$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa File: 17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa (raw, json) Hash identifier: 3p2xQl3xvxzIpAWUT8yXIcGD1HyJy3/eJfVyuC1afYs= Subject key identifier: C2:A2:17:FB:43:68:07:5E:24:DB:B1:2F:C2:81:9D:49:DE:10:8E:58 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498B8374A8A770D088D8D480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:83:74:a8:a7:70:d0:88:d8:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4782942d-38ff-4c33-9220-eb17e288b97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:35:fc:89:db:cb:f1:4a:59:24:e4:44:33:ff: ac:87:26:65:ee:09:1a:77:03:9a:8e:d3:41:af:55: ce:54:1a:35:db:f1:81:40:da:4d:e8:fa:77:13:c3: 14:69:03:0a:0d:65:7b:b2:0c:46:bd:b8:27:7c:ff: ef:9e:9f:91:52:86:13:f8:47:4a:fc:bc:9e:f2:c8: bb:a6:a0:35:c2:37:f7:ff:57:ae:27:e7:1c:2c:60: fd:2b:ca:75:25:51:d1:3d:1a:17:51:be:9f:9c:b7: b1:12:b3:c3:c8:ab:9e:06:bb:11:94:b1:03:79:99: 9d:cd:22:95:72:e4:d8:0f:8b:f0:27:7a:b7:e6:98: 1d:ec:6d:4f:af:62:ea:96:8a:a0:98:b7:6e:dc:47: 34:68:4c:f7:95:a7:6f:3a:02:79:32:8d:d9:cf:73: 65:f0:0f:86:94:6f:6b:41:23:45:64:38:6d:69:2d: 21:89:c7:74:5f:23:12:df:d0:6b:c8:e3:89:e9:03: c6:dd:d2:29:77:44:77:d1:72:d6:ad:34:a7:7f:d4: 12:6a:d4:6e:8a:99:98:26:15:3e:26:8e:32:dd:1d: 0e:27:13:47:b3:1c:d5:8a:fe:2a:d5:9d:30:8e:7f: bf:17:2e:9f:3f:ff:aa:e4:4b:3b:84:b5:7d:60:ca: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A2:17:FB:43:68:07:5E:24:DB:B1:2F:C2:81:9D:49:DE:10:8E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17acb9e5-4e30-348a-89b9-ea41ac1bc467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d0:c9:a7:5c:0f:ed:a6:23:4e:9f:6c:df:7b:d0:6d:da:9a: 8a:3a:36:bb:fc:af:90:8f:f0:e5:c2:77:ab:ba:22:dc:25:99: 22:77:ac:c7:8e:a2:19:1b:81:5a:fa:56:8e:03:ef:a7:01:e4: aa:56:25:8e:89:cf:38:2b:26:db:79:dc:5c:70:ef:c3:f0:dc: 4f:b6:e0:49:36:41:83:fa:b1:8d:b2:96:30:7e:8a:08:d0:a9: 65:9f:c0:e3:8b:9f:1a:7a:19:ea:0c:11:d7:71:d4:91:e8:75: 71:3b:31:49:7a:4d:00:1e:68:e5:f6:e3:a7:c2:a5:4d:31:51: 94:fa:66:f2:74:1f:99:61:89:47:27:08:26:eb:c9:bd:a1:a8: bb:58:6e:ee:92:47:df:f8:b9:c2:16:a1:ff:ce:f3:c6:5e:83: c9:ae:5a:bc:eb:5f:77:3b:c6:43:00:be:75:da:a3:76:c3:0a: b7:71:60:72:7b:bf:62:5b:24:d5:ac:cb:36:23:31:a1:f0:7b: 87:c5:60:8e:5a:7d:37:ed:b4:5c:43:53:3e:dc:e7:a5:0e:9e: 90:13:60:42:d9:d4:e6:0b:ae:88:94:83:98:32:64:a9:8f:c8: 99:25:be:22:a2:77:b1:2b:ff:f4:8c:b6:1a:68:ad:e2:6b:9d: 81:54:d3:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji4N0qKdw0IjY1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDc4Mjk0MmQtMzhmZi00YzMzLTkyMjAtZWIxN2UyODhiOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTX8idvL8UpZJOREM/+shyZl7gkadwOajtNB r1XOVBo12/GBQNpN6Pp3E8MUaQMKDWV7sgxGvbgnfP/vnp+RUoYT+EdK/Lye8si7 pqA1wjf3/1euJ+ccLGD9K8p1JVHRPRoXUb6fnLexErPDyKueBrsRlLEDeZmdzSKV cuTYD4vwJ3q35pgd7G1Pr2LqloqgmLdu3Ec0aEz3ladvOgJ5Mo3Zz3Nl8A+GlG9r QSNFZDhtaS0hicd0XyMS39BryOOJ6QPG3dIpd0R30XLWrTSnf9QSatRuipmYJhU+ Jo4y3R0OJxNHsxzViv4q1Z0wjn+/Fy6fP/+q5Es7hLV9YMrS5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKiF/tDaAdeJNuxL8KBnUneEI5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTdhY2I5ZTUtNGUzMC0z NDhhLTg5YjktZWE0MWFjMWJjNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnQyadcD+2mI06fbN970G3amoo6Nrv8r5CP8OXCd6u6ItwlmSJ3rMeO ohkbgVr6Vo4D76cB5KpWJY6JzzgrJtt53Fxw78Pw3E+24Ek2QYP6sY2yljB+igjQ qWWfwOOLnxp6GeoMEddx1JHodXE7MUl6TQAeaOX246fCpU0xUZT6ZvJ0H5lhiUcn CCbryb2hqLtYbu6SR9/4ucIWof/O88Zeg8muWrzrX3c7xkMAvnXao3bDCrdxYHJ7 v2JbJNWsyzYjMaHwe4fFYI5afTfttFxDUz7c56UOnpATYELZ1OYLroiUg5gyZKmP yJklviKid7Er//SMthporeJrnYFU0xA= -----END CERTIFICATE-----Generated at Fri Sep 25 06:42:50 2026 by rpki-client