$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7b10ad56-19b4-3d60-97da-19aa34d4c863.roa File: 7b10ad56-19b4-3d60-97da-19aa34d4c863.roa (raw, json) Hash identifier: N/58WAcvqv5vHQhZRcLW71oyQlGSaW0BO3F5Lj5gtfI= Subject key identifier: D1:74:93:B3:79:8E:71:DD:A7:40:80:8F:0F:79:C0:E4:A1:4F:7F:DC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4986E30E4F9A358E8516A520 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7b10ad56-19b4-3d60-97da-19aa34d4c863.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:e3:0e:4f:9a:35:8e:85:16:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b924dcf3-0825-4a5d-b1ae-9b3d98803ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:43:5c:5b:55:c9:9f:bc:71:2b:e8:1d:95:f4: bb:64:b4:34:dd:ac:8f:58:4c:33:da:6a:07:a7:8c: 7d:2c:fd:54:05:9e:64:b3:db:c1:13:20:0f:d4:da: 6e:74:29:b5:8e:41:cd:37:78:b9:99:75:a2:76:2a: c3:51:ec:2c:37:7b:8d:9d:19:cd:fe:bf:a7:54:1b: ad:af:dd:f3:d9:66:a7:5f:8c:9e:30:94:09:f0:3f: 70:d9:8a:b6:f1:c4:cd:05:8f:7a:19:de:cf:43:b3: f8:8e:e8:9b:f0:36:8f:60:2f:31:7d:55:32:6b:65: bf:0e:79:b7:15:a2:eb:c9:8b:92:f0:2d:3c:7e:40: 12:40:fa:ee:b7:09:b7:5e:3b:d4:17:ce:e4:fa:80: 58:08:3e:b3:79:e9:b7:0d:1d:18:a0:27:fa:2b:ac: 08:c6:82:ad:ef:db:58:59:c7:df:10:01:99:e2:21: 57:3c:55:b9:14:8a:73:62:ab:e8:44:c7:1d:58:b2: da:3d:5a:5f:ec:97:3a:d8:f1:37:68:4b:05:9d:8d: 2a:fa:04:0f:5a:78:90:33:a9:d0:01:a2:95:0c:80: 33:b3:ae:ae:86:a3:44:04:04:59:b3:86:8c:73:4e: 97:8a:68:8d:2c:6f:96:db:f7:02:1a:6c:bf:76:c8: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:74:93:B3:79:8E:71:DD:A7:40:80:8F:0F:79:C0:E4:A1:4F:7F:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7b10ad56-19b4-3d60-97da-19aa34d4c863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ed:42:37:59:20:8e:ed:8b:af:f0:4d:f3:f1:0e:6c:af:7a: 33:0f:7d:40:49:cc:92:4c:6d:04:dd:ac:cd:2b:35:68:b0:65: 1f:34:8a:7a:96:c6:5d:1c:ac:36:b2:93:bf:85:c5:a3:bb:64: 21:1b:6b:08:f2:57:57:d2:2e:32:a0:54:48:f5:ce:6e:b3:33: ed:8a:55:43:ac:75:e1:a5:b2:84:1e:1d:c7:a4:26:9f:1d:35: 78:eb:66:50:06:b0:f9:b5:1a:16:38:5d:90:08:eb:a8:2e:48: f1:0c:7a:fb:91:e7:fa:44:e0:1a:b2:c9:93:a6:a1:3a:3d:70: 70:7b:fc:5d:d8:dd:a8:ed:23:d4:cd:63:2a:f3:be:3d:30:38: e7:b5:f3:87:62:ee:fb:a9:cf:49:80:9e:2f:52:cc:88:75:39: 84:41:81:58:70:6e:aa:0e:12:fe:d3:09:86:9c:18:10:9d:77: 6a:a2:60:6f:56:98:37:20:1f:83:fb:81:d0:62:60:6c:c3:6b: 64:be:79:d1:c6:c9:fe:b1:04:7f:63:96:03:dc:86:47:81:16: c5:c1:a6:3d:f6:39:2e:69:d1:a9:16:c8:6c:0f:27:cc:07:88: a2:0a:75:1a:32:e3:c6:a5:89:29:42:df:bb:80:2b:82:d7:65: df:65:f5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhuMOT5o1joUWpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjkyNGRjZjMtMDgyNS00YTVkLWIxYWUtOWIzZDk4ODAzYWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUNcW1XJn7xxK+gdlfS7ZLQ03ayPWEwz2moH p4x9LP1UBZ5ks9vBEyAP1NpudCm1jkHNN3i5mXWidirDUewsN3uNnRnN/r+nVBut r93z2WanX4yeMJQJ8D9w2Yq28cTNBY96Gd7PQ7P4juib8DaPYC8xfVUya2W/Dnm3 FaLryYuS8C08fkASQPrutwm3XjvUF87k+oBYCD6zeem3DR0YoCf6K6wIxoKt79tY WcffEAGZ4iFXPFW5FIpzYqvoRMcdWLLaPVpf7Jc62PE3aEsFnY0q+gQPWniQM6nQ AaKVDIAzs66uhqNEBARZs4aMc06XimiNLG+W2/cCGmy/dsgIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNF0k7N5jnHdp0CAjw95wOShT3/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2IxMGFkNTYtMTliNC0z ZDYwLTk3ZGEtMTlhYTM0ZDRjODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXtQjdZII7ti6/wTfPxDmyvejMPfUBJzJJMbQTdrM0rNWiwZR80inqW xl0crDayk7+FxaO7ZCEbawjyV1fSLjKgVEj1zm6zM+2KVUOsdeGlsoQeHcekJp8d NXjrZlAGsPm1GhY4XZAI66guSPEMevuR5/pE4BqyyZOmoTo9cHB7/F3Y3ajtI9TN Yyrzvj0wOOe184di7vupz0mAni9SzIh1OYRBgVhwbqoOEv7TCYacGBCdd2qiYG9W mDcgH4P7gdBiYGzDa2S+edHGyf6xBH9jlgPchkeBFsXBpj32OS5p0akWyGwPJ8wH iKIKdRoy48aliSlC37uAK4LXZd9l9VY= -----END CERTIFICATE-----Generated at Sat Sep 26 11:09:08 2026 by rpki-client