$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa File: 5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa (raw, json) Hash identifier: lXU1MCLfqm4g42V6dbBnU3UwaJBm3/7MM1SnP8mrdr8= Subject key identifier: BE:70:09:93:07:74:D6:20:1E:20:35:74:AE:14:A0:47:EA:FC:53:AB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B8EACBCA735A3ACDE4E1A18C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13657 IP address blocks: 65.22.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:bc:a7:35:a3:ac:de:4e:1a:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=04d8a398-5de0-4daf-9976-7ef8c0c5c229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:5f:2a:01:07:a2:74:51:6d:eb:5c:14:cb: 52:57:07:80:d4:b6:4e:0a:3b:cf:c4:c0:45:d7:7e: 4a:b8:61:96:5d:99:c9:ac:50:0b:2e:e5:2b:44:5d: 39:8d:60:fb:66:6b:cf:ef:3f:79:6c:1d:a0:cf:74: 91:42:f9:d5:8f:03:7f:3f:2a:a6:55:92:a8:41:b0: 5b:d1:e8:9f:2a:77:20:a6:43:b6:89:83:1d:77:1f: bf:a2:01:6e:3a:b4:34:b5:8a:9f:ad:23:d7:b4:b9: 03:1a:2e:88:83:2f:99:78:51:62:5f:9c:8a:7f:97: 44:d1:c6:9d:84:63:f6:02:bc:3a:31:bb:ad:e3:8a: 4f:3f:6a:3c:97:a1:d1:0f:d0:97:e0:3a:14:52:33: ab:7c:97:30:44:ab:1a:38:e5:71:44:9a:63:23:f0: 59:21:ac:fd:f2:e2:1d:02:af:35:dc:20:0b:5d:7b: 94:c3:27:1d:5c:d2:4e:e3:9c:4c:16:43:d6:44:16: af:eb:71:1b:6e:37:81:6c:84:aa:86:d0:e9:5c:4b: 54:ba:2a:cb:fe:7c:33:0f:b3:9b:99:8b:f9:da:61: b3:da:9e:af:b3:69:d5:5f:f8:a7:df:ee:43:80:ba: 17:53:45:84:a0:6e:5f:22:8c:8b:3c:e8:22:b4:95: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:70:09:93:07:74:D6:20:1E:20:35:74:AE:14:A0:47:EA:FC:53:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4b:70:c3:4d:d6:ad:27:59:eb:75:89:c0:aa:ce:fb:bd:4f: 78:53:0d:2a:87:73:03:57:bd:87:af:86:57:8f:a4:4b:37:04: 16:db:32:5c:9a:91:6f:99:ac:13:1c:c3:ae:ab:13:c5:30:68: 7f:22:6e:7c:bb:e7:bc:de:77:b5:34:02:19:2b:f8:2c:18:b0: 36:61:51:81:42:fd:37:2e:56:9f:64:53:48:4b:20:39:0f:02: 68:bd:33:00:1b:85:21:6e:c1:e7:96:b4:0a:fc:f2:85:b7:29: 70:36:5d:0c:1a:c5:c3:5a:22:21:82:21:57:0e:23:b3:07:2a: 74:91:11:66:9c:bd:a9:d8:85:e2:9a:66:ce:9a:b5:67:79:03: a9:bd:42:71:d1:e9:06:64:47:1a:3b:02:bb:a7:2e:f8:a4:17: 65:14:b4:1e:61:a3:ea:3a:96:12:8f:c8:f0:08:d4:ce:cb:db: a5:53:d2:e8:f4:af:bb:c2:41:1d:d9:b9:b9:01:0e:5c:c8:18: 53:11:10:a2:b3:60:6a:bf:41:81:80:f1:ca:e4:e8:aa:f1:3d: 92:12:43:73:a6:78:ed:50:80:2f:ab:4e:da:0b:72:31:e2:2b: 34:c5:74:03:51:d2:b5:e1:89:c3:c3:b2:3c:f2:ad:d3:4e:ab: 55:e6:4a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrLynNaOs3k4aGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDRkOGEzOTgtNWRlMC00ZGFmLTk5NzYtN2VmOGMwYzVjMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRxfKgEHonRRbetcFMtSVweA1LZOCjvPxMBF 135KuGGWXZnJrFALLuUrRF05jWD7ZmvP7z95bB2gz3SRQvnVjwN/PyqmVZKoQbBb 0eifKncgpkO2iYMddx+/ogFuOrQ0tYqfrSPXtLkDGi6Igy+ZeFFiX5yKf5dE0cad hGP2Arw6Mbut44pPP2o8l6HRD9CX4DoUUjOrfJcwRKsaOOVxRJpjI/BZIaz98uId Aq813CALXXuUwycdXNJO45xMFkPWRBav63EbbjeBbISqhtDpXEtUuirL/nwzD7Ob mYv52mGz2p6vs2nVX/in3+5DgLoXU0WEoG5fIoyLPOgitJV8fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5wCZMHdNYgHiA1dK4UoEfq/FOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWFhMmJiMGItMmNhMi0z Njc4LWFkYTEtMjhiOTQ4ZmFiZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1LcMNN1q0nWet1icCqzvu9T3hTDSqHcwNXvYevhlePpEs3BBbbMlya kW+ZrBMcw66rE8UwaH8ibny757zed7U0Ahkr+CwYsDZhUYFC/TcuVp9kU0hLIDkP Ami9MwAbhSFuweeWtAr88oW3KXA2XQwaxcNaIiGCIVcOI7MHKnSREWacvanYheKa Zs6atWd5A6m9QnHR6QZkRxo7ArunLvikF2UUtB5ho+o6lhKPyPAI1M7L26VT0uj0 r7vCQR3ZubkBDlzIGFMREKKzYGq/QYGA8crk6KrxPZISQ3OmeO1QgC+rTtoLcjHi KzTFdANR0rXhicPDsjzyrdNOq1XmSh0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:21:05 2025 by rpki-client