$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa File: 1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa (raw, json) Hash identifier: koPZX3B2sDvUP8srgkhVP+kOvf0o7xKzpOhScyyUQmc= Subject key identifier: 6F:D9:85:CA:17:A9:AF:BE:E9:9E:2F:59:12:F1:F4:20:AC:D8:A0:AB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974FBAA5D57F9FB4BCFCF00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:fb:aa:5d:57:f9:fb:4b:cf:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ac3c2e1-3180-4bd3-aef6-3ca86c8c404f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:26:19:27:10:7b:55:9c:ac:d6:61:c3:ca: 67:35:78:ac:94:09:84:8b:89:a9:83:67:60:79:f3: 2a:a1:c9:3d:05:7c:03:e2:4a:e5:49:e1:c0:32:67: 43:ee:bf:3f:0b:90:50:64:d7:3d:92:e4:d1:86:f1: 62:45:9e:40:df:86:a0:49:d4:4c:32:5c:75:15:6e: 27:2b:16:99:be:6c:df:c8:2a:e1:01:ff:91:10:f9: b9:4e:d7:54:9d:c3:a3:9d:c1:b8:1e:ad:3b:28:b5: 79:ca:7d:43:af:33:26:49:88:e7:93:95:a6:ad:35: d3:0e:8c:d2:60:4a:f5:ba:58:cd:8e:8e:ff:7b:01: 81:1a:39:8d:4b:db:94:a8:54:6c:39:5e:0e:f6:dd: 72:0f:f4:c1:99:80:57:66:32:6f:ec:89:5a:ab:62: 96:a8:a8:88:c4:c4:19:89:71:dc:d7:2a:14:96:ef: 09:58:86:f8:42:a4:b8:c1:5a:ce:98:f7:94:c5:65: 02:f8:7e:b2:bc:3f:7d:70:59:5c:4c:f2:de:d6:bf: da:0d:e8:a5:db:ca:79:a9:0b:80:45:c8:7a:3b:f4: 51:1c:40:b7:17:6e:65:06:43:ab:34:11:05:00:70: c9:1e:17:5b:40:ca:f6:d9:2d:1f:a1:27:52:b1:7b: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D9:85:CA:17:A9:AF:BE:E9:9E:2F:59:12:F1:F4:20:AC:D8:A0:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a7:a5:d9:62:67:3d:1f:d2:09:ab:e6:08:44:8a:ef:c9:56: 7c:46:bf:67:b2:f0:81:48:90:82:a4:00:69:d6:39:37:82:ef: 78:af:68:6d:72:c2:3a:df:b8:66:4e:97:96:7c:e1:c8:75:8f: 45:37:df:48:cc:6d:82:95:d7:e8:48:79:b7:35:a0:b6:a3:3e: 9a:45:9f:de:ec:38:b6:88:df:8c:b0:2c:bb:29:dc:51:ac:d9: 4e:b8:f6:a6:76:2e:ab:ef:f2:72:d6:f5:ca:b0:2b:b5:ba:5c: da:27:86:ea:4a:9c:50:d9:88:6d:02:5d:4f:4d:4d:19:22:3e: 18:5b:89:49:6d:6c:76:05:84:5d:48:19:97:a6:4f:78:a3:2f: bb:6c:7f:06:55:1e:16:79:41:c8:85:45:7a:2d:3e:82:d2:f1: 85:c2:bb:3e:b2:8f:ac:c2:00:8a:54:ce:3d:8c:38:55:6a:4a: 9a:48:16:65:d8:6c:d9:44:ed:e9:52:e6:b0:9c:a2:4e:a9:66: 13:46:ae:e2:6b:56:3d:f6:b0:98:2a:8e:8d:0e:a6:b2:8f:b8: 24:96:e5:8e:70:cb:66:01:f6:32:8f:2c:86:56:8b:51:59:ea: 37:c1:48:0d:1d:2e:d4:65:d2:ac:c6:ad:b1:c4:be:0d:5c:dc: 42:cc:cc:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPuqXVf5+0vPzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmFjM2MyZTEtMzE4MC00YmQzLWFlZjYtM2NhODZjOGM0MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx4mGScQe1WcrNZhw8pnNXislAmEi4mpg2dg efMqock9BXwD4krlSeHAMmdD7r8/C5BQZNc9kuTRhvFiRZ5A34agSdRMMlx1FW4n KxaZvmzfyCrhAf+REPm5TtdUncOjncG4Hq07KLV5yn1DrzMmSYjnk5WmrTXTDozS YEr1uljNjo7/ewGBGjmNS9uUqFRsOV4O9t1yD/TBmYBXZjJv7Ilaq2KWqKiIxMQZ iXHc1yoUlu8JWIb4QqS4wVrOmPeUxWUC+H6yvD99cFlcTPLe1r/aDeil28p5qQuA Rch6O/RRHEC3F25lBkOrNBEFAHDJHhdbQMr22S0foSdSsXuaYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/ZhcoXqa++6Z4vWRLx9CCs2KCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWFiMWU4OGEtMGYxNC0z ZWNiLTgwNmUtNjA4NGRlNmJhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6npdliZz0f0gmr5ghEiu/JVnxGv2ey8IFIkIKkAGnWOTeC73ivaG1y wjrfuGZOl5Z84ch1j0U330jMbYKV1+hIebc1oLajPppFn97sOLaI34ywLLsp3FGs 2U649qZ2Lqvv8nLW9cqwK7W6XNonhupKnFDZiG0CXU9NTRkiPhhbiUltbHYFhF1I GZemT3ijL7tsfwZVHhZ5QciFRXotPoLS8YXCuz6yj6zCAIpUzj2MOFVqSppIFmXY bNlE7elS5rCcok6pZhNGruJrVj32sJgqjo0OprKPuCSW5Y5wy2YB9jKPLIZWi1FZ 6jfBSA0dLtRl0qzGrbHEvg1c3ELMzG4= -----END CERTIFICATE-----Generated at Fri Sep 25 09:05:26 2026 by rpki-client