$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa File: 85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa (raw, json) Hash identifier: fBd8OIz9gtaPvgHRaqG9biAcFEksgWXT3ijttRVqN1k= Subject key identifier: 2A:BB:FD:D9:C5:84:88:79:9D:EE:5A:D9:F5:30:78:E4:89:28:3A:00 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202067EB32C676F56C54580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:06:7e:b3:2c:67:6f:56:c5:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f0e1c96c-2b0d-4ee1-89b0-1067bbaca889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d0:e2:83:9d:e2:ff:77:88:87:18:2a:0f:31: 53:fd:18:03:2d:68:6e:ef:d3:5d:4c:20:e0:20:5a: 1d:d7:5c:fe:d1:7f:dd:5c:1e:cf:da:a2:a7:22:82: fe:e1:a9:be:2e:6e:60:93:ac:d1:c9:2f:4f:ab:b2: 69:1f:7c:78:f9:25:55:09:90:e1:7b:93:d9:11:34: b7:95:6e:76:4e:c6:03:84:3d:f8:55:bc:38:cd:7b: 39:2c:57:84:10:b2:b0:50:48:56:95:f0:0d:39:40: 68:2c:23:8b:63:46:f8:c2:08:ef:af:2c:fa:65:f6: d7:03:18:8d:5f:45:d9:d6:08:68:51:51:60:4e:d7: 33:b5:25:a7:a0:8b:97:74:4c:cb:14:6c:37:97:2f: cc:e8:95:57:50:6e:57:32:f2:09:70:08:3e:b1:08: 68:3f:7d:4d:a4:38:92:3d:fc:a7:4e:4f:4b:4b:04: e5:28:ad:7c:d1:c6:67:44:4d:4f:ff:5b:b3:ec:e1: 99:b1:0a:24:6e:d5:3e:73:4b:ed:cb:8d:80:a0:b4: 3a:65:63:32:fc:f0:d2:40:9b:12:c6:48:22:5a:5e: 0a:de:5c:13:78:94:c1:86:35:8f:7d:02:64:77:a6: 4f:96:2a:e0:d8:3b:80:be:6e:68:63:98:bf:b0:fe: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BB:FD:D9:C5:84:88:79:9D:EE:5A:D9:F5:30:78:E4:89:28:3A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:64:97:8b:68:00:11:0f:18:fd:a7:05:1e:a4:3c:e8:ee:15: 48:d5:bf:21:c5:27:c3:60:c0:55:c1:ce:06:b7:74:b5:cc:91: 58:87:d1:6d:50:25:00:6a:83:98:6c:8e:09:33:ea:e7:c4:e0: 1f:f7:d6:27:88:5b:ad:74:80:ca:93:be:cb:9d:90:24:a6:a2: a8:20:02:04:65:49:90:38:13:f5:27:bb:2a:e6:9b:ce:ac:e1: 22:de:f9:ed:c9:bc:c3:39:98:fd:27:c2:1a:6d:65:b9:00:7a: 78:92:85:72:41:0c:71:dc:0f:02:34:ec:10:74:d2:a3:48:32: c2:ed:68:a5:18:ac:88:78:48:6b:39:97:ad:be:7c:86:25:06: d9:74:59:4e:21:07:60:58:9c:a8:0f:17:34:e7:ca:ed:a5:90: c3:0d:1f:90:d1:3d:af:21:20:27:f9:8f:89:91:19:85:c1:e6: 32:49:d5:2d:b2:93:4e:ab:4a:9d:07:7f:e1:d1:52:8f:b4:90: 0b:d4:ce:5b:3e:f1:2c:3a:b4:d2:45:c3:25:c3:f4:1e:be:32: 37:98:df:9c:25:82:37:a1:e9:c9:72:bc:15:4f:a0:89:9c:f3: c4:04:a8:2f:8a:4f:93:08:b1:01:ba:a4:55:85:a1:7d:83:56: 92:98:c0:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgZ+syxnb1bFRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjBlMWM5NmMtMmIwZC00ZWUxLTg5YjAtMTA2N2JiYWNhODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNDig53i/3eIhxgqDzFT/RgDLWhu79NdTCDg IFod11z+0X/dXB7P2qKnIoL+4am+Lm5gk6zRyS9Pq7JpH3x4+SVVCZDhe5PZETS3 lW52TsYDhD34Vbw4zXs5LFeEELKwUEhWlfANOUBoLCOLY0b4wgjvryz6ZfbXAxiN X0XZ1ghoUVFgTtcztSWnoIuXdEzLFGw3ly/M6JVXUG5XMvIJcAg+sQhoP31NpDiS PfynTk9LSwTlKK180cZnRE1P/1uz7OGZsQokbtU+c0vty42AoLQ6ZWMy/PDSQJsS xkgiWl4K3lwTeJTBhjWPfQJkd6ZPlirg2DuAvm5oY5i/sP5u0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq7/dnFhIh5ne5a2fUweOSJKDoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODViOTNkNjQtZWZiZC0z M2YxLTgyYzItOGZlYjU4NWQwYWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdkl4toABEPGP2nBR6kPOjuFUjVvyHFJ8NgwFXBzga3dLXMkViH0W1Q JQBqg5hsjgkz6ufE4B/31ieIW610gMqTvsudkCSmoqggAgRlSZA4E/Unuyrmm86s 4SLe+e3JvMM5mP0nwhptZbkAeniShXJBDHHcDwI07BB00qNIMsLtaKUYrIh4SGs5 l62+fIYlBtl0WU4hB2BYnKgPFzTnyu2lkMMNH5DRPa8hICf5j4mRGYXB5jJJ1S2y k06rSp0Hf+HRUo+0kAvUzls+8Sw6tNJFwyXD9B6+MjeY35wlgjeh6clyvBVPoImc 88QEqC+KT5MIsQG6pFWFoX2DVpKYwLw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:45:05 2025 by rpki-client