$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcfbf834-d12b-3878-b10a-b9bed89a4d00.roa File: bcfbf834-d12b-3878-b10a-b9bed89a4d00.roa (raw, json) Hash identifier: YC6t3F6iDCyG6e0Afm0YPG/Lr2eKP/taY1RcFahC1vw= Subject key identifier: 8B:82:54:FA:15:41:BC:4E:DF:7C:6F:B7:5F:C3:42:49:AE:0C:AB:A2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4988B73C839C27626B4BF788 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcfbf834-d12b-3878-b10a-b9bed89a4d00.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 65.22.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:b7:3c:83:9c:27:62:6b:4b:f7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=df234a65-9034-4b8f-bb3c-7c92439e4370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:1c:66:3e:72:91:26:48:c4:b1:76:7c:e8: b0:75:aa:81:9f:bf:62:c0:d5:c0:b5:a3:93:3d:d3: 44:88:94:17:03:ab:86:4b:90:4d:7b:86:d3:09:24: 93:0c:cc:6e:00:e5:1b:c4:bb:87:b0:0d:3a:53:e2: e2:b6:35:18:57:af:13:af:37:05:54:f3:dd:7f:f2: dc:c2:c8:32:0d:b4:a0:5d:39:cd:11:48:93:ea:c7: 26:ea:48:ae:08:2f:ec:7b:2b:7d:61:86:1f:a6:b3: c8:ae:a9:ee:c2:f4:7b:9b:fa:34:d2:b7:f1:cf:57: 0a:1c:0c:47:78:14:95:84:9a:21:a0:c6:10:f5:f1: 33:45:c5:29:e8:8c:83:ae:9b:2a:94:2e:20:d2:1a: 6c:89:20:5f:09:68:46:c3:ee:15:8e:2f:69:6b:5d: 81:6b:c4:b5:17:80:21:c3:b9:88:c0:63:a2:bb:40: 4d:f6:67:2d:3a:f3:d3:1a:da:ea:e8:0d:3a:6d:87: d8:e1:e9:6e:d0:e0:d1:12:5a:6d:30:68:d4:ad:b4: 83:e3:50:08:62:e1:14:ad:d0:6d:c6:cc:22:46:8d: 6e:6e:2a:5a:5f:5f:63:91:89:75:ff:f2:81:43:59: 2c:a9:59:fd:e7:99:3b:8d:ae:b4:67:23:04:30:67: 9b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:82:54:FA:15:41:BC:4E:DF:7C:6F:B7:5F:C3:42:49:AE:0C:AB:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcfbf834-d12b-3878-b10a-b9bed89a4d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:bc:fd:82:6c:f7:61:41:66:5d:93:e8:0c:20:ce:9b:ff:1b: 51:f2:84:82:78:94:38:7a:5f:a6:47:20:2f:4f:5a:e0:a9:74: ba:ff:71:b0:36:97:5f:d2:c2:29:29:c8:86:13:23:1f:6c:7c: f2:e7:8d:8a:f0:5d:8a:0f:d4:ba:a1:14:09:58:de:62:49:e2: 66:b3:1c:ca:e0:f2:6b:e6:05:b1:f6:95:01:15:cf:65:92:dc: 0f:b8:b3:da:18:62:17:23:cf:3b:e7:bf:66:d9:b9:46:92:7b: 25:e8:3f:9c:e5:04:91:3a:54:ea:04:c4:fe:75:3e:0d:bb:e9: 50:48:c9:79:5b:c5:f9:33:81:a9:18:91:fc:6a:a8:24:12:c9: 1a:e8:5e:20:1a:7b:52:e6:e7:f9:0c:90:ab:1a:57:65:c0:86: b8:d4:c7:74:84:3c:16:61:ec:5a:34:70:b2:cb:0c:e8:90:72: 78:ec:08:cf:52:3f:4c:05:a5:6d:15:9b:3e:14:13:c3:6a:a4: 63:05:80:f2:5f:62:eb:91:36:c3:16:51:8f:95:71:8c:e5:9c: 57:be:f6:c4:f3:5e:e3:53:0b:55:7a:8b:f8:4e:36:60:a4:1e: a7:38:3f:9c:da:9f:df:04:6e:9e:86:6a:3c:41:a1:e0:8b:06: 74:3a:f1:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiLc8g5wnYmtL94gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGYyMzRhNjUtOTAzNC00YjhmLWJiM2MtN2M5MjQzOWU0MzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsYcZj5ykSZIxLF2fOiwdaqBn79iwNXAtaOT PdNEiJQXA6uGS5BNe4bTCSSTDMxuAOUbxLuHsA06U+LitjUYV68TrzcFVPPdf/Lc wsgyDbSgXTnNEUiT6scm6kiuCC/seyt9YYYfprPIrqnuwvR7m/o00rfxz1cKHAxH eBSVhJohoMYQ9fEzRcUp6IyDrpsqlC4g0hpsiSBfCWhGw+4Vji9pa12Ba8S1F4Ah w7mIwGOiu0BN9mctOvPTGtrq6A06bYfY4elu0ODRElptMGjUrbSD41AIYuEUrdBt xswiRo1ubipaX19jkYl1//KBQ1ksqVn955k7ja60ZyMEMGeb6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuCVPoVQbxO33xvt1/DQkmuDKuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmNmYmY4MzQtZDEyYi0z ODc4LWIxMGEtYjliZWQ4OWE0ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC8/YJs92FBZl2T6Awgzpv/G1HyhIJ4lDh6X6ZHIC9PWuCpdLr/cbA2 l1/SwikpyIYTIx9sfPLnjYrwXYoP1LqhFAlY3mJJ4mazHMrg8mvmBbH2lQEVz2WS 3A+4s9oYYhcjzzvnv2bZuUaSeyXoP5zlBJE6VOoExP51Pg276VBIyXlbxfkzgakY kfxqqCQSyRroXiAae1Lm5/kMkKsaV2XAhrjUx3SEPBZh7Fo0cLLLDOiQcnjsCM9S P0wFpW0Vmz4UE8NqpGMFgPJfYuuRNsMWUY+VcYzlnFe+9sTzXuNTC1V6i/hONmCk Hqc4P5zan98Ebp6GajxBoeCLBnQ68So= -----END CERTIFICATE-----Generated at Fri Sep 25 05:56:06 2026 by rpki-client