$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa File: 3952f2df-c9da-34fd-b192-2e69549fdba1.roa (raw, json) Hash identifier: /O0P408l1Gh2PLnPPJMInan6JRZBlE4ZFOe7xjpKiHk= Subject key identifier: BF:66:65:BB:67:4E:B8:3B:4C:EC:FB:38:A0:27:1B:B4:1C:52:3F:C3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498ACDBEFA02CA058342BE40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:cd:be:fa:02:ca:05:83:42:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d92d91b5-f546-4dbf-8261-d3b74f52c39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:cc:d4:4c:d9:36:b2:75:e0:07:4a:e3:19: 22:50:00:80:3b:ea:b1:0a:b8:09:ef:ab:f2:af:8a: 50:22:96:17:59:68:9d:ec:b2:dc:46:41:e4:bf:64: 9d:9c:60:72:57:c9:fa:71:ad:1d:9c:cb:f6:bc:c8: 8a:df:23:1f:c3:33:3d:f2:3b:ba:90:02:f7:73:ec: e7:68:76:bf:bb:30:21:eb:48:63:32:b8:a2:43:d3: 97:a0:da:ec:44:8e:bb:3b:cf:41:27:6e:17:a2:47: f7:0b:44:83:0a:98:d6:ad:62:50:f9:9f:73:f8:81: bb:af:c0:44:9d:36:cb:93:92:0b:fc:4d:40:e8:79: bd:be:75:10:94:b0:30:c8:9a:74:0b:2b:d5:ed:f4: cb:d5:b9:92:22:70:8f:4e:1f:49:4e:ba:c7:4a:b2: 6d:ab:95:ab:27:98:53:14:53:e0:bf:96:e5:3f:78: 84:8d:03:91:34:43:a5:1c:7e:08:b0:27:27:4b:70: cd:fc:ed:33:61:51:c8:73:5e:13:9d:83:9b:34:50: 7c:f3:60:1c:56:d6:95:fc:43:da:ea:90:ea:ee:f4: 72:0f:21:75:8e:73:dc:17:ac:65:66:b8:0b:e5:2a: 3c:81:e8:9f:2c:63:e9:e8:01:ad:eb:46:1e:c8:34: c6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:66:65:BB:67:4E:B8:3B:4C:EC:FB:38:A0:27:1B:B4:1C:52:3F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:24:20:7f:12:20:30:be:0e:a9:96:a6:14:87:19:03:4c:14: 83:18:c7:14:2b:40:d3:f3:a6:77:5b:ec:e3:43:5d:e2:1f:3a: bf:2d:89:94:73:8d:74:ce:45:54:fb:71:7d:f9:ca:07:fe:d7: 2d:63:17:46:05:88:82:71:54:07:bd:c8:6a:27:0b:3a:07:97: 79:e6:47:0b:d2:4e:72:da:a0:fd:f6:56:0e:9b:f6:d2:ee:4e: 7a:bb:61:5c:3f:b4:7d:69:d2:41:e1:c4:8c:07:3b:3c:4b:54: ef:8f:33:12:77:98:7d:f3:68:f7:37:7c:55:d8:61:9e:37:df: c2:e0:3e:57:c2:3f:ea:9b:32:82:49:86:e5:e1:22:fe:b2:c2: dc:18:a1:fc:09:7c:5a:12:f2:21:98:fa:a3:3f:b1:fe:84:85: 07:d8:17:3f:9a:1b:cb:7c:f7:fd:27:1a:06:ab:49:8d:1d:97: af:8e:8a:da:ce:31:31:8a:cf:7e:13:b4:a0:48:6b:62:b1:4b: 6b:39:d4:26:fe:e7:3b:f8:d2:a3:97:54:11:71:18:ba:2d:ca: 54:2b:53:40:bb:4c:b3:45:9d:6d:af:81:81:04:5c:a3:d1:ad: 35:6b:14:57:41:d0:25:16:97:cb:28:38:4a:8c:87:22:07:8e: a1:1e:74:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jis2++gLKBYNCvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDkyZDkxYjUtZjU0Ni00ZGJmLTgyNjEtZDNiNzRmNTJjMzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvnM1EzZNrJ14AdK4xkiUACAO+qxCrgJ76vy r4pQIpYXWWid7LLcRkHkv2SdnGByV8n6ca0dnMv2vMiK3yMfwzM98ju6kAL3c+zn aHa/uzAh60hjMriiQ9OXoNrsRI67O89BJ24Xokf3C0SDCpjWrWJQ+Z9z+IG7r8BE nTbLk5IL/E1A6Hm9vnUQlLAwyJp0CyvV7fTL1bmSInCPTh9JTrrHSrJtq5WrJ5hT FFPgv5blP3iEjQORNEOlHH4IsCcnS3DN/O0zYVHIc14TnYObNFB882AcVtaV/EPa 6pDq7vRyDyF1jnPcF6xlZrgL5So8geifLGPp6AGt60YeyDTGgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9mZbtnTrg7TOz7OKAnG7QcUj/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzk1MmYyZGYtYzlkYS0z NGZkLWIxOTItMmU2OTU0OWZkYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAokIH8SIDC+DqmWphSHGQNMFIMYxxQrQNPzpndb7ONDXeIfOr8tiZRz jXTORVT7cX35ygf+1y1jF0YFiIJxVAe9yGonCzoHl3nmRwvSTnLaoP32Vg6b9tLu Tnq7YVw/tH1p0kHhxIwHOzxLVO+PMxJ3mH3zaPc3fFXYYZ4338LgPlfCP+qbMoJJ huXhIv6ywtwYofwJfFoS8iGY+qM/sf6EhQfYFz+aG8t89/0nGgarSY0dl6+OitrO MTGKz34TtKBIa2KxS2s51Cb+5zv40qOXVBFxGLotylQrU0C7TLNFnW2vgYEEXKPR rTVrFFdB0CUWl8soOEqMhyIHjqEedHA= -----END CERTIFICATE-----Generated at Fri Sep 25 19:51:28 2026 by rpki-client