$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa File: 594c4987-02d1-3bc5-a8c0-729e094b6649.roa (raw, json) Hash identifier: 71KEqZ9r0XVCAMQmofDVpSabm+EKpJwFQ7uIbrjCJyU= Subject key identifier: 94:9E:88:B0:03:52:34:8E:5E:17:7F:BD:85:BD:65:03:7C:FC:99:E7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972CB0D6BFCF7BB3D624F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:cb:0d:6b:fc:f7:bb:3d:62:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=21211016-e110-46cb-96bb-2f78de28e30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:bd:fb:77:85:3f:99:36:23:ad:a0:d1:a4: 1b:75:04:ad:a4:8d:5e:53:49:49:09:63:0e:32:b6: 64:08:71:e3:75:e5:98:c5:fc:1d:6b:6b:1a:21:21: 4c:ca:49:36:c1:9f:0f:9d:5f:a6:83:31:93:30:39: 31:75:12:c1:f8:bd:69:72:11:f5:b0:06:33:7f:44: fa:f1:f6:c9:b4:b8:9a:ae:92:b4:c7:d2:e4:80:fe: 55:8c:84:65:68:9d:47:73:0c:a8:9c:ed:09:e6:61: 59:92:e2:92:bc:54:d7:2a:f5:88:06:ce:32:10:ba: e4:f5:26:fa:6b:e1:8e:83:d9:83:ae:97:ac:fe:80: 1c:73:1c:c4:6e:24:a8:e1:4f:4f:18:27:cf:5f:a8: b9:ac:87:28:0b:3e:27:6d:9c:58:38:7c:8d:a5:ec: 08:25:01:2e:93:55:d7:43:b0:cf:bb:b5:f3:37:10: 0d:b9:83:c1:30:4f:0c:d1:e0:aa:18:d8:ff:1e:47: 78:c1:15:a2:5b:1a:ad:53:ec:4b:da:86:f3:ca:ef: 70:b5:e1:4a:67:fc:4c:e9:c4:b9:26:fc:b2:a9:9f: de:04:19:d1:db:44:e8:64:6d:76:4b:72:54:35:ab: 4f:93:cf:2b:3c:72:3b:cc:b7:88:2d:10:81:45:60: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9E:88:B0:03:52:34:8E:5E:17:7F:BD:85:BD:65:03:7C:FC:99:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:75:42:f0:7c:22:f5:ac:0a:c3:ce:25:b1:07:f6:c6:9f:5a: 7d:e1:2a:34:d2:d4:08:01:36:97:04:2c:74:77:fc:c0:ab:3f: 21:c1:4d:2a:0e:fa:4b:b1:37:e5:8d:02:c4:a4:0b:f5:28:38: 6b:18:d8:66:59:d8:ef:22:23:69:29:d9:d9:5a:87:ed:d2:cb: f6:65:41:8e:02:25:0f:36:f3:78:63:e5:a1:49:ad:8d:19:2c: 1e:b4:3d:b3:cf:9d:ed:f1:5a:51:2b:43:6f:32:a1:af:d0:2f: 6a:8b:8c:da:03:ee:1d:4d:a3:46:1d:cf:6f:b3:54:ec:cf:98: 49:28:7a:52:ad:b1:64:ec:5a:24:22:c0:4c:40:69:f2:6d:f6: aa:93:db:53:38:f8:97:14:31:9c:89:ef:00:df:9f:f7:61:00: 2f:93:6b:c4:07:97:39:71:0e:13:f8:48:42:ae:00:ca:7a:dc: e0:36:64:3e:2d:56:35:fd:1e:26:60:0b:11:a9:07:b6:5a:32: 71:b4:14:7f:2e:cd:84:0d:ed:91:51:a1:80:f9:d0:5f:da:4b: 9d:37:4e:6d:c1:f3:1c:78:43:de:a4:7d:3d:ab:8c:0c:ed:93: 5b:c2:94:6b:6b:50:2d:2d:60:a5:03:77:e4:83:ec:24:6a:31: d3:65:cf:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcssNa/z3uz1iTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjEyMTEwMTYtZTExMC00NmNiLTk2YmItMmY3OGRlMjhlMzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWG9+3eFP5k2I62g0aQbdQStpI1eU0lJCWMO MrZkCHHjdeWYxfwda2saISFMykk2wZ8PnV+mgzGTMDkxdRLB+L1pchH1sAYzf0T6 8fbJtLiarpK0x9LkgP5VjIRlaJ1HcwyonO0J5mFZkuKSvFTXKvWIBs4yELrk9Sb6 a+GOg9mDrpes/oAccxzEbiSo4U9PGCfPX6i5rIcoCz4nbZxYOHyNpewIJQEuk1XX Q7DPu7XzNxANuYPBME8M0eCqGNj/Hkd4wRWiWxqtU+xL2obzyu9wteFKZ/xM6cS5 JvyyqZ/eBBnR20ToZG12S3JUNatPk88rPHI7zLeILRCBRWDqbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSeiLADUjSOXhd/vYW9ZQN8/JnnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTk0YzQ5ODctMDJkMS0z YmM1LWE4YzAtNzI5ZTA5NGI2NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFd1QvB8IvWsCsPOJbEH9safWn3hKjTS1AgBNpcELHR3/MCrPyHBTSoO +kuxN+WNAsSkC/UoOGsY2GZZ2O8iI2kp2dlah+3Sy/ZlQY4CJQ8283hj5aFJrY0Z LB60PbPPne3xWlErQ28yoa/QL2qLjNoD7h1No0Ydz2+zVOzPmEkoelKtsWTsWiQi wExAafJt9qqT21M4+JcUMZyJ7wDfn/dhAC+Ta8QHlzlxDhP4SEKuAMp63OA2ZD4t VjX9HiZgCxGpB7ZaMnG0FH8uzYQN7ZFRoYD50F/aS503Tm3B8xx4Q96kfT2rjAzt k1vClGtrUC0tYKUDd+SD7CRqMdNlz5A= -----END CERTIFICATE-----Generated at Mon Sep 28 14:41:03 2026 by rpki-client