$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa File: f814eaa4-d9f2-3117-939f-565eea6ef078.roa (raw, json) Hash identifier: hVgqyE6x5HJH2Jkr4aJ4FRoRzlaaHl/Zrpf+/NIobwE= Subject key identifier: 2D:77:E5:97:81:CF:59:E1:6A:9C:DA:B4:39:C4:FB:1C:2D:E8:52:07 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620224DF22014C5B0F65C500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:24:df:22:01:4c:5b:0f:65:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d4baefa6-0d84-413b-83b2-6285dfa6f13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:19:31:32:1f:40:2b:70:80:65:ec:9d:5c: 87:10:dc:e2:25:4c:32:d4:ca:d8:09:d7:35:77:4e: 3f:c2:a3:8c:e0:2c:13:f0:25:1b:66:2c:67:eb:f2: cf:53:9e:48:7d:6f:38:48:08:03:95:b4:c5:93:fb: d2:8c:66:12:3b:6a:53:e7:a9:ad:34:bc:9f:0b:93: 88:c7:a0:57:05:ca:18:88:ee:ae:48:f8:8e:bc:1d: d6:6d:32:c9:f0:eb:21:72:b8:dd:66:ba:bb:d0:08: 09:fd:85:82:fa:86:23:60:44:93:4e:e4:2c:0d:9e: 08:32:be:e3:75:c0:f0:2d:5b:22:c2:7a:3d:59:43: f8:9d:6d:3d:20:de:5b:38:19:80:79:88:b6:66:e8: 47:f4:5b:cd:26:86:5c:3f:df:a2:d4:65:88:1e:2f: 75:77:15:45:34:04:18:01:74:4b:94:81:3a:91:24: 85:bc:0c:f5:7e:ee:ea:c2:a8:cb:c7:88:02:3e:c9: 19:bc:cb:8d:64:61:8b:8a:19:08:d7:09:68:81:dd: 7c:c1:3d:45:ad:36:5a:b9:53:e5:17:36:d9:70:5e: 85:a8:26:93:7a:57:0e:a4:8a:42:df:1c:23:ed:d4: 5e:6b:7b:2e:76:f6:de:6b:0d:0c:34:4c:66:bd:b8: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:77:E5:97:81:CF:59:E1:6A:9C:DA:B4:39:C4:FB:1C:2D:E8:52:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5d:92:e6:90:19:6c:b5:0b:3f:59:a7:51:23:dd:f1:40:54: 16:9d:97:bc:98:bc:d0:60:1f:7e:3b:44:1e:93:de:b3:3f:e1: 9b:2f:7f:67:b8:e0:da:9d:b5:fc:ec:38:40:35:c5:88:3f:aa: b0:03:a6:d0:52:22:bd:f4:2b:8c:98:ba:2d:78:45:4d:f8:99: 10:29:95:38:c7:9a:fa:c7:57:ac:a5:36:49:13:b6:d0:cc:fa: 2c:fa:ba:08:a2:16:9c:79:78:cb:a5:40:ad:bb:58:ff:03:00: 0c:d2:63:de:f2:ce:4a:14:cd:51:4b:6e:8a:ce:7e:5f:4a:74: 0d:41:f1:d1:83:3a:06:ec:1e:bd:26:22:b6:8d:b4:30:81:00: 1c:ba:52:d9:f3:3a:7a:4a:1c:21:d6:86:c2:e7:21:34:19:81: 8f:8b:3c:b5:52:80:79:8b:9f:61:6b:5c:23:26:9b:f7:84:41: 4d:15:da:ea:a3:49:89:e4:25:db:1d:50:d3:81:b3:35:12:e3: a2:2a:ee:c1:e6:bd:b5:72:88:26:cc:0b:27:cf:0c:e8:68:d3: 32:3f:02:f7:63:2e:7a:45:4a:b3:46:6f:45:5b:6d:9f:8b:d0: 40:94:71:98:a2:0c:9f:59:81:1e:6e:a7:3c:37:38:61:c6:4e: e2:ab:97:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiTfIgFMWw9lxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDRiYWVmYTYtMGQ4NC00MTNiLTgzYjItNjI4NWRmYTZmMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfgZMTIfQCtwgGXsnVyHENziJUwy1MrYCdc1 d04/wqOM4CwT8CUbZixn6/LPU55IfW84SAgDlbTFk/vSjGYSO2pT56mtNLyfC5OI x6BXBcoYiO6uSPiOvB3WbTLJ8OshcrjdZrq70AgJ/YWC+oYjYESTTuQsDZ4IMr7j dcDwLVsiwno9WUP4nW09IN5bOBmAeYi2ZuhH9FvNJoZcP9+i1GWIHi91dxVFNAQY AXRLlIE6kSSFvAz1fu7qwqjLx4gCPskZvMuNZGGLihkI1wlogd18wT1FrTZauVPl FzbZcF6FqCaTelcOpIpC3xwj7dRea3sudvbeaw0MNExmvbiOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC135ZeBz1nhapzatDnE+xwt6FIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjgxNGVhYTQtZDlmMi0z MTE3LTkzOWYtNTY1ZWVhNmVmMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFdkuaQGWy1Cz9Zp1Ej3fFAVBadl7yYvNBgH347RB6T3rM/4Zsvf2e4 4NqdtfzsOEA1xYg/qrADptBSIr30K4yYui14RU34mRAplTjHmvrHV6ylNkkTttDM +iz6ugiiFpx5eMulQK27WP8DAAzSY97yzkoUzVFLborOfl9KdA1B8dGDOgbsHr0m IraNtDCBABy6UtnzOnpKHCHWhsLnITQZgY+LPLVSgHmLn2FrXCMmm/eEQU0V2uqj SYnkJdsdUNOBszUS46Iq7sHmvbVyiCbMCyfPDOho0zI/AvdjLnpFSrNGb0VbbZ+L 0ECUcZiiDJ9ZgR5upzw3OGHGTuKrl6c= -----END CERTIFICATE-----Generated at Wed Nov 5 16:35:44 2025 by rpki-client