$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/004eb75c-22d1-3228-8fc4-8912bf30cd72.roa File: 004eb75c-22d1-3228-8fc4-8912bf30cd72.roa (raw, json) Hash identifier: l8lD5pTb8Z+GhBd3rkgqWg7VTz4sBBOyMyjCWez+Hp4= Subject key identifier: 1F:EB:2E:D5:20:F3:DE:91:76:FA:5B:AD:D1:25:91:C5:8B:0C:E8:26 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49741B87A9C6183EC75BF700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/004eb75c-22d1-3228-8fc4-8912bf30cd72.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:1b:87:a9:c6:18:3e:c7:5b:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ce7cfbdd-6ab5-4a8f-98a6-754dbaddb4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fe:d8:8e:54:d0:89:ca:83:33:59:7b:43:8e: 16:b9:5c:55:bc:e7:e6:30:ac:a8:72:b1:29:0d:50: 21:53:71:65:83:cd:53:4a:74:9f:bb:a1:13:da:68: 3b:e8:63:dc:c8:30:f3:ae:ce:08:93:93:49:26:10: 28:b9:d7:fd:f2:f5:f8:29:2c:47:ea:c3:ee:74:c0: ac:90:dd:15:1a:7e:b7:26:f3:c0:1c:d8:8b:02:b0: 33:a4:6f:a0:07:f8:a5:3e:e2:4c:d8:02:5a:99:91: 35:f6:8c:b6:23:bb:6a:88:f1:81:50:11:5d:e1:25: e4:88:5a:57:34:d9:21:5d:c2:8c:d8:3d:ad:d4:a9: 0b:e7:a8:cc:9a:c8:f2:d6:3d:64:aa:69:5e:26:47: 71:93:27:93:a6:7c:8f:05:34:75:9e:78:f5:9f:55: d3:67:a9:c2:c6:1c:0f:de:69:64:2f:d2:0a:a0:d7: 75:01:a3:1c:01:ab:9c:47:be:7d:8f:43:ea:ba:72: 80:83:98:73:2a:97:b7:32:8c:52:16:85:c9:56:fe: 47:c5:8f:c1:a7:19:6b:1a:94:8a:4f:e0:f8:c2:e1: 17:43:94:dd:a7:c1:5d:26:0e:6f:c8:77:68:de:45: 8f:35:a2:04:75:d4:2b:77:59:f7:e4:9e:15:52:e0: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EB:2E:D5:20:F3:DE:91:76:FA:5B:AD:D1:25:91:C5:8B:0C:E8:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/004eb75c-22d1-3228-8fc4-8912bf30cd72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9a:a2:bc:d8:7f:3f:cd:eb:94:1b:e3:80:c6:9d:e1:71:6c: 25:e8:b4:ae:40:28:d5:96:50:00:fc:fa:21:59:8b:d9:f3:69: f7:53:6b:b4:6a:4b:2b:d2:28:58:85:41:03:5f:46:87:af:04: 0b:fd:07:e5:54:e5:eb:e1:07:ee:ad:f6:27:ab:8b:5f:d7:2a: dd:07:4e:66:1f:d4:ca:c5:e9:ee:39:6a:a1:ed:ef:e4:d7:6f: 31:3d:b3:a7:75:0d:b5:43:6d:ef:b6:07:fd:1c:a8:18:7a:a9: 7f:a2:e6:b6:92:ed:8a:78:11:40:4b:12:85:1f:bb:95:e4:6c: 98:37:2c:73:4d:73:8c:1a:45:c9:38:24:bd:07:55:13:df:d0: e3:5e:48:df:c7:74:e8:1b:a7:c1:ec:17:57:03:e3:b9:03:3e: f7:6d:e5:69:bf:8c:40:c5:b6:ba:3d:3f:80:46:86:32:5b:ba: 2e:25:08:b2:47:25:ae:23:66:72:5e:11:8a:7f:b2:cf:6a:94: 3e:7f:23:ba:4d:53:2b:27:3f:6c:06:eb:2f:c4:ab:72:ee:5b: a2:b3:cc:50:05:ee:bb:b6:4d:64:57:b9:09:9c:03:af:49:ff: 4d:ae:ee:56:78:32:12:6f:d2:4f:b5:ad:ed:83:55:67:37:cd: 28:29:98:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBuHqcYYPsdb9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2U3Y2ZiZGQtNmFiNS00YThmLTk4YTYtNzU0ZGJhZGRiNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv7YjlTQicqDM1l7Q44WuVxVvOfmMKyocrEp DVAhU3Flg81TSnSfu6ET2mg76GPcyDDzrs4Ik5NJJhAoudf98vX4KSxH6sPudMCs kN0VGn63JvPAHNiLArAzpG+gB/ilPuJM2AJamZE19oy2I7tqiPGBUBFd4SXkiFpX NNkhXcKM2D2t1KkL56jMmsjy1j1kqmleJkdxkyeTpnyPBTR1nnj1n1XTZ6nCxhwP 3mlkL9IKoNd1AaMcAaucR759j0PqunKAg5hzKpe3MoxSFoXJVv5HxY/BpxlrGpSK T+D4wuEXQ5Tdp8FdJg5vyHdo3kWPNaIEddQrd1n35J4VUuDR+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/rLtUg896RdvpbrdElkcWLDOgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDA0ZWI3NWMtMjJkMS0z MjI4LThmYzQtODkxMmJmMzBjZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+aorzYfz/N65Qb44DGneFxbCXotK5AKNWWUAD8+iFZi9nzafdTa7Rq SyvSKFiFQQNfRoevBAv9B+VU5evhB+6t9ieri1/XKt0HTmYf1MrF6e45aqHt7+TX bzE9s6d1DbVDbe+2B/0cqBh6qX+i5raS7Yp4EUBLEoUfu5XkbJg3LHNNc4waRck4 JL0HVRPf0ONeSN/HdOgbp8HsF1cD47kDPvdt5Wm/jEDFtro9P4BGhjJbui4lCLJH Ja4jZnJeEYp/ss9qlD5/I7pNUysnP2wG6y/Eq3LuW6KzzFAF7ru2TWRXuQmcA69J /02u7lZ4MhJv0k+1re2DVWc3zSgpmIE= -----END CERTIFICATE-----Generated at Fri Sep 25 06:45:41 2026 by rpki-client