$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa File: 08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa (raw, json) Hash identifier: 8DJuMpF09x/FXlsYzKNcblx/Y5FMyWJCTupbPbZR8VU= Subject key identifier: AF:6F:47:16:6E:71:5E:57:3E:72:AA:4B:DB:A6:1F:B3:A9:DB:D2:91 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4989AA81A0C6D9926EF73260 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:aa:81:a0:c6:d9:92:6e:f7:32:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dd08ed2e-f058-4b13-8f8c-9f8c868a1bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:fb:27:ed:6f:75:e3:29:ab:5d:a8:b5:74: 83:83:22:df:49:e4:d8:e5:83:38:01:a2:fa:e4:83: 53:b9:cb:a9:3b:6a:41:dd:dc:1a:9a:c6:10:11:8a: b4:81:cb:a5:c4:e0:ac:cb:9b:6c:3d:5c:02:5c:a7: fe:26:47:c7:40:5b:1e:3a:14:8a:1d:c2:74:0a:fe: ad:3e:b0:e0:b6:a9:01:3e:2d:9f:86:91:1c:f6:fb: b8:1e:0f:cd:e9:35:d6:fc:df:b5:ed:f7:ce:15:ab: 9a:a6:11:8f:39:b9:0b:16:27:1b:b2:d8:57:51:72: 95:f2:96:42:38:97:68:1a:16:93:ae:62:0a:53:c3: 9a:40:f3:36:41:dd:6b:96:ab:c8:7b:86:f9:3a:5b: a1:1b:e9:3a:b5:12:57:05:30:7e:34:21:1d:7a:e8: e2:3e:43:0b:a9:b2:bb:d8:4c:50:72:d3:64:29:f9: f9:2d:d0:01:4f:89:b3:02:b0:51:c1:4f:15:78:17: 9d:07:4e:41:7e:bf:1f:46:26:06:ca:25:05:89:8b: cf:68:cb:d0:a5:56:83:08:5c:fe:80:b7:44:1c:7a: 2e:14:47:5b:37:36:86:bb:e8:9a:16:5e:ad:04:70: 73:4d:8d:c0:10:bc:cd:37:5e:25:9d:18:15:04:0d: b5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6F:47:16:6E:71:5E:57:3E:72:AA:4B:DB:A6:1F:B3:A9:DB:D2:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d2:fd:8d:c4:dd:35:15:6c:c9:ce:b5:57:4c:28:3b:14:7b: 68:bb:0a:37:71:3a:0a:ff:61:52:bc:31:02:0a:dd:05:90:34: 87:1c:6b:1c:a4:fb:30:db:ea:ca:4b:ad:c7:e8:6f:3f:e8:1b: a8:6f:1e:4f:39:63:cf:dd:17:99:5c:69:6d:18:a0:e3:29:49: ab:94:b5:4c:4e:31:b8:7b:c4:c0:16:38:a4:af:cd:df:97:e5: 86:9c:db:ef:57:93:19:59:cd:59:75:c7:e2:5d:a0:7e:21:62: 5e:c9:53:f7:34:6e:81:e3:c5:99:ea:76:85:6b:e3:ab:74:80: 82:d7:92:d4:e8:62:f2:38:4c:00:41:af:56:f3:68:08:f0:13: 4a:20:4f:5c:42:dd:9f:b6:a2:94:a9:67:16:ab:91:d8:2d:4e: 9f:59:d8:15:62:4c:33:a8:1e:87:5a:95:8d:33:6d:e2:e0:b5: 6c:5c:d4:bf:29:59:15:4d:a4:97:04:ec:b0:06:af:b7:04:30: 71:c1:e5:43:79:eb:70:03:94:53:c4:24:71:19:ae:0a:37:ec: 6e:74:5e:6f:f4:31:9f:dd:00:cb:4a:27:1f:b8:c9:fa:74:68: de:95:1b:1a:69:f3:85:24:00:fb:ab:bf:1e:35:df:47:fb:0a: 96:89:2a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiaqBoMbZkm73MmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQwOGVkMmUtZjA1OC00YjEzLThmOGMtOWY4Yzg2OGExYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhD7J+1vdeMpq12otXSDgyLfSeTY5YM4AaL6 5INTucupO2pB3dwamsYQEYq0gculxOCsy5tsPVwCXKf+JkfHQFseOhSKHcJ0Cv6t PrDgtqkBPi2fhpEc9vu4Hg/N6TXW/N+17ffOFauaphGPObkLFicbsthXUXKV8pZC OJdoGhaTrmIKU8OaQPM2Qd1rlqvIe4b5OluhG+k6tRJXBTB+NCEdeujiPkMLqbK7 2ExQctNkKfn5LdABT4mzArBRwU8VeBedB05Bfr8fRiYGyiUFiYvPaMvQpVaDCFz+ gLdEHHouFEdbNzaGu+iaFl6tBHBzTY3AELzNN14lnRgVBA21DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9vRxZucV5XPnKqS9umH7Op29KRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDhlMzZiYTMtODYyMC0z YjhlLWI2M2EtMzBmZTZhMzdmOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrS/Y3E3TUVbMnOtVdMKDsUe2i7CjdxOgr/YVK8MQIK3QWQNIccaxyk +zDb6spLrcfobz/oG6hvHk85Y8/dF5lcaW0YoOMpSauUtUxOMbh7xMAWOKSvzd+X 5Yac2+9XkxlZzVl1x+JdoH4hYl7JU/c0boHjxZnqdoVr46t0gILXktToYvI4TABB r1bzaAjwE0ogT1xC3Z+2opSpZxarkdgtTp9Z2BViTDOoHodalY0zbeLgtWxc1L8p WRVNpJcE7LAGr7cEMHHB5UN563ADlFPEJHEZrgo37G50Xm/0MZ/dAMtKJx+4yfp0 aN6VGxpp84UkAPurvx4130f7CpaJKj8= -----END CERTIFICATE-----Generated at Fri Sep 25 17:44:25 2026 by rpki-client