$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa File: 3cb5c865-56bc-36bb-9781-6328ac6934e4.roa (raw, json) Hash identifier: JgeJKD+U5X7L/exgJeiaF/V0TY/Vy2m2IiofXch8Vvg= Subject key identifier: 81:92:70:B5:EE:33:F4:43:21:A7:14:2A:70:2D:36:CE:0B:B9:EA:64 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F497370F3CD05315A866EFD00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:70:f3:cd:05:31:5a:86:6e:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dfa9a94d-4b91-44fd-b980-12eb9841ab9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:04:9b:2a:35:47:89:e4:fd:57:0a:e4:07:53: 73:01:9e:e8:f9:39:ad:7c:26:a0:19:49:44:07:24: ee:6b:c6:a9:a2:a9:43:74:2d:cd:ca:c4:cf:b8:23: 94:28:0b:9b:a4:8a:3b:02:58:04:24:2f:82:43:1e: 76:00:d7:bc:6f:4c:89:36:41:f8:19:2a:b9:5f:66: 2c:dc:2f:ca:26:c3:2b:43:f2:94:1c:5f:ee:bc:17: fa:a7:b3:1c:90:e8:82:65:2a:57:d3:22:42:e5:20: f5:dc:01:97:79:e3:7b:a7:d2:5d:aa:b4:ae:46:11: 29:c9:b2:0c:00:ad:bd:d2:6b:1c:18:6a:4b:5d:6d: 20:1f:bf:96:73:31:cf:ff:df:53:95:01:49:09:49: 81:df:0d:00:b3:e3:42:b1:30:5a:1b:7d:16:85:ab: ee:8f:41:0f:0d:1c:3e:0c:f2:8f:b0:42:50:d4:51: dd:13:bf:04:de:ed:70:92:b1:30:89:e2:0f:c0:7d: 37:ce:6b:d0:49:e3:bc:f2:7f:01:ff:14:71:d9:3c: fe:af:5c:c2:64:81:af:4d:dc:cc:63:47:20:90:25: 65:d7:6e:a9:67:b6:e1:21:ea:3f:34:af:d8:45:84: 83:a5:bb:e5:47:e5:c7:12:c7:cb:72:b3:c0:07:a4: 97:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:92:70:B5:EE:33:F4:43:21:A7:14:2A:70:2D:36:CE:0B:B9:EA:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e0:53:52:93:53:79:47:c0:76:54:08:9e:59:f9:82:ed:28: 71:ca:87:3b:ef:cd:c1:08:35:40:72:d3:96:09:82:0a:04:aa: f5:ef:cd:c4:8e:d1:df:3a:9a:05:24:15:67:21:e2:01:37:ff: ce:22:ff:b8:b2:e9:2e:ca:29:0f:f1:1f:b1:36:ac:c1:a1:83: f1:3e:62:03:73:e8:a7:69:37:76:2f:e5:d4:22:57:36:f0:34: 53:b3:a0:db:d7:33:11:5f:92:61:9e:ee:cb:10:0a:07:b1:d8: 00:a8:ac:07:ca:e9:76:15:52:02:97:fc:f0:c1:92:c9:96:7a: c6:72:ea:38:3c:15:ca:8f:d3:5c:2e:32:de:a3:76:bb:1c:63: 8f:99:5e:83:8e:cd:c3:8b:92:a4:08:1a:05:35:9b:1f:5c:e4: ee:9b:06:cc:95:c8:a1:b0:9e:12:a6:95:8a:fe:ce:ae:29:dd: 69:31:37:61:69:8d:e2:a7:72:98:6d:e6:58:1e:78:7c:2b:a2: 9d:1c:11:06:5b:d0:2d:50:64:3e:30:5e:35:ef:68:e8:ec:81: ec:8c:7c:36:b3:61:38:62:92:e3:32:6f:b5:c4:43:d4:51:4e: dc:bf:8b:40:e4:79:d5:bf:09:e9:e5:bb:d2:3b:0b:98:38:66: 1e:bb:ad:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3DzzQUxWoZu/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGZhOWE5NGQtNGI5MS00NGZkLWI5ODAtMTJlYjk4NDFhYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gSbKjVHieT9VwrkB1NzAZ7o+TmtfCagGUlE ByTua8apoqlDdC3NysTPuCOUKAubpIo7AlgEJC+CQx52ANe8b0yJNkH4GSq5X2Ys 3C/KJsMrQ/KUHF/uvBf6p7MckOiCZSpX0yJC5SD13AGXeeN7p9JdqrSuRhEpybIM AK290mscGGpLXW0gH7+WczHP/99TlQFJCUmB3w0As+NCsTBaG30Whavuj0EPDRw+ DPKPsEJQ1FHdE78E3u1wkrEwieIPwH03zmvQSeO88n8B/xRx2Tz+r1zCZIGvTdzM Y0cgkCVl126pZ7bhIeo/NK/YRYSDpbvlR+XHEsfLcrPAB6SX/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGScLXuM/RDIacUKnAtNs4LuepkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NiNWM4NjUtNTZiYy0z NmJiLTk3ODEtNjMyOGFjNjkzNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjgU1KTU3lHwHZUCJ5Z+YLtKHHKhzvvzcEINUBy05YJggoEqvXvzcSO 0d86mgUkFWch4gE3/84i/7iy6S7KKQ/xH7E2rMGhg/E+YgNz6KdpN3Yv5dQiVzbw NFOzoNvXMxFfkmGe7ssQCgex2ACorAfK6XYVUgKX/PDBksmWesZy6jg8FcqP01wu Mt6jdrscY4+ZXoOOzcOLkqQIGgU1mx9c5O6bBsyVyKGwnhKmlYr+zq4p3WkxN2Fp jeKncpht5lgeeHwrop0cEQZb0C1QZD4wXjXvaOjsgeyMfDazYThikuMyb7XEQ9RR Tty/i0DkedW/Cenlu9I7C5g4Zh67raE= -----END CERTIFICATE-----Generated at Fri Sep 25 08:13:50 2026 by rpki-client