$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa File: 3de969ab-1b6a-3c75-99c4-6b44162fead1.roa (raw, json) Hash identifier: Z6hZfP0UjjLNyOwZhYcBAmb9CAF1fOIIYfL8dThSjRs= Subject key identifier: 88:E9:FE:94:B3:E6:4E:71:99:17:44:49:AB:9B:7B:75:A4:34:37:0A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F497442444E12907ACD7E0D80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:42:44:4e:12:90:7a:cd:7e:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0016e868-9f9e-48eb-9871-d05defa59358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:ba:40:f4:45:78:ba:cd:41:d1:0d:38:35: 8e:4b:f3:85:48:49:8c:92:1a:27:5e:c6:06:fe:f2: 72:f8:a6:6f:e3:98:34:3d:50:02:81:12:35:30:d0: 62:22:5e:60:fd:cd:e6:9f:01:4f:ea:0a:39:5d:c4: 34:53:a9:63:b7:3e:a2:9d:4f:0f:18:08:a9:61:44: 1e:a4:14:11:46:69:f1:14:f6:67:7a:fe:3f:fe:5f: ab:d7:e5:ca:cb:7f:6b:2b:82:55:92:ce:1a:4f:7f: 84:f8:90:4a:d4:d5:cf:3c:36:ad:be:ea:6c:e7:34: 95:b2:e2:41:62:ee:50:dd:c6:10:83:fd:79:d9:34: a7:fb:fd:86:e1:ba:bc:b0:85:9f:73:f9:a6:01:84: d9:a7:14:b2:55:c8:a4:b8:e7:0f:03:d3:63:af:00: 85:33:a8:fc:17:fe:7c:a8:a7:12:5d:2c:e8:72:67: ee:38:a3:36:38:ff:c5:8f:b4:e1:6e:7d:20:b5:f6: 39:6a:b5:d0:43:60:23:0a:43:d3:4f:61:1d:5e:7d: 19:66:02:1f:38:2e:51:5b:4c:72:2d:ac:ea:6b:d7: 84:e1:85:8f:7a:65:9f:5c:85:52:d5:ec:5a:f0:a7: 11:90:98:9c:4d:af:56:b3:f1:9b:f4:b0:0f:e1:78: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E9:FE:94:B3:E6:4E:71:99:17:44:49:AB:9B:7B:75:A4:34:37:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d3:6b:9f:c4:4c:de:36:4b:02:07:b9:b2:6b:f0:06:6f:e4: b1:f6:a1:be:c6:8e:53:27:09:81:e1:b1:7f:42:55:94:53:55: 81:c5:8d:f9:8c:94:12:d2:7f:21:bc:72:c4:bf:1f:50:47:96: c7:8d:1e:40:f9:3b:7c:2e:d0:24:37:08:73:95:0b:51:b2:49: c8:9f:93:66:37:ff:bc:81:22:fa:25:48:9d:4f:65:e7:38:68: 23:03:b0:7b:0a:50:e0:a5:39:ff:bd:f5:47:48:9b:a5:f4:57: dd:9f:02:b1:b5:65:2c:f5:49:1d:49:6a:7a:55:5a:79:3c:e3: fd:1e:ef:d9:00:13:79:3e:bb:95:40:55:3e:b8:72:5d:c9:8e: 05:a9:3b:52:a5:0e:33:b2:2d:dd:b4:20:00:b2:44:d6:36:30: 05:e3:3d:04:37:f7:f8:ba:46:94:49:c9:bf:29:16:e6:a7:44: f2:32:c7:9c:73:bf:d2:c2:2c:5f:73:78:55:d3:c6:62:70:63: 36:12:e4:98:69:af:db:f6:67:4a:49:71:52:0d:ec:a3:3b:f4: 86:d4:97:8a:23:95:ad:db:97:d0:9a:3f:75:a2:3f:90:89:59: a4:da:4c:15:7b:a6:5f:7e:65:7b:28:1c:90:b6:da:32:73:d9: fd:0f:28:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEJEThKQes1+DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDAxNmU4NjgtOWY5ZS00OGViLTk4NzEtZDA1ZGVmYTU5MzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLm6QPRFeLrNQdENODWOS/OFSEmMkhonXsYG /vJy+KZv45g0PVACgRI1MNBiIl5g/c3mnwFP6go5XcQ0U6ljtz6inU8PGAipYUQe pBQRRmnxFPZnev4//l+r1+XKy39rK4JVks4aT3+E+JBK1NXPPDatvups5zSVsuJB Yu5Q3cYQg/152TSn+/2G4bq8sIWfc/mmAYTZpxSyVcikuOcPA9NjrwCFM6j8F/58 qKcSXSzocmfuOKM2OP/Fj7Thbn0gtfY5arXQQ2AjCkPTT2EdXn0ZZgIfOC5RW0xy Lazqa9eE4YWPemWfXIVS1exa8KcRkJicTa9Ws/Gb9LAP4XiNaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjp/pSz5k5xmRdESaube3WkNDcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2RlOTY5YWItMWI2YS0z Yzc1LTk5YzQtNmI0NDE2MmZlYWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTTa5/ETN42SwIHubJr8AZv5LH2ob7GjlMnCYHhsX9CVZRTVYHFjfmM lBLSfyG8csS/H1BHlseNHkD5O3wu0CQ3CHOVC1GyScifk2Y3/7yBIvolSJ1PZec4 aCMDsHsKUOClOf+99UdIm6X0V92fArG1ZSz1SR1JanpVWnk84/0e79kAE3k+u5VA VT64cl3JjgWpO1KlDjOyLd20IACyRNY2MAXjPQQ39/i6RpRJyb8pFuanRPIyx5xz v9LCLF9zeFXTxmJwYzYS5Jhpr9v2Z0pJcVIN7KM79IbUl4ojla3bl9CaP3WiP5CJ WaTaTBV7pl9+ZXsoHJC22jJz2f0PKJY= -----END CERTIFICATE-----Generated at Fri Sep 25 21:14:32 2026 by rpki-client