$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa File: 343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa (raw, json) Hash identifier: yVyUZ4Id5AiV+KVsGqhfohsDXb+t3sSEmlF3mL6Ag5Q= Subject key identifier: F9:31:AC:BD:A1:98:B0:D3:89:A9:39:A0:78:7D:DF:A6:0A:58:03:CA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201F408A3BDF4F4B2057700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f4:08:a3:bd:f4:f4:b2:05:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c8ea4023-a698-4cde-acb2-54307f0e10bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a9:90:9f:e0:b7:dc:8d:04:f2:22:1f:71:b2: 20:00:18:0d:f5:f8:9b:3e:00:38:76:3c:55:40:29: 9e:ef:3c:75:97:b9:16:85:67:b0:89:c1:30:17:35: b8:ee:a5:f7:2d:5c:47:ed:a8:86:35:8d:89:98:3e: 5d:36:cf:f1:b5:99:06:3d:86:96:5e:43:c6:e5:6c: 2a:27:a1:b9:52:70:e3:ad:8f:85:ce:67:c6:f2:7a: 9b:f6:2b:3c:93:50:51:e7:a1:7e:e8:1e:ef:22:3d: e4:e2:11:b3:14:28:21:1d:a5:27:4d:bc:d5:d0:13: bf:ac:88:9e:04:fc:3d:7e:76:ed:1b:78:0e:d7:c2: 62:db:dd:9e:fa:b6:59:ae:09:24:a3:ae:30:d1:2b: cc:0b:47:14:24:9f:f3:c0:5b:b1:ec:6e:91:b5:02: 47:b8:e5:9d:bb:c3:b8:05:26:e6:d8:1f:2d:7a:2d: f2:51:95:33:34:94:07:78:28:2d:8e:85:63:c8:9c: 31:82:37:e4:d3:0a:49:6d:0f:0b:ec:34:4a:57:7b: 10:96:2a:ed:15:d2:ff:b5:c5:92:0e:bb:03:8a:fe: 99:e8:52:8b:29:9b:ec:4b:27:92:60:de:db:09:1e: 6e:2b:b7:e9:94:43:aa:5d:c2:37:88:e8:49:6c:4f: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:AC:BD:A1:98:B0:D3:89:A9:39:A0:78:7D:DF:A6:0A:58:03:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:24:cc:ed:52:f7:12:ea:94:77:db:3d:92:13:6e:5a:67:fe: a8:08:02:8f:11:fb:ff:e7:38:c3:1a:21:e4:33:a6:97:b1:5c: ad:2f:1c:36:dc:df:96:75:96:64:6c:59:ac:d1:19:b2:d8:f8: 31:3c:60:74:fa:b7:8c:ca:a9:07:cc:38:40:52:4d:7c:61:1d: 21:7a:6d:84:28:89:dd:4c:b9:8e:8f:a2:10:1d:cc:d0:13:45: 05:a6:f9:54:4c:3b:45:d8:cb:5d:25:3b:60:d9:90:d0:1b:44: 0d:79:72:2d:1a:47:c2:9a:15:de:5b:7f:78:db:c6:7f:25:95: 3d:d1:d6:fd:bd:e2:f6:af:d5:af:d3:15:ff:8f:e4:4a:9c:e3: 8f:01:a1:1f:de:d4:36:fe:f2:4a:0a:e3:be:b8:97:ce:23:96: fa:3f:27:e4:57:9f:4a:24:06:8c:ec:48:a7:53:a7:75:6f:9b: 52:a9:25:f1:d1:50:ba:d3:77:47:1f:7c:cd:7b:78:fd:1e:5c: 13:95:25:0f:f3:02:4b:98:8c:bf:58:56:2b:b2:f3:26:09:9c: 31:ea:c6:d9:17:7a:1c:3a:99:3e:15:35:a0:35:05:88:19:43: 2e:cb:74:ec:fb:1b:02:3e:5d:6e:f7:05:7c:6f:a4:78:68:b3: 95:3f:3f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfQIo7309LIFdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzhlYTQwMjMtYTY5OC00Y2RlLWFjYjItNTQzMDdmMGUxMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKmQn+C33I0E8iIfcbIgABgN9fibPgA4djxV QCme7zx1l7kWhWewicEwFzW47qX3LVxH7aiGNY2JmD5dNs/xtZkGPYaWXkPG5Wwq J6G5UnDjrY+FzmfG8nqb9is8k1BR56F+6B7vIj3k4hGzFCghHaUnTbzV0BO/rIie BPw9fnbtG3gO18Ji292e+rZZrgkko64w0SvMC0cUJJ/zwFux7G6RtQJHuOWdu8O4 BSbm2B8tei3yUZUzNJQHeCgtjoVjyJwxgjfk0wpJbQ8L7DRKV3sQlirtFdL/tcWS DrsDiv6Z6FKLKZvsSyeSYN7bCR5uK7fplEOqXcI3iOhJbE8ItQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkxrL2hmLDTiak5oHh936YKWAPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzQzYjhhZWItOGY5Yi0z ZjU3LWE0NjItODZiYjdmODNiY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYkzO1S9xLqlHfbPZITblpn/qgIAo8R+//nOMMaIeQzppexXK0vHDbc 35Z1lmRsWazRGbLY+DE8YHT6t4zKqQfMOEBSTXxhHSF6bYQoid1MuY6PohAdzNAT RQWm+VRMO0XYy10lO2DZkNAbRA15ci0aR8KaFd5bf3jbxn8llT3R1v294vav1a/T Ff+P5Eqc448BoR/e1Db+8koK4764l84jlvo/J+RXn0okBozsSKdTp3Vvm1KpJfHR ULrTd0cffM17eP0eXBOVJQ/zAkuYjL9YViuy8yYJnDHqxtkXehw6mT4VNaA1BYgZ Qy7LdOz7GwI+XW73BXxvpHhos5U/P0g= -----END CERTIFICATE-----Generated at Wed Nov 5 10:21:20 2025 by rpki-client