$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cf56613-0e13-3a4a-a359-daa6619c39b2.roa File: 3cf56613-0e13-3a4a-a359-daa6619c39b2.roa (raw, json) Hash identifier: pnuaBSB0rci+aoe6wMJwDPzrMU75ai/MKvhnby5O40k= Subject key identifier: 62:82:83:C6:F4:A6:6D:D8:3B:18:83:F8:B0:89:DB:A5:E2:5B:FD:D0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584AFA34D38AE3FE6B504FC165C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cf56613-0e13-3a4a-a359-daa6619c39b2.roa Signing time: Mon 25 Aug 2025 20:39:17 +0000 ROA not before: Mon 25 Aug 2025 20:39:17 +0000 ROA not after: Sun 23 Nov 2025 21:39:17 +0000 asID: 198260 IP address blocks: 65.22.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:34:d3:8a:e3:fe:6b:50:4f:c1:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Aug 25 20:39:17 2025 GMT Not After : Nov 23 21:39:17 2025 GMT Subject: CN=cca113f5-ff6f-4ed8-8d68-ca4dc3447068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:65:d0:13:f4:2e:34:13:ba:6d:5d:ed:e6: 72:ce:30:47:b4:69:d9:d3:d8:36:ca:ef:0e:a1:9b: 4b:ce:2a:c9:d0:55:d1:15:9e:62:0a:81:ad:da:a8: 43:64:34:f7:50:18:32:43:8e:d9:ec:19:f6:ac:46: 1b:5b:63:b3:d8:d6:92:7d:93:cf:a8:25:be:33:87: 98:3d:ad:d2:25:ce:9e:3c:e6:ad:e7:e6:8e:af:0b: 93:df:1e:98:7a:87:6d:ce:d9:96:ff:9e:5e:58:36: 7d:bc:b0:ac:7f:29:30:1d:20:ac:7f:b3:60:a0:77: b4:e7:04:be:87:bc:d7:03:2c:a3:21:4c:1e:f2:1c: a2:c6:bf:39:61:dc:af:51:b9:46:ed:a0:ea:76:5b: d4:77:3b:e0:63:17:7f:49:ee:5d:5b:9f:57:04:b0: 61:9e:92:ba:47:f7:db:54:2a:ad:ea:ed:9d:30:20: 92:b2:18:8e:91:d5:45:76:a5:b1:23:ba:13:19:3f: 6a:c0:84:6a:99:5d:45:6e:93:10:3e:1f:32:ed:81: fe:8a:08:40:f2:64:3f:a4:ba:11:3d:32:10:5d:e4: 71:22:83:da:41:2c:38:81:dd:ab:b3:87:be:5b:3f: 4a:be:2d:3f:ac:5e:c5:1d:88:ae:50:cd:fb:68:26: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:83:C6:F4:A6:6D:D8:3B:18:83:F8:B0:89:DB:A5:E2:5B:FD:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cf56613-0e13-3a4a-a359-daa6619c39b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:88:80:36:65:1a:3e:f0:9f:88:15:ec:b0:77:98:3d:13:72: 5b:5b:99:2c:8f:22:0f:1d:9a:56:3d:d6:42:22:4f:83:05:0c: 4a:39:65:49:4d:7f:f2:96:a3:a2:48:82:33:b9:cd:e7:28:b4: b2:a1:26:2e:56:1e:77:49:d9:0f:16:f4:6b:51:f1:10:83:78: 86:3d:df:ea:05:72:30:07:f6:35:f7:06:92:85:8b:91:5e:9e: bf:a2:f6:62:14:77:d6:93:d9:86:57:1e:63:7b:c9:b8:17:60: ac:5c:86:35:44:03:69:0f:43:bd:75:dd:03:f5:7c:e7:2b:df: 54:5c:cc:46:99:f3:ca:88:be:c9:0b:89:98:0b:84:86:30:da: c8:8c:02:99:58:d0:3f:01:69:8d:a6:d6:21:74:88:53:58:89: b5:8d:a3:19:41:b5:08:3d:ab:e2:9a:26:2d:25:16:36:e1:97: dd:b3:f9:00:84:ab:90:cd:eb:f8:c2:6b:88:db:29:ea:b4:0b: b3:51:23:0a:bb:89:46:70:90:07:92:b3:5c:0f:1f:da:47:30: 73:13:c7:1d:d3:4a:a8:ed:b1:ff:ec:11:f9:6a:bb:d4:0d:2a: 59:fa:8d:da:8a:3f:5f:5e:d4:07:35:ea:7f:1b:fa:86:50:93: 11:98:b2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6NNOK4/5rUE/BZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDgyNTIwMzkxN1oXDTI1MTEyMzIxMzkxN1owLzEtMCsGA1UEAxMk Y2NhMTEzZjUtZmY2Zi00ZWQ4LThkNjgtY2E0ZGMzNDQ3MDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWZl0BP0LjQTum1d7eZyzjBHtGnZ09g2yu8O oZtLzirJ0FXRFZ5iCoGt2qhDZDT3UBgyQ47Z7Bn2rEYbW2Oz2NaSfZPPqCW+M4eY Pa3SJc6ePOat5+aOrwuT3x6YeodtztmW/55eWDZ9vLCsfykwHSCsf7NgoHe05wS+ h7zXAyyjIUwe8hyixr85YdyvUblG7aDqdlvUdzvgYxd/Se5dW59XBLBhnpK6R/fb VCqt6u2dMCCSshiOkdVFdqWxI7oTGT9qwIRqmV1FbpMQPh8y7YH+ighA8mQ/pLoR PTIQXeRxIoPaQSw4gd2rs4e+Wz9Kvi0/rF7FHYiuUM37aCa4PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKCg8b0pm3YOxiD+LCJ26XiW/3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NmNTY2MTMtMGUxMy0z YTRhLWEzNTktZGFhNjYxOWMzOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOIgDZlGj7wn4gV7LB3mD0TcltbmSyPIg8dmlY91kIiT4MFDEo5ZUlN f/KWo6JIgjO5zecotLKhJi5WHndJ2Q8W9GtR8RCDeIY93+oFcjAH9jX3BpKFi5Fe nr+i9mIUd9aT2YZXHmN7ybgXYKxchjVEA2kPQ7113QP1fOcr31RczEaZ88qIvskL iZgLhIYw2siMAplY0D8BaY2m1iF0iFNYibWNoxlBtQg9q+KaJi0lFjbhl92z+QCE q5DN6/jCa4jbKeq0C7NRIwq7iUZwkAeSs1wPH9pHMHMTxx3TSqjtsf/sEflqu9QN Kln6jdqKP19e1Ac16n8b+oZQkxGYstY= -----END CERTIFICATE-----Generated at Tue Aug 26 09:44:31 2025 by rpki-client