$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501dbfab-1dd1-3666-816f-7a6298a6eed5.roa File: 501dbfab-1dd1-3666-816f-7a6298a6eed5.roa (raw, json) Hash identifier: a8wvHxfUNmdd5zXFHvtuweLwm2XcEzh0aXPh3a/sM1Q= Subject key identifier: 8F:C3:73:D3:EA:EE:DE:0C:E5:F4:17:9E:F6:43:4F:D6:EF:74:88:36 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972F687DC1518FA48AE9F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501dbfab-1dd1-3666-816f-7a6298a6eed5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:f6:87:dc:15:18:fa:48:ae:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb5a1b60-605f-4221-9ef1-eaa435f9cfe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:18:f4:f4:4a:9b:dd:59:37:8d:98:af:d1: 13:1b:8a:eb:53:d3:a8:b0:87:6c:d3:89:d8:6c:cf: 42:6e:1d:46:07:e4:4c:08:1b:07:5e:4e:86:98:7b: 83:07:be:09:2f:5d:77:7a:41:3d:6e:0d:71:a2:1d: 79:50:10:ef:e2:8d:a3:3d:77:bc:6c:6c:fb:7b:60: 3c:7a:f5:98:13:34:84:b9:55:58:e8:61:15:c1:3a: 7c:6b:03:cd:95:7a:0b:46:f0:5d:f3:4b:42:89:3d: cc:38:95:90:9d:f4:16:fb:47:d0:02:64:f4:f5:22: 8f:30:49:a9:b4:16:0d:e5:1e:a3:3a:5f:81:e8:5b: 18:ab:80:47:96:32:20:cc:7f:2d:c8:68:f1:ad:77: c2:6f:6e:ba:87:a2:d1:89:ea:c2:0f:b8:39:df:07: 18:c5:e9:6e:05:de:72:77:01:c0:c9:c6:34:2d:41: a5:44:fb:71:6e:e5:55:1a:90:0c:d1:6d:72:bf:c4: 4e:74:ae:12:84:17:2a:1d:ec:92:0b:f1:70:8b:9a: 6d:f9:53:36:5d:60:9c:2b:38:8f:bf:f2:1a:18:6e: ea:2c:b2:24:4d:a1:80:f7:e3:ca:4f:77:12:6c:99: e5:c6:ff:a0:e5:1e:53:41:02:22:6b:28:6e:23:10: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C3:73:D3:EA:EE:DE:0C:E5:F4:17:9E:F6:43:4F:D6:EF:74:88:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501dbfab-1dd1-3666-816f-7a6298a6eed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:f4:25:f8:52:40:34:a9:74:e1:a3:6e:01:cf:6a:fb:c7:aa: 6b:0a:54:fb:82:9c:e3:e8:78:66:f4:e9:03:4d:40:1b:44:84: 53:41:23:e2:83:3e:f3:ee:f0:28:9d:5b:79:80:8b:9c:32:f3: 8d:01:93:52:1c:cf:28:1f:07:ae:18:05:66:67:32:7a:06:9d: 0d:fd:9b:4c:1e:d8:1f:af:42:52:ef:44:e8:9e:4d:d2:0f:5f: 24:a7:23:89:33:06:8c:c0:11:4d:ec:b9:7b:43:61:e5:58:56: a1:26:a6:9b:18:38:c2:b9:61:0e:b5:5d:c7:25:cb:32:e2:94: 66:58:7d:f3:0f:40:19:a1:f5:57:8a:8b:51:30:38:49:51:28: a3:1a:c1:6f:08:bc:b5:ca:1d:26:5e:20:38:4a:3e:a9:47:c5: b0:99:42:d4:79:9c:24:ab:3a:56:8c:48:4c:1d:8a:23:c4:a6: d1:e3:bf:00:e0:44:73:d8:4c:82:35:71:81:c8:60:83:c3:39: a2:08:44:8f:77:1a:ba:a9:25:b3:91:c6:59:38:e6:ff:f0:5c: 5c:52:bf:0b:f6:06:27:bb:1a:d1:80:42:60:29:d3:62:86:d1: 5b:42:96:b6:64:18:86:22:ec:73:f1:92:92:1b:54:e8:69:22: d8:3b:10:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcvaH3BUY+kiun4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmI1YTFiNjAtNjA1Zi00MjIxLTllZjEtZWFhNDM1ZjljZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLMY9PRKm91ZN42Yr9ETG4rrU9OosIds04nY bM9Cbh1GB+RMCBsHXk6GmHuDB74JL113ekE9bg1xoh15UBDv4o2jPXe8bGz7e2A8 evWYEzSEuVVY6GEVwTp8awPNlXoLRvBd80tCiT3MOJWQnfQW+0fQAmT09SKPMEmp tBYN5R6jOl+B6FsYq4BHljIgzH8tyGjxrXfCb266h6LRierCD7g53wcYxeluBd5y dwHAycY0LUGlRPtxbuVVGpAM0W1yv8ROdK4ShBcqHeySC/Fwi5pt+VM2XWCcKziP v/IaGG7qLLIkTaGA9+PKT3cSbJnlxv+g5R5TQQIiayhuIxC92wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/Dc9Pq7t4M5fQXnvZDT9bvdIg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTAxZGJmYWItMWRkMS0z NjY2LTgxNmYtN2E2Mjk4YTZlZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKv0JfhSQDSpdOGjbgHPavvHqmsKVPuCnOPoeGb06QNNQBtEhFNBI+KD PvPu8CidW3mAi5wy840Bk1IczygfB64YBWZnMnoGnQ39m0we2B+vQlLvROieTdIP XySnI4kzBozAEU3suXtDYeVYVqEmppsYOMK5YQ61XcclyzLilGZYffMPQBmh9VeK i1EwOElRKKMawW8IvLXKHSZeIDhKPqlHxbCZQtR5nCSrOlaMSEwdiiPEptHjvwDg RHPYTII1cYHIYIPDOaIIRI93GrqpJbORxlk45v/wXFxSvwv2Bie7GtGAQmAp02KG 0VtClrZkGIYi7HPxkpIbVOhpItg7ECI= -----END CERTIFICATE-----Generated at Sat Sep 26 19:08:51 2026 by rpki-client