$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa File: aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa (raw, json) Hash identifier: 4iUXLeVMuJjE748dPF6frk0pMID9fL8P5ADzt7zLYA8= Subject key identifier: A1:D2:39:E3:E0:68:E9:02:AA:61:29:70:6F:A9:23:C9:5C:B0:3E:CE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E7F6AE81163D3A3F9400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e7:f6:ae:81:16:3d:3a:3f:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=941e0145-6f08-4640-adf3-dc8488ad949c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ff:5b:ae:d9:f2:44:cd:90:b2:40:73:24:a1: 18:bd:95:36:fd:c8:63:ae:92:69:0a:4f:b0:42:cb: dd:36:c9:61:ba:f5:16:83:d0:f9:c7:f3:56:cc:6e: a9:e3:23:4f:eb:5c:9b:30:55:ee:07:ac:ac:a9:83: ec:b8:b0:ac:07:75:88:5c:7b:b8:85:d5:e5:11:d7: b0:76:12:f3:d4:99:c7:69:75:6e:ca:23:34:3c:11: a0:6d:47:bd:2c:7a:25:31:d9:4c:8f:9f:c6:bf:59: cf:7e:dd:96:c7:51:d9:c4:bf:d6:15:81:14:37:1f: ad:5f:c4:db:70:85:7d:23:75:ea:1c:82:df:b9:2f: 4a:d9:b6:b7:10:5c:c3:fc:db:9c:eb:20:4e:fd:11: 27:1d:1c:37:37:d0:79:71:71:09:04:99:d2:56:23: 63:21:97:ae:f3:7e:1b:27:c2:ef:04:c8:ec:ed:ed: c1:a4:7a:0d:80:9d:aa:ce:65:39:90:98:fb:c8:a2: 56:d8:c0:f5:ad:74:34:29:97:7d:39:b6:2a:25:84: e1:bd:9f:81:d6:e4:4c:f9:9d:75:92:79:ee:d8:4f: 47:37:b4:d9:07:17:30:60:b4:aa:05:98:55:0c:d1: 8d:93:ff:56:61:32:7d:fb:3d:4e:67:a4:fd:df:51: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D2:39:E3:E0:68:E9:02:AA:61:29:70:6F:A9:23:C9:5C:B0:3E:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:81:82:b1:6f:bb:95:92:c3:b2:ef:a0:00:64:e5:23:e3:f5: 99:02:65:b3:a5:46:ae:82:df:8b:1f:07:cf:b1:c1:66:b4:9b: 49:c9:1f:97:09:46:db:5e:1b:5b:25:75:08:9a:8d:c9:55:d4: f3:a9:17:47:db:6e:7c:6b:2c:7a:7a:87:23:ac:7f:12:f0:c1: 39:d1:b7:f1:c7:1d:dd:af:7d:ad:f1:88:6e:82:a6:f1:a5:dc: 5a:45:38:1a:9c:a0:7d:fe:01:b5:63:e3:7f:7b:9f:55:ab:04: a1:b0:20:c8:e3:b9:75:01:0e:73:99:b5:bf:82:a6:84:5f:b1: cd:fa:0c:6d:0a:e2:f2:23:39:f1:05:30:d5:8d:22:3c:30:e0: 20:b7:29:6e:8d:1b:a1:ff:98:4e:4a:56:f3:50:4f:bd:c4:69: ba:df:83:00:c8:94:bd:55:4c:5e:c5:b4:ad:09:df:cc:ef:8d: cb:51:89:7d:2a:6c:5d:71:0b:6e:9e:e0:71:7b:b0:0b:0e:97: 23:e9:5b:e4:c8:f6:d2:b2:d7:68:d1:f0:6d:06:c8:63:8b:f3: 59:3b:c1:9c:04:e1:c9:73:25:ac:21:46:a3:41:5a:fd:08:6d: ff:e8:0d:9d:ff:f1:19:2d:07:b8:aa:0b:f8:6a:a0:e5:82:c6: 02:0c:25:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAef2roEWPTo/lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTQxZTAxNDUtNmYwOC00NjQwLWFkZjMtZGM4NDg4YWQ5NDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv9brtnyRM2QskBzJKEYvZU2/chjrpJpCk+w QsvdNslhuvUWg9D5x/NWzG6p4yNP61ybMFXuB6ysqYPsuLCsB3WIXHu4hdXlEdew dhLz1JnHaXVuyiM0PBGgbUe9LHolMdlMj5/Gv1nPft2Wx1HZxL/WFYEUNx+tX8Tb cIV9I3XqHILfuS9K2ba3EFzD/Nuc6yBO/REnHRw3N9B5cXEJBJnSViNjIZeu834b J8LvBMjs7e3BpHoNgJ2qzmU5kJj7yKJW2MD1rXQ0KZd9ObYqJYThvZ+B1uRM+Z11 knnu2E9HN7TZBxcwYLSqBZhVDNGNk/9WYTJ9+z1OZ6T931ELmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHSOePgaOkCqmEpcG+pI8lcsD7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWFhODkwYzQtMDNmYS0z MjNiLWI0YjYtZjM5Y2Y5ODk4N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSBgrFvu5WSw7LvoABk5SPj9ZkCZbOlRq6C34sfB8+xwWa0m0nJH5cJ RtteG1sldQiajclV1POpF0fbbnxrLHp6hyOsfxLwwTnRt/HHHd2vfa3xiG6CpvGl 3FpFOBqcoH3+AbVj4397n1WrBKGwIMjjuXUBDnOZtb+CpoRfsc36DG0K4vIjOfEF MNWNIjww4CC3KW6NG6H/mE5KVvNQT73EabrfgwDIlL1VTF7FtK0J38zvjctRiX0q bF1xC26e4HF7sAsOlyPpW+TI9tKy12jR8G0GyGOL81k7wZwE4clzJawhRqNBWv0I bf/oDZ3/8RktB7iqC/hqoOWCxgIMJUI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:22 2025 by rpki-client