$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/965fb8e8-c54c-3ac7-834a-9395edf0a326.roa File: 965fb8e8-c54c-3ac7-834a-9395edf0a326.roa (raw, json) Hash identifier: CetW4rJGvJWFAk1FV35ug+AAmJQ/tqB9LfGE3gRBrUU= Subject key identifier: 74:11:3C:8C:6B:D0:40:39:64:96:F3:39:99:21:B1:F8:39:DB:44:A4 Certificate issuer: /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Certificate serial: 010D0C9F4328584F498938B7DB6B0A73246F7E00 Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/965fb8e8-c54c-3ac7-834a-9395edf0a326.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14397 IP address blocks: 65.49.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:38:b7:db:6b:0a:73:24:6f:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f2ea64f8-8761-4881-a8dc-853dc3cbf688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:3b:e9:4a:1a:ff:90:a7:29:28:9d:dd:b0: e3:7e:9d:9c:28:d1:65:5d:0e:0b:89:3e:96:8e:40: 67:be:ac:f2:49:0b:c0:e1:5a:c3:b6:c4:d7:74:c6: cd:73:54:80:48:e6:71:6f:85:e7:60:f6:c0:ee:8c: 10:d4:16:3d:e3:fc:4d:f7:a1:19:ab:93:79:95:72: 89:aa:be:9f:bf:3f:e0:1f:98:af:ce:af:03:aa:83: ec:a8:a1:b0:57:3e:99:a2:9c:54:14:7f:6f:a5:b7: 16:5d:b5:59:a7:06:c6:9f:09:0f:b8:19:52:b6:62: 8a:41:d9:0a:a2:43:61:d3:ab:15:21:30:dc:a4:b3: a7:72:7c:92:fa:7e:de:67:b4:c2:38:18:fe:a0:aa: c4:0a:b5:d5:5d:18:8b:05:a0:02:d7:90:63:69:1c: a3:b4:4f:cc:9e:a3:a5:9e:fd:cc:24:43:a0:1d:95: 38:f1:83:69:be:07:25:26:dc:4f:12:5a:09:ca:43: e6:ca:57:1c:29:b0:2d:61:fe:5d:ad:a4:ff:64:3f: 29:7c:0d:69:35:cc:a6:a0:14:37:74:7e:d2:7a:89: 1e:2e:ad:f1:cf:c7:78:01:5c:12:9e:d4:59:a3:03: 70:2e:f6:bf:d0:b0:f8:11:f0:da:d5:86:28:48:8a: f9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:11:3C:8C:6B:D0:40:39:64:96:F3:39:99:21:B1:F8:39:DB:44:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/965fb8e8-c54c-3ac7-834a-9395edf0a326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl X509v3 Authority Key Identifier: keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer sbgp-ipAddrBlock: critical IPv4: 65.49.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a0:2b:d5:cf:f4:9c:0c:1d:d7:24:7e:8d:da:c7:cf:0c:f6: 6d:03:53:08:39:68:87:c4:33:1c:c9:8f:81:6d:af:cc:0a:be: a8:ed:30:04:51:ff:b8:75:7a:79:66:a8:e4:00:0f:2b:77:5f: 02:d5:85:9f:23:9d:94:e5:f5:f6:dd:fc:90:cb:4b:6b:19:49: 52:db:c0:a3:77:a2:a0:7e:8a:9a:68:0e:b1:fd:3e:5b:0a:1e: ba:5d:41:ef:64:a8:d6:06:b3:c0:18:ea:b7:c3:52:ab:ab:18: 09:ac:33:e1:9b:f7:1b:03:67:55:04:a3:3c:91:c4:0b:19:fc: 0a:5b:42:f1:f3:f3:d9:0c:cd:92:7e:91:e3:c0:1a:12:69:d8: a9:28:c5:ff:f4:2d:e8:1d:59:b6:d3:98:53:c6:bb:b7:a9:2e: cd:57:93:93:3b:6d:fe:c0:cf:c7:ae:cc:15:88:bf:69:70:72: d8:db:3b:fa:42:66:9a:7f:e8:c3:21:51:24:47:e0:ca:f0:bf: 61:73:8e:14:7e:f0:ca:38:77:b4:18:05:86:21:b3:e1:b1:08: 56:c7:51:41:48:80:33:e9:af:6f:78:08:1d:aa:2c:60:45:62: 87:cb:f8:d6:93:40:1c:a3:39:2f:d2:d3:e8:30:11:6a:27:48: 58:34:ec:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiTi322sKcyRvfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNkMmRiYWUtM2YxYS00ZDllLTllMDEtZjdlZjI1MGY1 NWVmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjJlYTY0ZjgtODc2MS00ODgxLWE4ZGMtODUzZGMzY2JmNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloo76Uoa/5CnKSid3bDjfp2cKNFlXQ4LiT6W jkBnvqzySQvA4VrDtsTXdMbNc1SASOZxb4XnYPbA7owQ1BY94/xN96EZq5N5lXKJ qr6fvz/gH5ivzq8DqoPsqKGwVz6ZopxUFH9vpbcWXbVZpwbGnwkPuBlStmKKQdkK okNh06sVITDcpLOncnyS+n7eZ7TCOBj+oKrECrXVXRiLBaAC15BjaRyjtE/MnqOl nv3MJEOgHZU48YNpvgclJtxPEloJykPmylccKbAtYf5draT/ZD8pfA1pNcymoBQ3 dH7SeokeLq3xz8d4AVwSntRZowNwLva/0LD4EfDa1YYoSIr5XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQRPIxr0EA5ZJbzOZkhsfg520SkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83M2Qy ZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUwZjU1ZWYvOTY1ZmI4ZTgtYzU0Yy0z YWM3LTgzNGEtOTM5NWVkZjBhMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzNkMmRiYWUtM2YxYS00ZDllLTll MDEtZjdlZjI1MGY1NWVmLzczZDJkYmFlLTNmMWEtNGQ5ZS05ZTAxLWY3ZWYyNTBm NTVlZi5jcmwwHwYDVR0jBBgwFoAUBPEO3GDPAH5AMl53FZnXvgXyBg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2Vm MjUwZjU1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTGVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2gK9XP9JwMHdckfo3ax88M9m0DUwg5aIfEMxzJj4Ftr8wKvqjtMARR /7h1enlmqOQADyt3XwLVhZ8jnZTl9fbd/JDLS2sZSVLbwKN3oqB+ippoDrH9PlsK HrpdQe9kqNYGs8AY6rfDUqurGAmsM+Gb9xsDZ1UEozyRxAsZ/ApbQvHz89kMzZJ+ kePAGhJp2Kkoxf/0LegdWbbTmFPGu7epLs1Xk5M7bf7Az8euzBWIv2lwctjbO/pC Zpp/6MMhUSRH4Mrwv2FzjhR+8Mo4d7QYBYYhs+GxCFbHUUFIgDPpr294CB2qLGBF YofL+NaTQByjOS/S0+gwEWonSFg07Lw= -----END CERTIFICATE-----Generated at Sun Sep 27 11:22:58 2026 by rpki-client