$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53149a74-a3be-3b69-a7f8-608a2a078fa9.roa File: 53149a74-a3be-3b69-a7f8-608a2a078fa9.roa (raw, json) Hash identifier: kCJ6SqqRY+M6bGurbgbb117NNf2rZxTupX+AF2fYY1c= Subject key identifier: 6D:1D:F1:1D:5F:84:0F:EB:56:B1:F1:24:F0:58:9A:27:CB:81:3D:CB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972B8423E605E6295CD5580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53149a74-a3be-3b69-a7f8-608a2a078fa9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b8:42:3e:60:5e:62:95:cd:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=394ac2dd-3e70-4107-b713-64e71def0e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:46:f7:2a:90:04:bd:d4:63:90:b6:22:6e:18: e0:8c:f3:47:91:a9:8b:24:12:6d:c3:a9:3f:0e:6a: ee:de:ac:2b:48:db:0c:9e:01:ea:60:89:aa:c3:f1: 9a:19:be:c2:a4:de:46:16:15:05:32:fd:6c:c6:57: f0:21:d1:19:57:d8:c7:ac:b3:78:e9:5a:89:9d:e7: 8b:c1:df:ed:9b:9a:44:cd:4c:ff:9c:0d:01:e4:51: f1:9e:16:ec:86:2d:75:2b:cd:d5:05:9b:85:f9:32: 91:a9:56:e6:98:26:dc:36:70:69:30:cf:4d:b3:49: 17:34:88:f4:4c:57:95:22:d6:5d:fb:63:22:a7:9e: ae:54:6b:89:4e:2e:f6:79:b2:e5:95:c4:37:7d:58: 6a:8d:4e:83:cc:7f:7f:a6:dc:b2:c5:fd:32:11:79: 4f:83:9d:fc:e4:14:74:73:4f:02:61:a3:da:05:a8: a3:05:90:f6:c9:90:60:a2:d9:aa:3c:8a:3b:0c:29: 14:51:68:d8:68:62:e7:68:5d:34:b4:df:98:96:9a: b1:9c:cf:90:87:86:07:68:91:90:84:be:89:9f:ae: 73:88:31:42:30:f8:fc:0d:58:fd:4d:c7:8b:dc:d1: 1f:6c:75:cf:7d:fd:94:f5:e4:5e:d2:b0:34:c0:f9: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1D:F1:1D:5F:84:0F:EB:56:B1:F1:24:F0:58:9A:27:CB:81:3D:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/53149a74-a3be-3b69-a7f8-608a2a078fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:88:32:be:f9:77:4a:1d:bd:c6:31:80:98:dd:ef:e6:50:b9: 48:84:43:68:52:e9:59:f6:9d:bb:50:a9:fb:db:fc:ee:9d:62: 03:26:f4:33:4c:05:ad:1a:69:57:be:fe:14:02:4f:b2:f8:f9: ef:9a:49:c5:c3:71:61:bb:03:68:a3:b3:51:0f:a2:13:e3:05: 92:d9:a5:6d:59:6c:cb:02:1b:79:5c:4b:d0:13:f6:2b:ca:45: 5c:76:3f:c4:31:53:f1:dd:69:0e:59:3e:5b:35:a2:6e:10:10: 4f:59:19:3e:51:93:0a:32:72:26:67:5f:12:1d:64:b9:00:62: c5:e2:25:cd:23:0c:99:f5:ee:f7:ef:b8:45:3b:0a:cc:6f:4b: 6c:83:c0:7d:bc:9e:ea:fc:99:72:22:2d:ab:6c:89:41:23:8c: e5:54:2a:3d:ed:71:e3:91:aa:1c:89:13:23:2a:ad:56:41:f5: 58:e3:24:26:0a:02:3d:e4:cd:f2:dc:a8:c0:8d:e6:dd:94:04: a8:4b:00:8b:b8:89:b7:15:99:bf:b7:67:40:77:71:43:bd:c5: c5:4e:86:28:31:78:db:5e:ce:2f:7f:d7:25:4c:f1:7a:d0:ed: ec:64:a2:ec:1f:cf:5b:06:c8:8d:0e:28:a8:e9:9e:d0:a3:71: 7d:81:43:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrhCPmBeYpXNVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzk0YWMyZGQtM2U3MC00MTA3LWI3MTMtNjRlNzFkZWYwZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikb3KpAEvdRjkLYibhjgjPNHkamLJBJtw6k/ Dmru3qwrSNsMngHqYImqw/GaGb7CpN5GFhUFMv1sxlfwIdEZV9jHrLN46VqJneeL wd/tm5pEzUz/nA0B5FHxnhbshi11K83VBZuF+TKRqVbmmCbcNnBpMM9Ns0kXNIj0 TFeVItZd+2Mip56uVGuJTi72ebLllcQ3fVhqjU6DzH9/ptyyxf0yEXlPg5385BR0 c08CYaPaBaijBZD2yZBgotmqPIo7DCkUUWjYaGLnaF00tN+YlpqxnM+Qh4YHaJGQ hL6Jn65ziDFCMPj8DVj9TceL3NEfbHXPff2U9eRe0rA0wPkrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0d8R1fhA/rVrHxJPBYmifLgT3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTMxNDlhNzQtYTNiZS0z YjY5LWE3ZjgtNjA4YTJhMDc4ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSIMr75d0odvcYxgJjd7+ZQuUiEQ2hS6Vn2nbtQqfvb/O6dYgMm9DNM Ba0aaVe+/hQCT7L4+e+aScXDcWG7A2ijs1EPohPjBZLZpW1ZbMsCG3lcS9AT9ivK RVx2P8QxU/HdaQ5ZPls1om4QEE9ZGT5RkwoyciZnXxIdZLkAYsXiJc0jDJn17vfv uEU7CsxvS2yDwH28nur8mXIiLatsiUEjjOVUKj3tceORqhyJEyMqrVZB9VjjJCYK Aj3kzfLcqMCN5t2UBKhLAIu4ibcVmb+3Z0B3cUO9xcVOhigxeNtezi9/1yVM8XrQ 7exkouwfz1sGyI0OKKjpntCjcX2BQ0M= -----END CERTIFICATE-----Generated at Fri Sep 25 14:31:25 2026 by rpki-client