$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61a16cab-60ab-3d4c-8d1c-3d75a70be1b0.roa File: 61a16cab-60ab-3d4c-8d1c-3d75a70be1b0.roa (raw, json) Hash identifier: QAmPRtV4hjahItdNswUJcyv2UJ4r0LUiGXbU8L0v12M= Subject key identifier: E4:8A:D5:B4:C9:23:CC:10:1E:49:BE:A9:3C:4B:A7:FB:8F:63:07:DD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201DD22E721BB3C16B5E440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61a16cab-60ab-3d4c-8d1c-3d75a70be1b0.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:dd:22:e7:21:bb:3c:16:b5:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=840aac70-b9a2-47da-81e7-dc94b1d22594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b8:60:c1:be:0b:0e:30:97:ec:9e:a9:17:ab: 88:7a:d3:e4:4c:78:19:60:35:dd:5f:f7:8c:2e:88: 17:86:5e:26:bf:bc:a1:f5:85:ea:82:9f:c6:ab:41: 9b:7f:b9:b6:67:08:45:61:2e:cf:d8:14:96:5c:98: c8:61:94:6b:0d:1e:e9:77:a1:0d:0c:6a:55:20:d5: 89:7d:6f:5f:ed:de:0a:98:82:10:31:24:c0:f3:f4: 9e:72:ad:70:f4:d6:82:86:de:c7:a9:52:8b:59:34: b9:26:64:5d:76:9c:ad:54:fb:d5:c6:6f:e1:f5:3f: 35:d3:a9:10:d5:5c:8e:09:42:61:ec:db:67:d9:22: c7:e3:3a:77:69:27:43:0b:0e:ad:94:76:55:0c:57: 0b:c5:09:89:f2:7e:3e:98:37:47:6a:13:ef:95:8f: f4:d1:3c:80:f7:1a:f4:0c:4a:6f:08:90:1e:2c:f9: 64:13:94:dc:bb:db:0b:86:18:41:2d:f9:dd:96:8f: d2:a4:f9:d8:d2:3a:05:d8:e2:c0:46:3a:fe:8b:81: c7:76:7e:6f:a0:0d:16:87:1a:3a:9c:05:e0:f1:5a: b4:63:12:8b:1a:82:11:71:a6:fb:d9:dd:af:56:90: 81:e9:ba:69:c6:52:92:78:69:c3:bf:3a:84:19:e8: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8A:D5:B4:C9:23:CC:10:1E:49:BE:A9:3C:4B:A7:FB:8F:63:07:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61a16cab-60ab-3d4c-8d1c-3d75a70be1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:6a:17:e4:51:18:a1:bf:2d:da:09:d8:ac:7b:6e:43:a8:9d: a6:38:02:87:b4:95:f5:f6:29:05:5a:8f:c9:29:1e:81:1e:fe: 67:cd:15:0a:76:b2:56:2f:31:38:55:9f:14:de:80:6c:9a:93: d7:d5:4b:de:24:48:d5:5f:57:fd:49:9b:55:5f:a2:60:cf:91: 34:ed:4f:6a:76:00:cf:30:41:f1:4c:93:e4:52:03:f4:db:f5: e3:91:ce:16:19:07:5b:e4:61:c5:21:18:4d:36:57:97:e2:49: ac:a2:d5:11:84:85:a9:b5:e3:1e:b2:6b:62:ef:02:42:01:a7: 59:67:c0:0c:41:78:f9:68:b2:0b:f6:f3:7d:5e:00:7f:67:21: bb:b3:0d:cf:71:23:0c:9b:08:03:bc:60:2f:99:c4:4b:19:49: d6:93:fc:06:0f:1f:66:36:93:93:e8:30:66:3d:c8:61:8a:8e: 65:ce:d2:3b:99:62:bc:8b:1b:2b:e3:f9:17:2f:51:b2:01:67: 5e:1e:a6:da:f6:49:9f:02:82:ca:d3:ce:27:3f:9d:81:67:a9: 5c:1b:e2:f4:58:c0:be:35:d4:16:32:f3:35:bc:06:88:24:4f: 55:62:5b:2f:a2:37:10:6c:ed:bc:c5:f4:26:2e:e7:ce:ca:a8: 39:7c:b3:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAd0i5yG7PBa15EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODQwYWFjNzAtYjlhMi00N2RhLTgxZTctZGM5NGIxZDIyNTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7hgwb4LDjCX7J6pF6uIetPkTHgZYDXdX/eM LogXhl4mv7yh9YXqgp/Gq0Gbf7m2ZwhFYS7P2BSWXJjIYZRrDR7pd6ENDGpVINWJ fW9f7d4KmIIQMSTA8/Secq1w9NaCht7HqVKLWTS5JmRddpytVPvVxm/h9T8106kQ 1VyOCUJh7Ntn2SLH4zp3aSdDCw6tlHZVDFcLxQmJ8n4+mDdHahPvlY/00TyA9xr0 DEpvCJAeLPlkE5Tcu9sLhhhBLfndlo/SpPnY0joF2OLARjr+i4HHdn5voA0Whxo6 nAXg8Vq0YxKLGoIRcab72d2vVpCB6bppxlKSeGnDvzqEGeh5AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSK1bTJI8wQHkm+qTxLp/uPYwfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjFhMTZjYWItNjBhYi0z ZDRjLThkMWMtM2Q3NWE3MGJlMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1qF+RRGKG/LdoJ2Kx7bkOonaY4Aoe0lfX2KQVaj8kpHoEe/mfNFQp2 slYvMThVnxTegGyak9fVS94kSNVfV/1Jm1VfomDPkTTtT2p2AM8wQfFMk+RSA/Tb 9eORzhYZB1vkYcUhGE02V5fiSayi1RGEham14x6ya2LvAkIBp1lnwAxBePlosgv2 831eAH9nIbuzDc9xIwybCAO8YC+ZxEsZSdaT/AYPH2Y2k5PoMGY9yGGKjmXO0juZ YryLGyvj+RcvUbIBZ14eptr2SZ8CgsrTzic/nYFnqVwb4vRYwL411BYy8zW8Bogk T1ViWy+iNxBs7bzF9CYu587KqDl8s74= -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:29 2025 by rpki-client