$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa File: 9957d7bb-4a48-379a-8699-0af885f6a4a3.roa (raw, json) Hash identifier: gVXaTWZXrvev8KUhtbR5GQtG1hNrQiJddpvvO3pHtCw= Subject key identifier: BC:27:CA:23:B9:FB:7B:4B:EA:EA:21:10:61:B4:BC:18:FB:27:FA:0C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974575A8CEC98CC9203D680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:57:5a:8c:ec:98:cc:92:03:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=055d56d2-1a34-4749-a8bf-0d43ed356b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c5:a4:7a:bc:34:8c:1f:a6:5a:75:a0:5d:5e: 2d:fa:53:0f:48:9b:62:0e:7a:96:63:e0:c3:fa:0b: 90:36:88:db:29:9b:b6:be:c9:a1:61:1c:c5:38:1c: 61:6b:2d:ed:25:9e:22:9b:dd:5f:e8:2f:2f:0f:6c: 87:13:71:47:64:8d:9c:00:a3:56:02:e1:f3:5d:53: 60:00:a2:0e:b3:59:f5:74:d2:81:5b:17:22:0e:ca: 7f:77:e7:d5:f3:09:74:6e:34:7a:aa:15:12:49:94: e3:86:de:30:bb:9e:5a:47:8a:17:fc:d3:a2:fe:01: 71:89:b3:f7:c6:56:95:79:c7:ce:ad:9d:4c:19:66: 70:f0:1c:f5:43:41:56:5c:08:1c:88:f2:a6:35:3b: 09:af:2a:3a:a3:21:91:50:0a:86:9e:f7:f5:2d:6b: 53:4c:22:11:6e:9c:e7:c2:8f:5b:7d:1b:99:83:d4: ea:11:74:8c:c4:95:8b:bc:9b:64:bc:7c:77:88:f5: 3d:66:04:bf:2d:18:fe:ef:4b:1c:8b:0c:db:b9:04: b0:f2:1e:9d:fb:86:2d:00:f3:f6:18:9b:6b:1c:9c: df:7b:59:8a:a4:6b:72:05:18:14:a0:41:64:9e:9f: 23:20:53:4a:06:27:06:ea:ff:ec:84:c0:1e:4f:a4: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:27:CA:23:B9:FB:7B:4B:EA:EA:21:10:61:B4:BC:18:FB:27:FA:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7e:cd:e9:9e:78:79:2c:41:5e:1d:45:08:6f:62:7a:98:b2: 2e:ff:fb:48:3a:b0:b7:f4:7b:1a:d5:e8:59:57:55:f4:95:83: bd:76:8c:45:9b:d6:a7:e2:1a:7b:96:b3:13:5c:80:f9:59:e9: fb:e4:df:99:de:50:1f:ef:7f:1b:c2:21:6c:05:52:3b:1a:12: d2:95:1b:27:17:53:32:5e:32:b0:eb:d5:08:70:21:37:1b:0e: 35:88:d9:7e:3c:fa:9e:8d:a1:45:07:e6:6d:5d:77:ed:45:e7: 09:8f:3c:09:73:57:e1:2c:3f:41:95:f4:21:c5:ef:06:a8:96: 49:04:48:15:09:9f:37:a7:6e:78:3e:f6:52:b3:cc:4b:0b:ab: 1c:78:b5:7e:40:8e:a5:e6:ac:b5:02:f9:70:c6:fb:72:63:ca: 74:85:81:d6:50:07:67:17:89:1a:46:b2:b2:37:dc:bc:78:72: 84:62:4a:fb:be:17:b4:8d:6b:97:cf:d7:f7:03:6c:74:0f:91: 6f:02:1e:2f:13:5a:d9:7c:46:9f:8f:fe:b4:2c:e8:08:c9:15: f8:6a:dc:db:55:98:50:27:10:c1:47:83:f5:46:dc:66:3b:ca: 01:a4:8f:c7:7c:55:8d:74:71:a5:f8:32:81:63:07:e5:94:6f: a0:74:21:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFdajOyYzJID1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDU1ZDU2ZDItMWEzNC00NzQ5LWE4YmYtMGQ0M2VkMzU2YjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcWkerw0jB+mWnWgXV4t+lMPSJtiDnqWY+DD +guQNojbKZu2vsmhYRzFOBxhay3tJZ4im91f6C8vD2yHE3FHZI2cAKNWAuHzXVNg AKIOs1n1dNKBWxciDsp/d+fV8wl0bjR6qhUSSZTjht4wu55aR4oX/NOi/gFxibP3 xlaVecfOrZ1MGWZw8Bz1Q0FWXAgciPKmNTsJryo6oyGRUAqGnvf1LWtTTCIRbpzn wo9bfRuZg9TqEXSMxJWLvJtkvHx3iPU9ZgS/LRj+70sciwzbuQSw8h6d+4YtAPP2 GJtrHJzfe1mKpGtyBRgUoEFknp8jIFNKBicG6v/shMAeT6RBjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwnyiO5+3tL6uohEGG0vBj7J/oMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTk1N2Q3YmItNGE0OC0z NzlhLTg2OTktMGFmODg1ZjZhNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV+zemeeHksQV4dRQhvYnqYsi7/+0g6sLf0exrV6FlXVfSVg712jEWb 1qfiGnuWsxNcgPlZ6fvk35neUB/vfxvCIWwFUjsaEtKVGycXUzJeMrDr1QhwITcb DjWI2X48+p6NoUUH5m1dd+1F5wmPPAlzV+EsP0GV9CHF7waolkkESBUJnzenbng+ 9lKzzEsLqxx4tX5AjqXmrLUC+XDG+3JjynSFgdZQB2cXiRpGsrI33Lx4coRiSvu+ F7SNa5fP1/cDbHQPkW8CHi8TWtl8Rp+P/rQs6AjJFfhq3NtVmFAnEMFHg/VG3GY7 ygGkj8d8VY10caX4MoFjB+WUb6B0IYc= -----END CERTIFICATE-----Generated at Sat Sep 26 12:46:53 2026 by rpki-client