$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4ba292da-9e44-3b3c-9633-1b1bd7cbcc56.roa File: 4ba292da-9e44-3b3c-9633-1b1bd7cbcc56.roa (raw, json) Hash identifier: Bi5/OrsyikZ6ceQ1FQew9XBmwscvK06IoB+Pnazidaw= Subject key identifier: 34:26:97:09:8C:3B:A5:63:46:03:49:A0:BE:B9:37:72:46:D4:09:70 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49743501201E5A9F594DED40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4ba292da-9e44-3b3c-9633-1b1bd7cbcc56.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:35:01:20:1e:5a:9f:59:4d:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=02741aad-9f68-4ba7-9484-70d043ecf527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:f4:70:cd:04:0a:c8:5e:e0:f2:84:86:6d: 45:2b:e9:86:14:e9:b2:cb:04:02:27:da:4e:88:12: 3b:2b:63:78:06:06:b9:43:08:be:e6:8f:50:33:ca: 70:10:f4:be:a1:36:5b:85:01:0a:3e:f8:65:ff:2d: cc:ca:27:61:9e:b6:15:1d:fd:fe:b0:ec:15:c7:d8: e1:55:59:85:8d:f0:13:42:ab:99:2a:8d:6c:d6:ef: 13:63:c7:b5:6d:71:25:01:c4:8c:19:08:ff:4c:bf: 11:90:91:26:9b:33:69:2e:fe:83:e2:14:00:82:bc: 9c:68:e5:cf:82:94:98:76:ca:eb:f3:ac:dc:0c:76: 9f:a0:27:59:72:2f:c6:30:b8:5c:cf:a7:8b:7a:a4: 39:41:81:f2:1a:65:f8:80:06:50:a4:61:d0:f4:4e: e3:cf:cf:3d:99:e9:93:e6:e6:7c:7b:e5:9a:b3:45: 89:c7:39:60:77:2a:ca:e8:1a:31:26:16:ae:07:32: 61:9a:c2:5d:92:78:9c:c7:e4:1e:90:05:d2:10:29: 73:da:61:4a:9f:cc:43:7d:18:0d:b3:90:c0:2e:9a: e1:65:ea:07:a2:f1:ec:69:65:4a:03:9a:f2:c8:a0: 14:f4:6d:14:3e:75:fd:fc:4e:39:3b:74:1c:d1:fa: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:26:97:09:8C:3B:A5:63:46:03:49:A0:BE:B9:37:72:46:D4:09:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4ba292da-9e44-3b3c-9633-1b1bd7cbcc56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:7a:09:d0:45:39:2d:06:bf:8a:fa:66:07:27:2a:29:e0:72: 4e:cd:e0:99:fc:d5:a7:c3:22:86:57:0c:42:c9:d0:2d:fa:7b: a7:a0:06:df:28:5b:03:19:c9:4f:71:dc:c1:1d:7c:a8:90:0c: bf:f8:d5:49:92:a3:dc:cc:77:b3:0f:3f:00:ff:74:6c:a4:a0: 1c:cd:d6:85:28:bc:fc:44:e9:d0:4b:58:61:41:49:6a:37:c8: eb:53:24:0b:aa:14:e5:56:05:59:f7:48:00:e6:a1:96:6f:0f: 42:4e:cf:e6:83:ac:12:0c:c7:b1:46:c9:87:ba:15:e8:98:1e: 48:cb:6d:d2:8c:14:ab:dc:d5:49:55:82:99:25:24:b0:4e:29: 3a:c0:9f:e1:a4:d2:01:82:0f:d7:ad:27:ae:e9:38:e7:e1:3c: 04:7a:11:ac:45:47:50:fd:7e:48:47:49:5d:a7:c4:26:e0:92: 2d:07:2d:f5:a3:8e:37:87:8f:f6:57:39:66:87:05:6d:8d:c3: 4e:ac:7b:6c:36:3a:b1:d6:c0:fb:76:3c:0a:cd:36:61:3c:6d: 32:5a:5f:aa:c8:a6:21:11:1a:95:69:35:28:31:e4:9b:3d:b1: a1:e8:aa:e1:9c:be:f5:6e:93:28:7f:df:f7:6d:8a:07:b3:2c: 96:cc:69:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDUBIB5an1lN7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDI3NDFhYWQtOWY2OC00YmE3LTk0ODQtNzBkMDQzZWNmNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDX0cM0ECshe4PKEhm1FK+mGFOmyywQCJ9pO iBI7K2N4Bga5Qwi+5o9QM8pwEPS+oTZbhQEKPvhl/y3MyidhnrYVHf3+sOwVx9jh VVmFjfATQquZKo1s1u8TY8e1bXElAcSMGQj/TL8RkJEmmzNpLv6D4hQAgrycaOXP gpSYdsrr86zcDHafoCdZci/GMLhcz6eLeqQ5QYHyGmX4gAZQpGHQ9E7jz889memT 5uZ8e+Was0WJxzlgdyrK6BoxJhauBzJhmsJdknicx+QekAXSEClz2mFKn8xDfRgN s5DALprhZeoHovHsaWVKA5ryyKAU9G0UPnX9/E45O3Qc0forZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQmlwmMO6VjRgNJoL65N3JG1AlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGJhMjkyZGEtOWU0NC0z YjNjLTk2MzMtMWIxYmQ3Y2JjYzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRatMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALh6CdBFOS0Gv4r6ZgcnKingck7N4Jn81afDIoZXDELJ0C36e6egBt8o WwMZyU9x3MEdfKiQDL/41UmSo9zMd7MPPwD/dGykoBzN1oUovPxE6dBLWGFBSWo3 yOtTJAuqFOVWBVn3SADmoZZvD0JOz+aDrBIMx7FGyYe6FeiYHkjLbdKMFKvc1UlV gpklJLBOKTrAn+Gk0gGCD9etJ67pOOfhPAR6EaxFR1D9fkhHSV2nxCbgki0HLfWj jjeHj/ZXOWaHBW2Nw06se2w2OrHWwPt2PArNNmE8bTJaX6rIpiERGpVpNSgx5Js9 saHoquGcvvVukyh/3/dtigezLJbMaQk= -----END CERTIFICATE-----Generated at Fri Sep 25 15:17:38 2026 by rpki-client