$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa File: c1625472-18de-3d1e-a0f1-7bbc7f729425.roa (raw, json) Hash identifier: gXZU3gE8jUbsRoXXMtqc9fxjOkh+dJNadSYkKPZ/foY= Subject key identifier: B1:41:68:55:43:CC:10:F7:2D:B9:AE:E9:37:AA:AB:68:D4:9B:82:6F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201DD5C65D92193FB580280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:dd:5c:65:d9:21:93:fb:58:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=3af3d814-c6fe-4ad9-bb10-bbdfe96a9ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:c8:ae:07:09:8d:51:3d:18:24:f1:4a:be: 98:23:46:c0:51:6d:45:1c:2c:ab:6e:77:bd:7b:7b: fb:01:d2:c8:48:ef:28:da:27:15:f6:88:52:14:f0: 73:38:ee:c0:2e:2b:e9:96:d7:02:d0:72:e2:12:9d: d5:ac:88:b1:c7:1f:d4:e4:fa:ba:48:87:bd:98:f5: 2f:d2:41:26:58:62:ee:cb:43:b5:3e:6b:1d:81:cc: ee:c4:22:d5:17:ac:58:f7:5e:37:e2:4e:66:94:09: 60:ac:b4:45:d4:8c:f0:a3:d4:44:26:4f:4b:11:23: 88:bf:c0:20:d7:a2:1e:26:f0:3c:84:d7:05:db:42: 7a:28:6d:43:2a:ab:46:a8:76:ba:f8:86:6a:e7:b9: 07:be:1a:30:d2:4f:d1:d6:2e:fc:76:fa:d2:4a:99: 2d:42:ef:22:37:f5:16:fa:ae:df:b0:df:10:78:7e: 58:b6:be:12:20:98:86:af:e3:af:3d:88:a1:d8:42: 11:d6:5b:e6:a6:d0:78:6f:8b:9a:c8:1f:81:3e:e2: 83:11:28:99:40:33:a7:2a:90:8c:7d:e7:e1:bc:7a: 07:10:93:00:fa:2f:f8:ae:b8:64:8b:2f:d9:68:b6: 95:94:06:0e:c1:89:93:55:c7:8c:36:49:61:30:52: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:41:68:55:43:CC:10:F7:2D:B9:AE:E9:37:AA:AB:68:D4:9B:82:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4b:81:f7:b0:df:24:4c:d2:6c:d9:6f:11:76:ad:9d:50:cf: fc:04:fa:26:56:3c:a6:59:93:d3:c1:cd:62:b1:b8:87:12:c8: 46:ae:21:70:9e:94:d3:fd:c1:b2:b1:f7:50:2b:06:a2:2e:ad: dd:b7:ad:ce:c0:41:8e:d8:75:d2:23:ba:16:43:a9:b1:b6:0f: 5a:fa:da:af:2f:5b:79:52:ea:dd:f6:be:a5:0a:10:1a:af:fb: 18:98:c7:c6:e2:fb:df:f4:bd:9e:44:c7:f9:e4:57:6c:67:56: 8c:bf:8a:e1:c3:f2:59:f7:2a:a9:c7:6f:9d:c2:7e:a7:e8:d0: 5c:1b:ca:30:73:15:0b:5e:60:e1:85:7a:f9:78:cd:a7:f2:1f: 4b:6a:98:c1:cc:5d:ac:82:2e:93:4c:e1:fa:1a:1d:89:eb:88: b6:eb:97:f4:4d:ec:49:74:3e:25:6d:fb:a4:f0:6e:4f:b7:0d: 31:46:7b:24:f6:89:b3:94:9d:65:cd:73:65:a7:9b:3f:2e:22: 5d:75:83:d3:10:67:29:da:8d:60:75:66:7a:6d:ac:70:0e:18: 61:87:0e:54:99:1a:0a:89:74:8c:00:95:3d:a7:10:1e:0a:89: 57:09:f7:51:67:da:60:c2:cb:7b:e5:5a:d0:ff:cf:9b:70:6e: 9e:0c:7a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAd1cZdkhk/tYAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk M2FmM2Q4MTQtYzZmZS00YWQ5LWJiMTAtYmJkZmU5NmE5Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcjIrgcJjVE9GCTxSr6YI0bAUW1FHCyrbne9 e3v7AdLISO8o2icV9ohSFPBzOO7ALivpltcC0HLiEp3VrIixxx/U5Pq6SIe9mPUv 0kEmWGLuy0O1PmsdgczuxCLVF6xY91434k5mlAlgrLRF1Izwo9REJk9LESOIv8Ag 16IeJvA8hNcF20J6KG1DKqtGqHa6+IZq57kHvhow0k/R1i78dvrSSpktQu8iN/UW +q7fsN8QeH5Ytr4SIJiGr+OvPYih2EIR1lvmptB4b4uayB+BPuKDESiZQDOnKpCM fefhvHoHEJMA+i/4rrhkiy/ZaLaVlAYOwYmTVceMNklhMFKAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFBaFVDzBD3Lbmu6Teqq2jUm4JvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzE2MjU0NzItMThkZS0z ZDFlLWEwZjEtN2JiYzdmNzI5NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxLgfew3yRM0mzZbxF2rZ1Qz/wE+iZWPKZZk9PBzWKxuIcSyEauIXCe lNP9wbKx91ArBqIurd23rc7AQY7YddIjuhZDqbG2D1r62q8vW3lS6t32vqUKEBqv +xiYx8bi+9/0vZ5Ex/nkV2xnVoy/iuHD8ln3KqnHb53Cfqfo0FwbyjBzFQteYOGF evl4zafyH0tqmMHMXayCLpNM4foaHYnriLbrl/RN7El0PiVt+6Twbk+3DTFGeyT2 ibOUnWXNc2Wnmz8uIl11g9MQZynajWB1ZnptrHAOGGGHDlSZGgqJdIwAlT2nEB4K iVcJ91Fn2mDCy3vlWtD/z5twbp4MekA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:38 2025 by rpki-client