$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa File: e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa (raw, json) Hash identifier: X9Oo+DwdfhQmiEPwPSVK2sq6Tb3Ul8s3uscwAbG/6+I= Subject key identifier: 73:37:3B:50:4F:D6:DC:F6:44:AC:4F:48:A9:66:5E:C1:E3:D8:38:B7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201DF45EAB3A9B2E8FF0100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:df:45:ea:b3:a9:b2:e8:ff:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f5fdd5cd-1292-41a7-8e96-c38f3d02cae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ca:98:86:de:af:a5:8f:e9:89:ed:0c:85:bf: 91:c4:28:32:ed:9b:ca:5c:a8:f1:c5:5c:19:11:8d: ff:b5:af:9f:bf:f5:76:e8:a5:8c:6f:ce:72:f6:01: b2:a2:11:1d:48:ff:90:3b:25:98:b7:87:ea:31:a6: 09:fd:93:94:74:29:b8:79:52:02:cc:d9:85:bb:d4: f0:6d:15:45:6a:49:29:2f:3f:9e:7c:61:95:aa:37: 78:13:60:bf:14:a1:0f:ee:ae:80:3c:2a:a6:ff:49: f6:70:8e:ab:76:63:b6:c3:33:e7:3c:ee:b8:7e:87: f0:7d:69:73:5f:b7:5b:c8:66:7f:27:55:a0:59:7d: 63:21:12:9d:07:4a:37:a0:e7:8a:03:c1:0e:0b:eb: 03:eb:18:42:d9:d0:78:28:39:72:f9:cc:49:e1:84: 8d:1c:22:ec:43:01:b5:c2:e6:74:c9:38:44:b6:41: aa:ed:49:b6:df:e9:7a:c4:ab:2b:fe:b6:76:2a:24: 11:82:59:0a:aa:98:22:d4:06:89:45:b0:55:e0:06: dd:81:72:7a:b1:f2:d0:3a:0a:52:b8:76:54:ce:91: 95:8e:5d:8e:dc:45:c8:69:33:3d:be:ed:48:11:03: 35:39:ad:51:9e:0a:13:cf:a9:8d:33:93:c8:7f:d7: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:37:3B:50:4F:D6:DC:F6:44:AC:4F:48:A9:66:5E:C1:E3:D8:38:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:76:c3:a8:37:f1:e6:72:11:b7:1e:49:fa:ba:7e:15:64:62: e1:c7:c0:fe:48:12:9d:7c:2c:12:c5:b5:ce:93:ab:6c:be:86: c0:31:4a:b5:7c:51:6a:12:f2:17:be:83:33:92:99:3a:39:de: 6f:5d:74:40:46:11:14:94:7e:13:2d:1e:3f:48:62:e5:83:26: df:fb:0e:0a:f9:34:b0:db:22:db:22:16:9b:b7:06:91:9a:42: b8:fa:5a:e0:5a:a4:17:01:25:ee:fa:3d:34:8b:af:10:dc:2c: cb:7f:a0:fd:bb:18:16:79:58:f4:37:f9:6f:c5:fd:b7:9d:a8: bf:85:91:22:1c:9f:dc:a6:4d:80:a0:17:8e:24:33:4f:64:c8: 52:8c:ed:c9:f2:f1:55:79:f9:9b:6f:dc:ee:dd:6a:30:27:9d: b3:77:28:4e:5d:75:c6:d8:64:e9:72:13:87:fd:60:a6:97:fb: 58:37:a0:f0:e9:b1:d6:6b:8c:d4:b8:03:00:91:8d:72:0e:d1: 00:a0:a3:19:1c:21:c8:5f:b8:f6:85:20:b0:8a:b8:b4:f5:a2: 3a:a2:84:1d:e5:2e:76:45:75:83:50:19:11:a0:95:47:26:08: 60:47:d4:d2:fc:49:c4:a7:c4:9c:d1:83:df:9e:b1:6b:c9:26: 40:9e:5d:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAd9F6rOpsuj/AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjVmZGQ1Y2QtMTI5Mi00MWE3LThlOTYtYzM4ZjNkMDJjYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cqYht6vpY/pie0Mhb+RxCgy7ZvKXKjxxVwZ EY3/ta+fv/V26KWMb85y9gGyohEdSP+QOyWYt4fqMaYJ/ZOUdCm4eVICzNmFu9Tw bRVFakkpLz+efGGVqjd4E2C/FKEP7q6APCqm/0n2cI6rdmO2wzPnPO64fofwfWlz X7dbyGZ/J1WgWX1jIRKdB0o3oOeKA8EOC+sD6xhC2dB4KDly+cxJ4YSNHCLsQwG1 wuZ0yThEtkGq7Um23+l6xKsr/rZ2KiQRglkKqpgi1AaJRbBV4AbdgXJ6sfLQOgpS uHZUzpGVjl2O3EXIaTM9vu1IEQM1Oa1RngoTz6mNM5PIf9cEBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM3O1BP1tz2RKxPSKlmXsHj2Di3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTNiM2YwN2ItYTc0Mi0z NjAwLWI0YzItYjA5YmE1YzVjNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl2w6g38eZyEbceSfq6fhVkYuHHwP5IEp18LBLFtc6Tq2y+hsAxSrV8 UWoS8he+gzOSmTo53m9ddEBGERSUfhMtHj9IYuWDJt/7Dgr5NLDbItsiFpu3BpGa Qrj6WuBapBcBJe76PTSLrxDcLMt/oP27GBZ5WPQ3+W/F/bedqL+FkSIcn9ymTYCg F44kM09kyFKM7cny8VV5+Ztv3O7dajAnnbN3KE5ddcbYZOlyE4f9YKaX+1g3oPDp sdZrjNS4AwCRjXIO0QCgoxkcIchfuPaFILCKuLT1ojqihB3lLnZFdYNQGRGglUcm CGBH1NL8ScSnxJzRg9+esWvJJkCeXWQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:20:58 2025 by rpki-client