$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f083e9c-7995-3f8b-8d6a-18f033cb6436.roa File: 3f083e9c-7995-3f8b-8d6a-18f033cb6436.roa (raw, json) Hash identifier: kqWcwTsbrHYbQhUZAXc5OMe4CO9apRrI2jM4ELdnEkg= Subject key identifier: 33:DD:38:5F:62:38:BD:00:E7:18:57:4E:C8:71:23:A0:63:E5:79:39 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E8ADE5B58AB124EB4340 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f083e9c-7995-3f8b-8d6a-18f033cb6436.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e8:ad:e5:b5:8a:b1:24:eb:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=84c3a94d-6a38-43db-94c3-84a3b2958444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f5:cb:eb:ac:3f:3b:1e:c6:1a:af:e5:5b:62: 7c:ca:0d:8b:7f:f0:7d:30:dc:3c:ee:67:a8:bf:41: b1:f6:bf:51:21:4a:7a:8c:d0:55:b6:1d:58:82:c1: 95:1f:c2:0c:f5:fd:14:0f:71:cc:1f:10:c8:3a:af: cc:d8:da:d9:81:6c:25:a9:6f:39:c1:9e:02:04:51: e7:bb:b9:1b:4a:7f:a9:5e:e2:2e:76:e1:a2:3f:d3: 8f:e8:e1:ad:25:a9:0e:98:87:95:c9:03:2e:2e:cb: 4d:59:42:8c:e4:43:24:60:a9:f0:a2:e1:ee:5f:17: 83:e8:54:07:c4:c4:94:ba:6d:0b:d5:00:6a:50:cd: 50:29:3e:43:14:0c:d6:5b:8e:d8:0a:64:f0:76:a5: de:4a:2b:cf:9b:08:70:b3:1e:47:66:fd:08:f0:ca: 4c:1f:be:ff:10:3a:d8:70:17:f9:78:7d:be:fc:a5: 5d:c9:aa:1f:cf:d5:d5:7c:67:97:5a:ed:67:4a:fd: 4b:55:12:cc:c9:12:df:81:5c:8e:41:01:5d:f9:cc: b9:5a:1e:75:54:9d:94:3d:7e:06:29:47:9b:30:52: f6:cb:ad:f0:38:f7:3d:c2:bf:97:0e:93:64:5e:a9: 36:b9:d8:f7:69:b7:19:b9:2a:bd:68:17:e8:26:ec: 9c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:38:5F:62:38:BD:00:E7:18:57:4E:C8:71:23:A0:63:E5:79:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f083e9c-7995-3f8b-8d6a-18f033cb6436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:29:34:8f:1f:4b:d6:29:04:2e:fc:77:21:0b:f5:a3:02:e1: 6f:2f:e2:9e:e3:f9:6d:aa:f7:15:67:46:39:6e:13:ed:ce:ce: 91:e7:1e:97:00:5a:2f:ef:38:45:6f:b1:3e:75:8b:d8:08:1f: 53:26:a4:85:d4:56:3a:0a:20:b2:2f:d4:7d:7b:30:d1:65:9f: 08:ac:3f:bb:9c:63:15:84:21:4a:7b:07:02:c8:42:6f:2d:5e: 2a:ae:32:10:7f:f2:80:b9:0e:39:c6:fd:76:47:18:68:44:18: cc:c0:db:8a:d0:c8:43:72:b6:4b:07:5f:9e:7c:0b:7e:9f:48: 7d:bf:26:d9:cd:63:90:90:db:82:5e:00:30:88:17:db:04:ee: 40:99:75:32:32:ee:9e:d9:95:ed:28:a0:b7:db:08:a9:2c:90: e5:ed:44:b7:21:55:09:db:85:fd:3a:81:18:ad:33:7e:32:05: 7e:7d:69:03:0b:d3:61:55:65:5b:51:ea:cf:3e:87:b3:81:b5: 71:5b:0f:3b:70:e3:d3:64:f8:46:31:63:74:ea:cb:b9:56:2d: 5a:ca:d2:76:8c:4b:c7:f5:63:c9:51:35:e1:e0:ac:ff:2a:61: b6:8f:df:86:86:02:8f:90:9c:46:d3:ff:3d:0e:78:7a:d5:19: 05:3d:2e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeit5bWKsSTrQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODRjM2E5NGQtNmEzOC00M2RiLTk0YzMtODRhM2IyOTU4NDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfXL66w/Ox7GGq/lW2J8yg2Lf/B9MNw87meo v0Gx9r9RIUp6jNBVth1YgsGVH8IM9f0UD3HMHxDIOq/M2NrZgWwlqW85wZ4CBFHn u7kbSn+pXuIuduGiP9OP6OGtJakOmIeVyQMuLstNWUKM5EMkYKnwouHuXxeD6FQH xMSUum0L1QBqUM1QKT5DFAzWW47YCmTwdqXeSivPmwhwsx5HZv0I8MpMH77/EDrY cBf5eH2+/KVdyaofz9XVfGeXWu1nSv1LVRLMyRLfgVyOQQFd+cy5Wh51VJ2UPX4G KUebMFL2y63wOPc9wr+XDpNkXqk2udj3abcZuSq9aBfoJuycJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPdOF9iOL0A5xhXTshxI6Bj5Xk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2YwODNlOWMtNzk5NS0z ZjhiLThkNmEtMThmMDMzY2I2NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYpNI8fS9YpBC78dyEL9aMC4W8v4p7j+W2q9xVnRjluE+3OzpHnHpcA Wi/vOEVvsT51i9gIH1MmpIXUVjoKILIv1H17MNFlnwisP7ucYxWEIUp7BwLIQm8t XiquMhB/8oC5DjnG/XZHGGhEGMzA24rQyENytksHX558C36fSH2/JtnNY5CQ24Je ADCIF9sE7kCZdTIy7p7Zle0ooLfbCKkskOXtRLchVQnbhf06gRitM34yBX59aQML 02FVZVtR6s8+h7OBtXFbDztw49Nk+EYxY3Tqy7lWLVrK0naMS8f1Y8lRNeHgrP8q YbaP34aGAo+QnEbT/z0OeHrVGQU9LoA= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:46 2025 by rpki-client