$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa File: 1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa (raw, json) Hash identifier: b6G+Oov6nPdUZAFI76Wo8dSWKIUdG2CsTf0h8p0FFfw= Subject key identifier: 7F:F7:D3:53:57:4A:93:E2:93:43:F3:3D:24:C6:92:3C:3E:D1:9F:62 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972FF8B91A78731D5B96F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ff:8b:91:a7:87:31:d5:b9:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5705a17d-a74d-41f1-a3ee-4b7174ee82e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a1:22:86:76:64:8b:f7:c2:01:e9:19:25:7a: 6e:dd:d4:1a:3f:b3:93:6e:7f:d8:71:03:c0:f7:92: 04:88:35:63:41:b6:d1:af:be:36:00:f1:8e:63:12: 8e:d3:a9:a0:c4:2d:b5:ad:15:04:40:01:52:2c:59: 56:e6:01:39:90:73:c6:0f:d8:77:38:91:9f:61:0e: 5e:4b:06:62:d5:ac:e9:c5:55:0c:d9:07:4f:c4:fa: 2c:8e:3d:05:e0:6e:3a:34:2b:7e:3a:5d:7c:42:da: d6:7f:d2:b4:2e:b0:bf:8c:6a:5c:47:14:aa:fa:d2: 2e:7e:76:fc:84:99:3e:fa:11:7d:55:00:d4:45:04: 39:8a:1d:38:96:2d:62:9d:a4:28:94:14:ad:34:a5: b6:d8:43:3b:92:30:80:a9:4e:21:09:48:b6:36:42: c2:ca:51:83:dd:ee:ee:ed:f1:8d:25:8b:bb:2f:6d: 6b:4d:99:b5:52:0e:39:03:c2:6d:0e:f2:3a:ea:1b: 1e:e8:2d:74:72:01:23:cb:f8:65:31:21:63:92:1b: a5:15:4b:46:a7:79:d6:a9:48:54:ea:5d:9a:50:96: 0c:6a:6d:03:e5:b6:aa:82:c4:d3:17:0e:e2:92:4c: c0:d4:51:ff:9f:d9:d0:f5:0b:96:b3:de:7e:74:78: 0f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F7:D3:53:57:4A:93:E2:93:43:F3:3D:24:C6:92:3C:3E:D1:9F:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d7:32:fd:90:86:fd:1d:de:d9:96:2d:c7:82:6e:95:a9:df: 4d:80:1e:d6:03:ae:2e:6f:07:cc:de:70:d3:18:32:40:5d:d3: 6b:a2:76:5b:7c:dc:27:6a:fe:ae:da:ed:83:05:df:a0:e8:0f: 3c:e1:ca:6f:06:d9:1e:33:11:3f:c9:10:4f:6d:e5:44:1d:af: f5:74:6c:00:5b:50:50:81:df:61:9c:b8:05:28:ed:67:9c:b0: 53:7b:7a:d7:60:de:b3:cc:47:7d:03:7a:44:95:f4:6c:72:3e: c4:7c:a1:72:b1:e4:af:38:09:7a:16:e3:71:31:9f:12:74:09: 75:95:88:7c:8c:dc:fb:c4:d6:3b:f1:f5:00:96:5a:cc:49:5b: d1:cc:f5:22:f2:7e:36:74:4c:81:5e:da:56:af:b4:22:e9:e2: 30:53:b1:4f:d3:68:b5:cb:8f:ad:97:2b:b6:bb:84:3d:61:d7: 01:17:9e:8f:6e:25:c4:df:dc:db:80:fd:56:35:51:cc:97:74: 95:50:6e:e6:50:fc:a6:61:8f:4d:e6:d5:ee:52:ec:62:6a:69: 17:d2:39:26:99:61:f9:76:ad:52:25:8c:74:1e:8c:2e:9c:71: 7b:32:f6:e3:39:f8:eb:41:e8:2e:88:89:97:cc:12:b2:5b:c3: 94:8c:0e:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcv+LkaeHMdW5b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTcwNWExN2QtYTc0ZC00MWYxLWEzZWUtNGI3MTc0ZWU4MmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqEihnZki/fCAekZJXpu3dQaP7OTbn/YcQPA 95IEiDVjQbbRr742APGOYxKO06mgxC21rRUEQAFSLFlW5gE5kHPGD9h3OJGfYQ5e SwZi1azpxVUM2QdPxPosjj0F4G46NCt+Ol18QtrWf9K0LrC/jGpcRxSq+tIufnb8 hJk++hF9VQDURQQ5ih04li1inaQolBStNKW22EM7kjCAqU4hCUi2NkLCylGD3e7u 7fGNJYu7L21rTZm1Ug45A8JtDvI66hse6C10cgEjy/hlMSFjkhulFUtGp3nWqUhU 6l2aUJYMam0D5baqgsTTFw7ikkzA1FH/n9nQ9QuWs95+dHgPCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/301NXSpPik0PzPSTGkjw+0Z9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWNmMDYyMGQtZjJmMS0z YzVhLTg5N2YtN2FhMTEzZjQ4ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnXMv2Qhv0d3tmWLceCbpWp302AHtYDri5vB8zecNMYMkBd02uidlt8 3Cdq/q7a7YMF36DoDzzhym8G2R4zET/JEE9t5UQdr/V0bABbUFCB32GcuAUo7Wec sFN7etdg3rPMR30DekSV9GxyPsR8oXKx5K84CXoW43ExnxJ0CXWViHyM3PvE1jvx 9QCWWsxJW9HM9SLyfjZ0TIFe2lavtCLp4jBTsU/TaLXLj62XK7a7hD1h1wEXno9u JcTf3NuA/VY1UcyXdJVQbuZQ/KZhj03m1e5S7GJqaRfSOSaZYfl2rVIljHQejC6c cXsy9uM5+OtB6C6IiZfMErJbw5SMDiU= -----END CERTIFICATE-----Generated at Sat Sep 26 12:46:39 2026 by rpki-client