$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa File: 28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa (raw, json) Hash identifier: oLJ0CciOZqBky9h6Wvb3LCjMz/3JmWOhxy7fJ1roles= Subject key identifier: B0:FE:FD:4C:21:1A:9C:D3:9B:21:1E:C8:94:EB:91:1B:0D:E1:E3:D0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F497351B7C5BB8E2A42F28780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:51:b7:c5:bb:8e:2a:42:f2:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=81304183-bbe7-4b76-8188-4e1ae3238328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3a:63:3d:c9:90:3d:af:48:4d:48:e7:06:3d: 5d:af:39:07:c2:f3:45:f7:82:e4:86:cb:b5:78:44: a1:92:67:1a:58:f4:52:ae:63:fb:64:2f:bd:1a:f3: 5c:a3:7c:89:5c:66:55:c5:94:f4:89:ee:c0:89:52: bd:b6:11:18:97:66:96:2e:ae:e1:3a:72:6f:cc:cb: 7b:68:c5:5c:6e:1e:9f:f6:c1:67:fd:ea:a1:63:ba: dc:cd:9b:59:d5:76:86:4a:b5:1f:22:41:4e:1e:ba: 92:6c:29:b9:e3:96:00:ca:f2:3c:7e:d7:3d:77:79: 28:79:da:f9:ba:f9:c5:8a:c1:5d:e2:b7:af:63:5b: 5a:b3:67:ce:44:75:51:03:1d:6d:2e:28:26:b1:9a: 34:26:c1:05:c9:ac:e7:f0:57:35:9d:8a:b1:59:90: e6:40:21:3e:c9:14:a9:a3:53:c2:0b:e5:20:a6:86: b9:e8:ff:4f:f1:09:14:b0:75:7c:66:35:2d:22:0b: ad:0b:8b:83:b2:0d:11:10:8d:a8:7c:c8:fa:9a:61: dd:84:9e:62:ce:c0:4f:25:a0:d5:e4:cf:d8:8c:66: 8b:9b:8a:1c:c8:a2:0a:1a:84:c4:56:c2:e5:ab:f3: 56:93:d8:b9:dd:4f:c5:be:82:6f:ca:59:92:be:80: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FE:FD:4C:21:1A:9C:D3:9B:21:1E:C8:94:EB:91:1B:0D:E1:E3:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:97:ec:88:36:58:92:41:b1:d6:d1:6b:c2:70:7b:1e:9a:ba: 38:9f:61:82:36:bc:72:88:a7:43:16:7d:d2:1a:6b:b9:e6:f6: d6:16:0a:23:90:f4:34:bc:1f:9c:68:dd:fe:45:33:b5:91:c3: a4:f4:fe:e4:43:5f:1d:98:78:18:02:6e:60:d6:dd:a9:d6:9f: da:34:c2:ca:21:b0:af:f3:3d:d6:5c:47:2a:81:c7:57:1e:9e: d6:a7:99:bf:25:66:df:78:cd:61:a9:95:66:72:c7:13:29:e8: 7d:f4:41:8e:c4:f8:9a:c5:a4:8a:8b:ac:74:cf:78:c2:f8:25: c9:17:32:c1:f8:82:ee:fe:0c:04:88:db:02:5d:09:34:ba:42: bc:ee:0e:68:07:b7:66:13:0d:76:10:af:cd:dd:9b:45:0d:bc: 9f:16:b9:34:45:11:2c:3b:4c:b8:33:61:af:f1:59:93:6a:ed: ff:cf:e2:c8:d2:5f:b7:97:93:b2:c6:fd:e0:4e:00:e8:f5:c5: 36:99:45:bb:c9:ad:1f:4c:1e:50:9d:b6:91:56:97:2d:83:ba: 1c:cb:00:0e:87:08:bb:4e:9b:67:b5:44:43:dc:56:89:b8:b7: 58:c8:11:fa:fa:5b:ae:30:ff:51:b3:dd:c5:aa:d9:e5:5b:7d: 5c:0d:cf:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1G3xbuOKkLyh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODEzMDQxODMtYmJlNy00Yjc2LTgxODgtNGUxYWUzMjM4MzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTpjPcmQPa9ITUjnBj1drzkHwvNF94Lkhsu1 eEShkmcaWPRSrmP7ZC+9GvNco3yJXGZVxZT0ie7AiVK9thEYl2aWLq7hOnJvzMt7 aMVcbh6f9sFn/eqhY7rczZtZ1XaGSrUfIkFOHrqSbCm545YAyvI8ftc9d3koedr5 uvnFisFd4revY1tas2fORHVRAx1tLigmsZo0JsEFyazn8Fc1nYqxWZDmQCE+yRSp o1PCC+Ugpoa56P9P8QkUsHV8ZjUtIgutC4uDsg0REI2ofMj6mmHdhJ5izsBPJaDV 5M/YjGaLm4ocyKIKGoTEVsLlq/NWk9i53U/FvoJvylmSvoCu5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD+/UwhGpzTmyEeyJTrkRsN4ePQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjhjYjMyMTgtMmFiYi0z YjVmLTgxNzQtOWJiZjdkZGU3YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6X7Ig2WJJBsdbRa8Jwex6aujifYYI2vHKIp0MWfdIaa7nm9tYWCiOQ 9DS8H5xo3f5FM7WRw6T0/uRDXx2YeBgCbmDW3anWn9o0wsohsK/zPdZcRyqBx1ce ntanmb8lZt94zWGplWZyxxMp6H30QY7E+JrFpIqLrHTPeML4JckXMsH4gu7+DASI 2wJdCTS6QrzuDmgHt2YTDXYQr83dm0UNvJ8WuTRFESw7TLgzYa/xWZNq7f/P4sjS X7eXk7LG/eBOAOj1xTaZRbvJrR9MHlCdtpFWly2DuhzLAA6HCLtOm2e1REPcVom4 t1jIEfr6W64w/1Gz3cWq2eVbfVwNzzY= -----END CERTIFICATE-----Generated at Fri Sep 25 14:55:32 2026 by rpki-client