$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/05076cad-cb47-3d06-82b6-3e54446be25f.roa File: 05076cad-cb47-3d06-82b6-3e54446be25f.roa (raw, json) Hash identifier: 7ck3XtnQRXjwne5fA5IYWZ3+WBHM6hLXuL7NkU8KeT0= Subject key identifier: 68:4E:29:70:20:68:F8:0E:97:58:2E:83:2B:2E:30:A2:04:F6:D7:8C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F497419BB6C1324B877591C00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/05076cad-cb47-3d06-82b6-3e54446be25f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:19:bb:6c:13:24:b8:77:59:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cf47d08d-1bd8-41d7-9f72-a2a223928c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:4e:a4:52:0d:3c:94:36:64:6a:b8:b8:9b: 74:c7:92:a8:75:61:69:00:38:94:b9:3e:6e:42:df: ee:b4:6b:b0:89:b5:14:fd:08:7b:8f:d9:a7:1c:71: d2:60:45:10:ad:e0:bc:0f:3a:00:77:64:39:f3:5c: 33:c1:5f:d7:de:42:31:f1:c1:3c:76:4d:26:78:78: 76:7b:ff:79:a9:e3:02:5d:74:fd:3e:a2:2e:d2:1c: 6c:2a:b2:90:9f:e5:5b:ca:45:71:f7:0c:fb:c6:ed: 0a:e2:ff:61:89:e4:1e:4d:f4:44:bc:85:c3:57:5d: 59:9c:82:7c:c6:8f:9a:33:72:53:70:f4:f4:a7:04: 62:72:05:c3:06:63:29:4e:c2:9e:75:3a:28:d0:30: 54:25:71:05:6b:af:8b:95:0e:a0:1e:a0:8f:0e:2e: d4:0a:db:80:e3:d8:7f:76:c0:13:b4:3a:db:ec:24: e6:a0:f2:5a:4b:07:c2:6e:3f:27:d3:aa:1c:4b:7c: f3:e9:8d:20:fb:d8:b9:34:d7:be:05:1f:ed:e3:ab: a1:8a:69:2c:57:23:61:8a:aa:04:ad:8e:97:9f:ca: c0:e5:f3:fb:5b:91:54:83:4f:7a:3d:6b:1a:7b:39: 84:31:a2:1c:d7:a5:5d:3c:c9:2f:db:61:97:6e:87: cf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4E:29:70:20:68:F8:0E:97:58:2E:83:2B:2E:30:A2:04:F6:D7:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/05076cad-cb47-3d06-82b6-3e54446be25f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:40:69:07:89:45:ce:62:82:ee:39:dc:59:c7:fd:5e:80:a1: 30:84:81:7b:59:9d:76:ae:61:1e:5d:58:67:e4:bc:9e:40:6c: 50:1b:b2:a1:93:54:8d:dd:62:04:c9:16:5c:82:53:0d:16:3c: ab:98:df:14:e7:9f:2f:42:95:ff:89:24:d3:32:e0:36:23:74: db:5e:ad:18:46:47:ca:c2:f6:c1:3e:0f:29:76:5b:bf:55:72: 23:e2:04:61:32:b7:43:e8:b3:ac:ff:cc:8a:d8:25:8f:7e:7c: 02:a6:26:19:80:e0:62:02:05:39:18:42:6e:ec:f1:3d:04:e9: 75:5b:e2:e6:c8:be:f6:ef:e4:5b:ad:47:7e:16:e4:47:42:a2: 14:d3:dc:dd:1e:d4:85:3d:a7:f5:ec:fd:48:c4:5f:e8:a5:c6: e1:b1:5f:69:0e:2b:64:cb:50:95:bf:12:ea:c6:44:65:8a:43: 9d:84:ea:56:64:42:4f:0e:91:1d:eb:09:ea:96:c7:3e:1e:84: 0e:b6:1f:1d:a8:5a:a4:51:92:7b:1b:71:71:84:f2:12:b2:7e: cc:f8:01:06:a6:09:ac:99:6f:d0:e4:52:7d:d7:a2:8a:0a:c9: 62:47:5f:54:52:04:f5:30:b5:dd:a4:27:3f:d6:08:75:e7:b5: e4:5d:c4:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBm7bBMkuHdZHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y0N2QwOGQtMWJkOC00MWQ3LTlmNzItYTJhMjIzOTI4YzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvxOpFINPJQ2ZGq4uJt0x5KodWFpADiUuT5u Qt/utGuwibUU/Qh7j9mnHHHSYEUQreC8DzoAd2Q581wzwV/X3kIx8cE8dk0meHh2 e/95qeMCXXT9PqIu0hxsKrKQn+VbykVx9wz7xu0K4v9hieQeTfREvIXDV11ZnIJ8 xo+aM3JTcPT0pwRicgXDBmMpTsKedToo0DBUJXEFa6+LlQ6gHqCPDi7UCtuA49h/ dsATtDrb7CTmoPJaSwfCbj8n06ocS3zz6Y0g+9i5NNe+BR/t46uhimksVyNhiqoE rY6Xn8rA5fP7W5FUg096PWsaezmEMaIc16VdPMkv22GXbofPRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhOKXAgaPgOl1gugysuMKIE9teMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDUwNzZjYWQtY2I0Ny0z ZDA2LTgyYjYtM2U1NDQ0NmJlMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9AaQeJRc5igu453FnH/V6AoTCEgXtZnXauYR5dWGfkvJ5AbFAbsqGT VI3dYgTJFlyCUw0WPKuY3xTnny9Clf+JJNMy4DYjdNterRhGR8rC9sE+Dyl2W79V ciPiBGEyt0Pos6z/zIrYJY9+fAKmJhmA4GICBTkYQm7s8T0E6XVb4ubIvvbv5Fut R34W5EdCohTT3N0e1IU9p/Xs/UjEX+ilxuGxX2kOK2TLUJW/EurGRGWKQ52E6lZk Qk8OkR3rCeqWxz4ehA62Hx2oWqRRknsbcXGE8hKyfsz4AQamCayZb9DkUn3XoooK yWJHX1RSBPUwtd2kJz/WCHXnteRdxHM= -----END CERTIFICATE-----Generated at Fri Sep 25 20:29:38 2026 by rpki-client