$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa File: 3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa (raw, json) Hash identifier: WZnvYjELqpzEm/qVmSQcUiS/Xlv1LFaOc54+A4yPU4M= Subject key identifier: 5F:14:BE:79:17:C7:40:6C:CB:C8:E1:89:BC:E2:67:D8:98:45:7D:05 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202189B450802B1A8ECADC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:18:9b:45:08:02:b1:a8:ec:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d5a82e95-b665-4d45-8b05-11b55d768a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:41:91:4b:e0:b7:4f:c3:71:73:e1:43:0d: 9b:eb:05:fd:67:28:29:e5:28:c1:1e:97:ea:c8:f0: bc:76:4d:23:96:a3:21:1d:0a:c2:b7:0d:d8:37:49: 60:2d:6e:46:e4:a3:99:a4:9f:c3:bb:9a:58:2c:37: 47:8f:89:0b:e8:66:6e:9c:d2:5c:65:b9:99:de:66: d8:18:94:a5:09:89:63:a0:75:07:12:3a:a1:c3:84: cf:6e:c9:f5:ea:56:d2:c3:e3:61:ba:3c:55:ae:b5: d9:fe:13:95:91:80:96:0c:83:b3:97:86:6a:bb:7a: 37:2b:9e:a9:4e:b8:7b:33:55:0d:b0:c8:f5:56:f2: 86:5f:ff:c1:f3:02:20:31:8f:e4:5e:48:9a:80:16: 66:21:91:9f:b8:82:33:1d:f5:05:17:7e:1b:f7:47: 16:9e:02:a8:83:e9:c8:7b:93:d7:5e:f4:69:df:79: 41:e6:b4:7c:0c:e5:42:36:3d:4f:97:b3:39:a9:f4: 02:47:3f:f0:56:63:65:d4:2b:9c:83:51:83:9b:db: c1:23:ca:dc:d4:96:33:8f:a4:dd:45:1a:56:7f:88: 48:80:30:dd:52:dc:16:40:d0:75:8f:fd:7e:e4:5b: 92:5a:2a:21:bf:20:d9:e3:af:09:57:c8:2d:31:2a: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:14:BE:79:17:C7:40:6C:CB:C8:E1:89:BC:E2:67:D8:98:45:7D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0b:6a:f6:17:66:4e:d0:d4:7e:20:76:30:f7:64:5a:e6:42: 71:c9:e1:52:a3:2e:05:4d:48:87:f8:4c:af:8a:2e:2c:88:e0: 55:9f:7a:8a:ea:85:ba:a1:b8:42:1d:8a:42:8f:7b:47:68:c9: ff:95:a9:28:b0:4a:b7:4b:0b:3d:c0:98:0d:5f:4e:7f:72:3a: 83:7b:e4:6f:33:1b:a1:a9:96:5d:4f:44:43:c6:3f:9a:c3:1e: d5:7f:03:8b:a3:43:7f:93:23:be:04:44:e4:81:5f:93:d3:d0: f8:be:1b:fa:11:54:fa:14:8f:ef:22:30:b5:d8:fb:8e:96:fd: 10:42:c9:f7:4a:fb:43:c7:de:51:e5:d4:d1:aa:be:79:bd:e7: 4f:f8:31:39:7f:91:58:93:e2:61:48:5d:af:be:35:fb:d6:ad: 23:6e:b4:19:50:72:b1:7d:da:f5:ba:8e:22:5e:68:4b:d8:65: 18:37:3e:dc:f2:4b:00:2d:33:a0:b2:74:5b:9b:79:bd:e5:ea: 23:d6:b9:f2:59:45:ed:ed:50:de:c8:a0:04:75:82:d9:9f:c2: cf:ef:61:62:8e:ca:50:9b:3a:61:28:c8:3a:d0:f3:88:3d:14: 6a:8d:3b:94:00:f2:20:a7:00:e1:6e:cf:c3:bf:9d:94:36:6c: 80:a2:39:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhibRQgCsajsrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDVhODJlOTUtYjY2NS00ZDQ1LThiMDUtMTFiNTVkNzY4YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+1BkUvgt0/DcXPhQw2b6wX9Zygp5SjBHpfq yPC8dk0jlqMhHQrCtw3YN0lgLW5G5KOZpJ/Du5pYLDdHj4kL6GZunNJcZbmZ3mbY GJSlCYljoHUHEjqhw4TPbsn16lbSw+NhujxVrrXZ/hOVkYCWDIOzl4Zqu3o3K56p Trh7M1UNsMj1VvKGX//B8wIgMY/kXkiagBZmIZGfuIIzHfUFF34b90cWngKog+nI e5PXXvRp33lB5rR8DOVCNj1Pl7M5qfQCRz/wVmNl1Cucg1GDm9vBI8rc1JYzj6Td RRpWf4hIgDDdUtwWQNB1j/1+5FuSWiohvyDZ468JV8gtMSpPhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8UvnkXx0Bsy8jhibziZ9iYRX0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2EyZGVmMTMtMmRjZS0z ZmEyLTg2MGEtZTYwMDFjYzhhMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRblMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJILavYXZk7Q1H4gdjD3ZFrmQnHJ4VKjLgVNSIf4TK+KLiyI4FWfeorq hbqhuEIdikKPe0doyf+VqSiwSrdLCz3AmA1fTn9yOoN75G8zG6Gpll1PREPGP5rD HtV/A4ujQ3+TI74EROSBX5PT0Pi+G/oRVPoUj+8iMLXY+46W/RBCyfdK+0PH3lHl 1NGqvnm950/4MTl/kViT4mFIXa++NfvWrSNutBlQcrF92vW6jiJeaEvYZRg3Ptzy SwAtM6CydFubeb3l6iPWufJZRe3tUN7IoAR1gtmfws/vYWKOylCbOmEoyDrQ84g9 FGqNO5QA8iCnAOFuz8O/nZQ2bICiOdw= -----END CERTIFICATE-----Generated at Tue Oct 21 09:15:58 2025 by rpki-client