$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/471606c7-f219-30d8-9100-e54465ab3e96.roa File: 471606c7-f219-30d8-9100-e54465ab3e96.roa (raw, json) Hash identifier: hZpEf490ugjOFWNJUdujf3gfNwyxkt91e7TGlSGpsWI= Subject key identifier: B5:E6:BC:7A:73:EE:0F:DA:E4:DD:50:38:49:93:CD:AF:CE:67:01:B7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49738309D9FFA2572D9E96E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/471606c7-f219-30d8-9100-e54465ab3e96.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:83:09:d9:ff:a2:57:2d:9e:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f7e3c3b4-f153-4609-80e9-ff74193ce545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:20:e5:05:c2:86:47:81:67:47:55:3c:ec:e7: 97:d7:5c:8c:52:d1:02:c4:5c:98:60:1f:a1:ac:98: f7:b1:82:f2:bd:23:2b:a9:8c:34:41:cf:f9:18:6c: cf:d7:70:e6:e7:87:cb:34:27:10:39:b8:ab:6a:ef: d8:c7:22:40:e1:0e:e2:25:9c:e9:09:73:96:53:a7: c6:4e:bf:1c:56:64:b5:49:cd:e0:b0:80:6d:b5:8a: 30:64:97:00:7b:39:99:29:5b:32:34:65:de:c5:55: 60:48:6e:18:e6:14:31:e8:32:b7:26:91:25:c9:2d: 44:c9:76:78:cb:06:b6:41:23:a4:84:e1:1a:26:d0: af:77:a0:79:d4:6c:f7:4a:2b:1a:80:6f:9d:06:2d: c1:98:e9:4d:ea:4a:67:69:a0:7e:d9:92:a8:67:f4: 9d:dd:ff:12:8c:76:35:25:86:c3:c6:dd:6b:74:b7: ca:07:04:4d:6e:c2:4f:49:07:43:d7:8f:a9:ff:77: c8:38:3a:33:82:f8:a9:89:8a:ab:ec:9e:77:5c:81: fd:f8:a8:ee:ca:9e:8c:7f:f5:de:4f:7e:21:42:ba: 5e:3b:0b:88:42:0e:2f:2b:d6:b6:64:39:ab:cb:37: a2:09:7e:cd:11:21:41:65:ba:fe:10:9d:ab:cb:0f: ee:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:BC:7A:73:EE:0F:DA:E4:DD:50:38:49:93:CD:AF:CE:67:01:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/471606c7-f219-30d8-9100-e54465ab3e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:11:3b:86:54:fe:c6:fb:80:61:8e:62:52:21:d8:d0:0c:ad: 45:c1:4b:ac:f9:44:35:e2:3c:3b:04:d2:d5:68:0f:09:7a:ec: 16:17:75:22:27:20:aa:0c:04:a5:e0:08:3f:70:6c:83:97:b8: 5f:6a:6b:68:1d:66:e1:80:93:8f:88:fb:bb:cf:bf:71:09:86: 4f:3c:3d:10:65:1c:c3:ec:18:b3:0f:38:94:e1:0d:c9:65:84: 81:e6:cd:3d:72:3a:97:bc:45:39:ad:cb:67:f1:ba:9a:12:e3: 1c:55:a8:f9:54:bc:07:74:ac:e9:82:01:30:5e:fd:fc:47:ed: c5:8e:83:56:96:47:e1:dd:b1:ee:26:c0:49:05:d6:48:55:e5: f4:97:39:d4:9a:06:ca:ad:80:a3:00:86:39:2d:98:5b:21:6c: 87:f3:55:d0:6a:da:be:57:93:e6:7f:b7:76:98:67:16:20:bf: e7:01:c4:66:98:f9:ce:d6:09:3e:f6:ce:6d:f2:48:44:42:88: 9a:80:e3:28:7b:0f:b4:34:23:38:c7:76:da:66:2c:86:62:17: cb:13:a8:ae:1e:5e:29:35:2e:94:eb:e4:df:a5:3a:97:84:33: af:f5:50:44:05:54:5d:37:4a:91:e6:9e:a8:fd:e7:7e:b8:84: ed:fa:d1:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4MJ2f+iVy2eluAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjdlM2MzYjQtZjE1My00NjA5LTgwZTktZmY3NDE5M2NlNTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iDlBcKGR4FnR1U87OeX11yMUtECxFyYYB+h rJj3sYLyvSMrqYw0Qc/5GGzP13Dm54fLNCcQObirau/YxyJA4Q7iJZzpCXOWU6fG Tr8cVmS1Sc3gsIBttYowZJcAezmZKVsyNGXexVVgSG4Y5hQx6DK3JpElyS1EyXZ4 ywa2QSOkhOEaJtCvd6B51Gz3SisagG+dBi3BmOlN6kpnaaB+2ZKoZ/Sd3f8SjHY1 JYbDxt1rdLfKBwRNbsJPSQdD14+p/3fIODozgvipiYqr7J53XIH9+Kjuyp6Mf/Xe T34hQrpeOwuIQg4vK9a2ZDmryzeiCX7NESFBZbr+EJ2ryw/ujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXmvHpz7g/a5N1QOEmTza/OZwG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDcxNjA2YzctZjIxOS0z MGQ4LTkxMDAtZTU0NDY1YWIzZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgRO4ZU/sb7gGGOYlIh2NAMrUXBS6z5RDXiPDsE0tVoDwl67BYXdSIn IKoMBKXgCD9wbIOXuF9qa2gdZuGAk4+I+7vPv3EJhk88PRBlHMPsGLMPOJThDcll hIHmzT1yOpe8RTmty2fxupoS4xxVqPlUvAd0rOmCATBe/fxH7cWOg1aWR+Hdse4m wEkF1khV5fSXOdSaBsqtgKMAhjktmFshbIfzVdBq2r5Xk+Z/t3aYZxYgv+cBxGaY +c7WCT72zm3ySERCiJqA4yh7D7Q0IzjHdtpmLIZiF8sTqK4eXik1LpTr5N+lOpeE M6/1UEQFVF03SpHmnqj95364hO360f4= -----END CERTIFICATE-----Generated at Fri Sep 25 22:43:17 2026 by rpki-client