$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa File: 1bea22db-543c-392b-894a-1a3fd5009750.roa (raw, json) Hash identifier: PXIqsDfLvrmtrxdNatKQEvf5tDnYP8Hpqg0Vc3Xo+yw= Subject key identifier: E8:A5:9D:24:9A:5A:9F:C4:FD:7C:E7:80:D2:F2:12:E2:05:0A:F6:1A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49875C6C4B30051D856CA9E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:5c:6c:4b:30:05:1d:85:6c:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4d4acdee-b89c-4f05-bc59-58f89d700b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:18:23:4a:cc:06:5d:f6:af:af:d0:26:e4: 7a:f2:4f:fb:cd:fe:9f:cc:de:de:d0:e0:cb:9f:10: 81:d0:d6:d7:2c:7c:5c:db:f3:01:ac:2f:35:9a:65: 52:d7:d4:56:7d:44:28:7d:88:bc:d3:52:f1:56:41: 03:9e:78:24:a7:10:7e:c3:23:bc:a6:6c:b7:c3:cd: 5a:d3:a5:14:8f:25:97:75:f3:f6:b8:92:12:f7:fe: 40:c2:fe:5d:07:dc:52:20:6e:d2:de:0a:22:24:6c: b1:1d:40:36:3b:24:78:01:f2:e2:de:cc:4a:3e:00: 7b:3d:26:f6:a4:98:02:ea:76:56:6c:7b:d0:69:70: d6:06:a9:10:bf:90:94:cc:2a:61:e3:32:d5:41:dd: 1a:b4:ae:70:1c:10:21:d6:96:91:6f:09:74:e0:c0: b9:70:d5:b8:73:8c:5c:da:00:23:10:7a:43:df:7f: e1:d7:c3:ef:d2:3e:d5:79:80:09:85:53:cf:fd:05: 9d:11:9d:d6:41:4b:66:29:93:c9:45:ae:cd:4c:cd: a5:1f:0c:7c:2e:4a:04:98:50:d6:f5:ee:de:38:14: 71:9e:8a:10:0c:e0:25:41:54:b0:00:3a:d6:37:a0: a6:6b:51:a9:1f:f4:96:26:d3:c5:e4:55:18:f7:4d: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A5:9D:24:9A:5A:9F:C4:FD:7C:E7:80:D2:F2:12:E2:05:0A:F6:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:9f:e8:8c:1c:2a:45:7a:ab:19:97:2d:c1:47:bc:ec:a7:03: 1d:61:90:e9:9b:93:77:ce:55:4b:c3:3e:89:ce:c6:d2:22:0b: c4:36:18:13:cc:9e:0f:5b:ff:85:45:a3:d0:e2:87:54:ee:ca: da:1d:a4:7e:2e:b9:26:0d:66:d0:2e:4a:4d:22:a0:2b:ae:c1: 43:d4:aa:b3:b1:a2:5a:8e:75:85:23:40:56:99:ba:e9:01:c9: 45:23:aa:f6:35:ec:af:86:c7:2a:f9:e7:cf:82:78:3e:1e:4c: 25:f9:43:60:29:90:b5:6f:dd:e8:9f:2a:45:f4:75:3d:82:e5: 51:7d:e1:67:b4:ee:06:b4:82:df:65:f8:19:d9:cb:d6:c2:a6: 30:24:44:ed:7a:81:d8:11:d9:d5:1b:fe:e9:7b:29:18:5b:22: 43:c0:71:44:47:c7:a3:28:bc:45:76:49:f5:c0:05:da:ca:68: ff:f5:87:41:b6:6d:1b:e9:da:bc:54:87:f3:08:36:19:63:06: 0d:c2:6f:37:13:56:c2:9a:df:47:5f:3a:4b:82:cb:95:a0:fb: 3c:d9:a0:bf:af:25:de:80:f2:c3:61:60:45:48:7b:be:9b:0a: c3:c9:82:b3:7c:9b:db:64:1b:c6:45:90:8b:b7:cb:ce:88:00: 44:8d:52:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh1xsSzAFHYVsqeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGQ0YWNkZWUtYjg5Yy00ZjA1LWJjNTktNThmODlkNzAwYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVgYI0rMBl32r6/QJuR68k/7zf6fzN7e0ODL nxCB0NbXLHxc2/MBrC81mmVS19RWfUQofYi801LxVkEDnngkpxB+wyO8pmy3w81a 06UUjyWXdfP2uJIS9/5Awv5dB9xSIG7S3goiJGyxHUA2OyR4AfLi3sxKPgB7PSb2 pJgC6nZWbHvQaXDWBqkQv5CUzCph4zLVQd0atK5wHBAh1paRbwl04MC5cNW4c4xc 2gAjEHpD33/h18Pv0j7VeYAJhVPP/QWdEZ3WQUtmKZPJRa7NTM2lHwx8LkoEmFDW 9e7eOBRxnooQDOAlQVSwADrWN6Cma1GpH/SWJtPF5FUY903qlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOilnSSaWp/E/XzngNLyEuIFCvYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWJlYTIyZGItNTQzYy0z OTJiLTg5NGEtMWEzZmQ1MDA5NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWf6IwcKkV6qxmXLcFHvOynAx1hkOmbk3fOVUvDPonOxtIiC8Q2GBPM ng9b/4VFo9Dih1TuytodpH4uuSYNZtAuSk0ioCuuwUPUqrOxolqOdYUjQFaZuukB yUUjqvY17K+Gxyr558+CeD4eTCX5Q2ApkLVv3eifKkX0dT2C5VF94We07ga0gt9l +BnZy9bCpjAkRO16gdgR2dUb/ul7KRhbIkPAcURHx6MovEV2SfXABdrKaP/1h0G2 bRvp2rxUh/MINhljBg3CbzcTVsKa30dfOkuCy5Wg+zzZoL+vJd6A8sNhYEVIe76b CsPJgrN8m9tkG8ZFkIu3y86IAESNUt8= -----END CERTIFICATE-----Generated at Fri Sep 25 22:04:27 2026 by rpki-client