$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa File: 58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa (raw, json) Hash identifier: f4MycKu7rwILHQKBwylB91dajy84pR665tk+3kfOvNI= Subject key identifier: CF:C0:AF:53:71:51:FE:80:8B:B9:02:33:2C:68:31:D8:B2:C2:8A:5F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49877DD137DA007571EAE080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:7d:d1:37:da:00:75:71:ea:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1ff1978-f520-4b40-9d10-85c30cf9754e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:4f:a9:7b:d4:fe:8d:af:88:7e:98:8b:64: 98:6d:b6:2c:03:96:b3:91:71:dc:d6:c7:ec:c5:07: 8c:7b:0c:0a:9e:c3:0d:5c:84:f5:19:18:89:b5:7b: e3:71:0a:c4:62:da:14:0f:9c:76:7d:be:5a:98:aa: 8d:66:01:d7:e1:99:40:44:9c:df:93:85:e8:cb:ae: f0:2c:a2:e9:18:29:df:59:25:2f:0a:a9:b8:04:a7: 95:f8:28:53:85:7a:aa:f3:7e:5a:16:89:e2:cd:89: 45:f1:0e:eb:72:da:71:e9:5f:94:75:16:cf:33:d2: 2b:9d:d7:7d:15:30:df:af:a0:dc:cf:53:18:cf:6e: f2:0d:42:9c:b2:ee:f7:95:48:ea:4c:b4:c8:8f:96: ea:8b:8f:da:7e:17:6c:5b:b3:60:e9:c8:b2:d8:14: 9b:13:25:10:44:ff:03:50:93:03:e2:9b:45:89:e6: 75:a9:1e:ad:d2:05:f1:90:ee:41:ac:5e:8a:7b:7c: 41:4a:43:38:87:17:02:57:b7:c4:99:1b:b5:be:13: fa:6d:68:d8:76:0f:5f:2f:50:b3:90:45:24:87:f6: 1c:0f:e3:82:96:43:ea:b0:79:89:24:72:fe:38:05: 94:a0:ff:5a:db:7c:35:09:c7:5a:15:57:93:98:27: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C0:AF:53:71:51:FE:80:8B:B9:02:33:2C:68:31:D8:B2:C2:8A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9d:48:87:27:6c:a3:df:c1:13:f7:e0:52:7a:2c:a0:ec:1e: 8f:fc:e7:28:83:90:ca:3c:24:f3:ea:a2:54:d1:d1:63:2c:0a: d7:d3:4f:0e:a5:48:d8:42:14:7c:4d:30:08:e5:e7:95:e4:d0: 2d:76:b0:7b:54:a5:38:2a:db:a5:73:bb:9d:63:8a:f4:18:08: 75:c8:57:c6:d7:1b:e2:46:94:ef:16:0b:52:fb:bd:09:f3:ec: 92:e3:ab:17:7d:45:13:c7:b8:b0:2c:96:b7:f4:e0:cd:2e:2c: de:d1:e2:57:51:40:6f:12:89:c8:ec:fd:e9:50:c3:1e:00:fb: 25:8d:b2:f5:5e:fb:8b:a7:29:e3:b0:b9:38:a5:78:b3:c6:5c: e4:76:47:4f:1b:d7:75:32:49:69:76:fa:14:90:bc:23:13:5c: 75:af:32:6f:78:1f:d3:e9:76:1f:32:25:d6:a1:02:b4:6b:10: a1:1c:ac:4b:f4:b3:98:eb:db:33:66:c0:7a:30:86:96:1c:1f: 87:23:e3:d1:58:bc:1b:6b:7e:a7:35:37:fd:30:d8:be:21:de: d1:59:67:87:38:e1:04:12:cf:59:89:aa:1c:3a:54:15:0d:09: c3:34:aa:08:6f:98:67:fa:09:34:04:e9:fb:68:e7:eb:7e:80: 6f:43:b5:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh33RN9oAdXHq4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDFmZjE5NzgtZjUyMC00YjQwLTlkMTAtODVjMzBjZjk3NTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL1PqXvU/o2viH6Yi2SYbbYsA5azkXHc1sfs xQeMewwKnsMNXIT1GRiJtXvjcQrEYtoUD5x2fb5amKqNZgHX4ZlARJzfk4Xoy67w LKLpGCnfWSUvCqm4BKeV+ChThXqq835aFonizYlF8Q7rctpx6V+UdRbPM9Irndd9 FTDfr6Dcz1MYz27yDUKcsu73lUjqTLTIj5bqi4/afhdsW7Ng6ciy2BSbEyUQRP8D UJMD4ptFieZ1qR6t0gXxkO5BrF6Ke3xBSkM4hxcCV7fEmRu1vhP6bWjYdg9fL1Cz kEUkh/YcD+OClkPqsHmJJHL+OAWUoP9a23w1CcdaFVeTmCfnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/Ar1NxUf6Ai7kCMyxoMdiywopfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNThkZTFiMGUtZjNiNC0z N2QzLTk4MzItYzM5NmU3OWIxYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGdSIcnbKPfwRP34FJ6LKDsHo/85yiDkMo8JPPqolTR0WMsCtfTTw6l SNhCFHxNMAjl55Xk0C12sHtUpTgq26Vzu51jivQYCHXIV8bXG+JGlO8WC1L7vQnz 7JLjqxd9RRPHuLAslrf04M0uLN7R4ldRQG8Sicjs/elQwx4A+yWNsvVe+4unKeOw uTileLPGXOR2R08b13UySWl2+hSQvCMTXHWvMm94H9Ppdh8yJdahArRrEKEcrEv0 s5jr2zNmwHowhpYcH4cj49FYvBtrfqc1N/0w2L4h3tFZZ4c44QQSz1mJqhw6VBUN CcM0qghvmGf6CTQE6fto5+t+gG9DtZI= -----END CERTIFICATE-----Generated at Sat Sep 26 19:52:34 2026 by rpki-client