$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa File: 2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa (raw, json) Hash identifier: i0xXc8O8q2XEZsYsvVgwcJwiabFiVbUH0cWtm9q/FZc= Subject key identifier: C8:D1:20:00:21:22:DF:F7:BB:D7:3E:5F:C1:A6:FF:2C:4B:8F:3B:17 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49890F6C5AE5931BB1D41800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:0f:6c:5a:e5:93:1b:b1:d4:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=59c5c5fd-353f-49bb-bec6-8bfc291f527f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:fc:6a:06:55:c0:ea:0b:c1:fe:ba:7c:b1: e0:d8:0f:4b:bb:01:f7:74:6f:fa:ed:f5:c1:56:fa: 3a:c5:f7:6e:fa:6f:38:e9:02:65:a3:1d:41:3e:f8: db:bc:71:90:f7:d6:0a:2b:00:9b:0d:fe:a7:10:87: 10:91:70:21:92:03:2c:70:04:88:03:92:ec:a5:9d: 49:a9:4d:c4:ec:77:da:c1:bf:92:00:bf:33:8f:a5: ef:29:fd:66:b6:18:eb:db:ed:39:c7:56:c8:c5:66: 44:fc:33:b6:e2:c5:f3:c8:34:5f:f5:f9:f5:35:bf: b1:20:e7:a6:25:9e:b5:7f:a6:da:d7:93:95:d5:3e: 96:59:80:d0:78:2b:e8:5e:ce:1b:fb:a6:3c:dd:42: 46:24:13:59:1d:66:27:a5:03:9b:32:d1:93:4b:f5: 90:15:77:41:f0:31:71:93:4c:9a:13:00:7d:11:67: f1:dd:51:25:87:2f:51:54:7e:9e:af:45:44:da:72: 6c:6e:31:a5:d5:82:2e:87:6f:8a:39:03:2e:40:57: 29:f6:d5:c5:3e:03:b2:7e:70:cc:d9:b5:3a:0f:74: 5a:aa:2d:82:5f:71:32:f4:47:cb:9e:25:56:fb:0e: 45:8a:0b:a2:b2:af:f0:95:27:35:9e:74:72:0b:c1: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D1:20:00:21:22:DF:F7:BB:D7:3E:5F:C1:A6:FF:2C:4B:8F:3B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:da:e3:b1:36:e4:38:39:ba:0d:c8:db:65:ba:24:82:de:81: 8f:9d:84:50:fa:d0:f9:75:9e:ff:0c:d3:23:41:fc:c7:65:f1: 37:32:b8:7b:28:2c:f6:7e:70:75:78:cf:31:dc:4b:f0:54:98: 93:e7:64:d5:83:f3:11:05:c5:39:5b:fe:77:40:3f:39:85:34: 55:63:ab:9e:3d:15:3b:83:71:d5:7d:4e:8e:5c:fc:53:03:60: 72:19:85:6e:0f:00:5f:c8:d7:1d:ea:a5:86:62:e7:2c:92:48: 86:36:b3:f5:2d:93:14:bb:6a:13:b6:61:35:bc:c7:64:58:41: cb:ae:47:63:70:e4:29:50:52:d0:0e:ed:e0:2d:ea:ad:92:69: e0:56:2b:b9:b1:1f:8a:11:44:5f:d7:78:30:f4:93:be:92:9a: 52:47:61:41:9f:25:0a:17:5d:44:97:9f:7f:77:28:61:93:e0: b0:bb:86:e5:c7:bc:1a:fa:71:d4:c2:62:53:67:94:6d:80:c0: a8:9f:61:aa:08:0b:e7:ab:9f:9f:b6:36:89:cf:32:c7:8f:b9: d4:23:67:26:bd:d6:53:57:04:c7:0f:45:63:75:59:31:28:e6: 74:21:53:a2:b8:00:16:66:66:af:e1:bf:da:c6:08:0a:e7:d0: 81:c8:1d:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiQ9sWuWTG7HUGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTljNWM1ZmQtMzUzZi00OWJiLWJlYzYtOGJmYzI5MWY1MjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQD8agZVwOoLwf66fLHg2A9LuwH3dG/67fXB Vvo6xfdu+m846QJlox1BPvjbvHGQ99YKKwCbDf6nEIcQkXAhkgMscASIA5LspZ1J qU3E7Hfawb+SAL8zj6XvKf1mthjr2+05x1bIxWZE/DO24sXzyDRf9fn1Nb+xIOem JZ61f6ba15OV1T6WWYDQeCvoXs4b+6Y83UJGJBNZHWYnpQObMtGTS/WQFXdB8DFx k0yaEwB9EWfx3VElhy9RVH6er0VE2nJsbjGl1YIuh2+KOQMuQFcp9tXFPgOyfnDM 2bU6D3Raqi2CX3Ey9EfLniVW+w5Figuisq/wlSc1nnRyC8GTnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjRIAAhIt/3u9c+X8Gm/yxLjzsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmEwNDJjZjMtN2JiNi0z ZGQzLWFmYjYtNDU3N2ExZWQyYTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIna47E25Dg5ug3I22W6JILegY+dhFD60Pl1nv8M0yNB/Mdl8TcyuHso LPZ+cHV4zzHcS/BUmJPnZNWD8xEFxTlb/ndAPzmFNFVjq549FTuDcdV9To5c/FMD YHIZhW4PAF/I1x3qpYZi5yySSIY2s/UtkxS7ahO2YTW8x2RYQcuuR2Nw5ClQUtAO 7eAt6q2SaeBWK7mxH4oRRF/XeDD0k76SmlJHYUGfJQoXXUSXn393KGGT4LC7huXH vBr6cdTCYlNnlG2AwKifYaoIC+ern5+2NonPMsePudQjZya91lNXBMcPRWN1WTEo 5nQhU6K4ABZmZq/hv9rGCArn0IHIHUA= -----END CERTIFICATE-----Generated at Fri Sep 25 14:55:31 2026 by rpki-client