz TgzORs7lUWFDLRzznnz81WDqbTdwfmSieZbt0vJQZakQ6watvdCxbnKGSi6vXhgS C0ybzOImO81NjrcXN27u6A+03OSKgV0J9jZBJMafAWDECdGdRJlEuLfaevH55mr7 BVfENM7gY8RuquYG0D6tK/q4e0UP6xRe5LR1wVWogrpO+6Ry9MbR4mE8w2yAHCj/ 8AKn6eHV08REwmqZurH3i7D2LcnHI5sUJuMKYQc55BkQfa+xKc8hOAffa14bdL0F AHqf6XF/O6mr9wsjUifsNr8UMIb8gexdAl5f3cpg5mBlaz22LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElrrFJNmyZhGYnK+P3RCMsbl9ZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDgxZDUxNDAtYmNlZC0z Yzg1LTg1ZmUtMjMwNzNmNTE0MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoxOC0NechNFCGybQV6AEFsku3vGJ+k1sOxtPIJrRH4T7wVgdYchBqH Oql9GRtj9dXKyBQy5rm7Ul6AkPJ5CIPBOb8AqmXOc9kK84V9klDUUa5LEhFnEwh1 CrlL4iSUoMadXTcbiq9jPozFB6JVVBNhwNpI5aZqqLaMiaw4QOJYVn12CJ3OAq18 VqCd8djKKTWH7aD7VPCCBt5YO/LgbSyZ4AwOTYGXC2L4Nvma0JkNsnr2X+Ns4UHX XdjhzWgIKWSGT3mRsDkX3R9mx/7vfghiP0XP2XmZU0a1dy74U6n/wUkmVmy7oerx 4li/JbkR/lGo6Rn8asA5hlFMe1KvsO8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:36 2025 by rpki-client