$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa File: 3cb5c865-56bc-36bb-9781-6328ac6934e4.roa (raw, json) Hash identifier: CSJY9ehZrEMpK5sLaLxzaKoHvFQDZ/IVcXVnCwC+2wM= Subject key identifier: 9A:36:D2:2F:C1:36:25:1A:7B:C5:49:B5:AA:90:0C:30:82:85:46:6B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E3C889F9C18C871092CE Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e3:c8:89:f9:c1:8c:87:10:92:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=a2236f55-6720-428b-8a03-51778314890c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bc:60:6c:49:6d:8d:5c:c4:b8:63:0a:a4:35: 84:df:9f:dc:49:1e:48:ad:84:26:8a:13:b2:b8:6e: 6a:f6:58:f9:25:1c:db:f6:da:8a:e8:b5:18:08:25: d1:02:d8:82:00:52:d2:1f:d3:42:c0:e3:6d:3f:0f: 73:1b:28:5d:ff:9a:60:28:16:3b:1d:81:17:77:87: 78:2a:85:13:69:93:ab:ee:60:7f:f5:46:d5:38:a6: 85:09:25:8a:45:5c:1b:dc:b9:ce:5b:4f:b8:15:73: 06:70:e4:62:2c:ff:f1:34:f2:e2:a5:61:7c:10:2f: 20:22:d2:85:0b:17:54:26:87:57:1e:7f:e9:aa:7c: 08:44:7b:e7:97:ce:c5:f3:20:27:bb:54:0c:bf:d7: 43:87:14:94:77:c9:ec:a2:4a:d7:75:74:7d:e4:f6: 63:a3:3b:d3:de:8d:8b:bf:36:c0:5c:bc:5d:62:88: e0:01:fa:3c:69:ee:d1:ed:bb:20:e7:2b:08:79:54: 76:e6:68:f8:fd:0b:f0:cc:90:b9:d7:c2:2b:2b:09: 76:ba:9b:56:4c:8d:9f:6b:71:c6:47:1d:94:31:14: 60:46:8a:ee:c6:ca:07:a3:dc:b9:9f:99:de:71:f4: 44:e4:2a:37:02:96:64:60:99:8f:89:85:cc:57:9e: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:36:D2:2F:C1:36:25:1A:7B:C5:49:B5:AA:90:0C:30:82:85:46:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8c:2f:72:17:81:40:2e:04:52:07:30:f0:48:d0:c1:9b:c7: 93:08:81:df:da:8e:3f:2b:0a:4e:2b:49:2f:1d:ec:2b:4b:cd: 0f:e8:9a:20:be:ec:fc:61:87:d0:e2:60:3c:0b:a7:b6:9b:e3: ea:62:9c:a5:03:35:21:4a:12:d1:e3:34:9a:e9:8f:63:0a:25: ef:c8:22:a6:ef:3e:0f:7b:61:d2:3a:c4:91:77:ff:fb:d0:98: 70:25:e8:bf:89:92:9b:86:ce:88:bb:2e:3e:e9:f2:94:95:dd: 33:bf:e9:ec:61:5a:8b:72:0d:07:ca:e4:5c:e3:dd:14:a2:71: 28:5b:89:21:fa:70:13:e9:e5:8c:d6:d8:a4:cd:c6:64:cc:fc: d4:ec:ce:40:22:03:30:c6:0e:18:ee:3e:44:83:dd:56:06:67: 06:5f:de:9b:22:9f:32:ad:65:18:0c:e7:2d:0b:d1:57:8f:8a: 37:f9:5b:66:ac:11:ee:b5:9c:a9:15:98:d0:be:a1:62:07:65: 9a:b2:43:03:eb:47:1a:b0:09:95:01:58:6c:56:11:f4:de:f7: dd:ac:42:56:d4:85:03:aa:86:47:c8:21:55:61:40:d6:6b:7f: 8d:76:7d:29:b4:13:37:1a:91:07:a4:24:97:11:32:7a:2d:a1: 62:e0:5d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAePIifnBjIcQks4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTIyMzZmNTUtNjcyMC00MjhiLThhMDMtNTE3NzgzMTQ4OTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7xgbEltjVzEuGMKpDWE35/cSR5IrYQmihOy uG5q9lj5JRzb9tqK6LUYCCXRAtiCAFLSH9NCwONtPw9zGyhd/5pgKBY7HYEXd4d4 KoUTaZOr7mB/9UbVOKaFCSWKRVwb3LnOW0+4FXMGcORiLP/xNPLipWF8EC8gItKF CxdUJodXHn/pqnwIRHvnl87F8yAnu1QMv9dDhxSUd8nsokrXdXR95PZjozvT3o2L vzbAXLxdYojgAfo8ae7R7bsg5ysIeVR25mj4/QvwzJC518IrKwl2uptWTI2fa3HG Rx2UMRRgRoruxsoHo9y5n5necfRE5Co3ApZkYJmPiYXMV57AQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJo20i/BNiUae8VJtaqQDDCChUZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NiNWM4NjUtNTZiYy0z NmJiLTk3ODEtNjMyOGFjNjkzNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6ML3IXgUAuBFIHMPBI0MGbx5MIgd/ajj8rCk4rSS8d7CtLzQ/omiC+ 7Pxhh9DiYDwLp7ab4+pinKUDNSFKEtHjNJrpj2MKJe/IIqbvPg97YdI6xJF3//vQ mHAl6L+JkpuGzoi7Lj7p8pSV3TO/6exhWotyDQfK5Fzj3RSicShbiSH6cBPp5YzW 2KTNxmTM/NTszkAiAzDGDhjuPkSD3VYGZwZf3psinzKtZRgM5y0L0VePijf5W2as Ee61nKkVmNC+oWIHZZqyQwPrRxqwCZUBWGxWEfTe992sQlbUhQOqhkfIIVVhQNZr f412fSm0EzcakQekJJcRMnotoWLgXTQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:09:46 2025 by rpki-client