$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7540b130-6fba-38b7-8963-c3b1a53f826e.roa File: 7540b130-6fba-38b7-8963-c3b1a53f826e.roa (raw, json) Hash identifier: q/QXk2KFmafOnCDLV+Wrd898+x8Cr8uGsVOOvMbAVdI= Subject key identifier: 3D:E0:E6:2B:1B:C5:A9:1E:27:49:CC:7F:E2:8A:52:57:16:44:98:72 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498AA1DB6A122858595DC080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7540b130-6fba-38b7-8963-c3b1a53f826e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:a1:db:6a:12:28:58:59:5d:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d2797639-8441-4249-aa39-c9768a2e1e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:37:74:9a:67:f7:5d:ab:bd:ba:02:25:2a:d1: 41:af:85:3a:34:2f:c4:5a:3b:7c:8f:c0:38:07:17: 28:9b:26:4f:d4:12:77:be:ff:04:53:86:7a:8a:0a: 62:c6:ed:db:d7:53:e0:7d:cf:47:75:3b:59:43:97: 20:5d:97:fb:e5:b3:1f:36:3d:ae:e9:93:a7:82:78: 82:bf:8e:cd:8a:7a:cd:aa:15:83:aa:27:0f:35:7e: 61:8c:84:08:cb:18:8d:15:78:32:99:10:a2:45:7b: 90:50:d6:1f:90:1a:cf:dc:85:cf:1e:ca:3a:85:dc: bc:39:81:f1:3d:7f:58:08:89:d9:c9:c8:e7:b7:4c: 3e:95:26:7a:3b:d8:90:22:4b:cf:3d:b9:1e:e1:79: a2:ff:3d:e8:9b:98:bb:7e:1f:3f:2e:38:65:ed:99: 20:ce:9b:47:cf:cb:6e:19:4e:61:e2:ea:eb:52:4f: 19:1d:88:79:e8:74:14:c1:d1:f9:28:6f:ee:e0:2f: fe:a6:ee:6c:d8:d0:15:15:a1:5d:51:71:09:3a:73: 28:96:df:78:9a:57:62:9f:3a:2d:98:56:5c:37:8b: 5f:d9:a1:1a:cc:b7:da:e5:ab:2a:cf:83:a8:a8:83: aa:cc:94:31:8d:b9:57:5b:b9:fb:76:69:13:c7:2c: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E0:E6:2B:1B:C5:A9:1E:27:49:CC:7F:E2:8A:52:57:16:44:98:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7540b130-6fba-38b7-8963-c3b1a53f826e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:11:9d:8f:dc:a5:42:ce:ee:34:c4:78:a9:4d:e3:da:cb:0f: 51:9f:8f:55:38:cd:0b:04:87:59:7a:1e:79:79:cb:69:07:dd: 18:1f:4e:64:46:bd:91:76:d3:ba:d7:9f:99:1d:a9:ca:48:8d: c8:8a:19:a4:db:ef:d6:cb:fa:b1:2d:47:49:87:42:31:ce:0c: 25:98:34:7e:85:8c:b3:b4:71:ec:57:e1:17:fc:68:3e:eb:ed: ae:af:b5:e6:53:77:86:19:82:37:6a:da:85:3a:e9:e4:db:b1: 5e:bd:28:a4:08:07:5b:7d:2c:7f:27:51:9d:db:72:68:a1:c9: 2b:4c:f9:25:f3:ed:f3:ac:fa:23:e7:cf:37:69:5d:48:ab:71: eb:ed:9d:16:b5:81:a0:32:4e:9f:1f:df:94:ec:80:a0:ba:5f: 57:7c:4e:ba:49:7d:fc:8c:b8:3f:df:20:17:a6:41:44:3c:ac: 8e:c7:b9:77:00:27:d2:91:71:55:3a:79:77:d4:8a:0b:a6:ac: ca:18:d4:8c:c2:c3:8d:66:1e:90:3a:6c:40:77:e5:6c:16:3c: af:28:8b:fd:1a:30:7f:a1:54:fd:f0:53:73:4d:52:02:be:c9: 09:c8:5d:83:23:33:14:82:a2:c2:b2:fe:34:dc:a8:6f:0d:56: 5a:f3:af:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiqHbahIoWFldwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDI3OTc2MzktODQ0MS00MjQ5LWFhMzktYzk3NjhhMmUxZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjd0mmf3Xau9ugIlKtFBr4U6NC/EWjt8j8A4 BxcomyZP1BJ3vv8EU4Z6igpixu3b11Pgfc9HdTtZQ5cgXZf75bMfNj2u6ZOngniC v47NinrNqhWDqicPNX5hjIQIyxiNFXgymRCiRXuQUNYfkBrP3IXPHso6hdy8OYHx PX9YCInZycjnt0w+lSZ6O9iQIkvPPbke4Xmi/z3om5i7fh8/Ljhl7ZkgzptHz8tu GU5h4urrUk8ZHYh56HQUwdH5KG/u4C/+pu5s2NAVFaFdUXEJOnMolt94mldinzot mFZcN4tf2aEazLfa5asqz4OoqIOqzJQxjblXW7n7dmkTxyziNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3g5isbxakeJ0nMf+KKUlcWRJhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzU0MGIxMzAtNmZiYS0z OGI3LTg5NjMtYzNiMWE1M2Y4MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8RnY/cpULO7jTEeKlN49rLD1Gfj1U4zQsEh1l6Hnl5y2kH3RgfTmRG vZF207rXn5kdqcpIjciKGaTb79bL+rEtR0mHQjHODCWYNH6FjLO0cexX4Rf8aD7r 7a6vteZTd4YZgjdq2oU66eTbsV69KKQIB1t9LH8nUZ3bcmihyStM+SXz7fOs+iPn zzdpXUircevtnRa1gaAyTp8f35TsgKC6X1d8TrpJffyMuD/fIBemQUQ8rI7HuXcA J9KRcVU6eXfUigumrMoY1IzCw41mHpA6bEB35WwWPK8oi/0aMH+hVP3wU3NNUgK+ yQnIXYMjMxSCosKy/jTcqG8NVlrzr0Q= -----END CERTIFICATE-----Generated at Sat Sep 26 09:15:40 2026 by rpki-client