$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf2f47cc-24f9-32fc-9d0c-4172ea8aad75.roa File: bf2f47cc-24f9-32fc-9d0c-4172ea8aad75.roa (raw, json) Hash identifier: kiR7RAue+CS+ZNbWbw4Gm8JgwqMfJO1P7qQC+AshpDg= Subject key identifier: 79:26:A5:DC:B1:D8:F2:02:0C:F2:B8:ED:A9:11:6E:FC:1F:84:B7:99 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F497430A949D79095FEBFBA80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf2f47cc-24f9-32fc-9d0c-4172ea8aad75.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:30:a9:49:d7:90:95:fe:bf:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=66a42d80-78fb-45a1-a5fc-5cc28e3c3f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:07:34:59:a7:ca:de:49:aa:cc:fd:83:23: 63:0d:a1:1e:e2:5c:cf:af:0a:03:f5:c9:e3:28:f5: 5a:34:79:f7:d0:3e:f9:15:b7:bd:76:27:2c:c1:19: 31:d8:f5:13:78:01:02:20:72:57:48:ab:4c:5f:b0: 1d:7b:c2:b9:de:9d:17:85:38:8f:e5:e9:3f:01:3b: a5:f1:9a:21:03:ca:ec:74:40:4b:61:86:4b:ca:38: 12:6b:25:33:70:32:83:8f:8c:fc:ac:aa:b2:34:11: 31:f7:23:fe:23:cf:cc:83:e8:f8:dc:ce:9c:28:3d: 15:1c:c1:f7:01:00:41:0c:02:ae:0f:ca:36:56:42: 3e:47:d1:04:f8:99:69:13:9b:93:01:90:c9:c6:66: 51:51:14:82:88:57:ec:ce:38:a1:6e:54:71:d3:d2: 1b:05:c0:e3:4e:00:b4:d8:ab:46:24:a8:db:f7:db: 97:41:dd:ae:4b:e8:e9:5e:2a:4c:c8:6e:5e:0c:71: aa:52:83:80:ce:84:08:8c:01:8c:03:42:70:b3:72: 69:1f:9c:98:68:12:76:81:44:d0:eb:39:d7:a5:56: 60:0b:e1:cd:35:62:51:ae:c0:c2:9a:12:c0:e5:3e: 5e:a0:80:71:c4:2b:49:c2:79:70:84:80:73:b0:8d: 53:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:A5:DC:B1:D8:F2:02:0C:F2:B8:ED:A9:11:6E:FC:1F:84:B7:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf2f47cc-24f9-32fc-9d0c-4172ea8aad75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1d:6d:17:6d:7d:f2:4f:90:44:ef:12:42:42:26:fa:34:0d: e6:27:37:2f:30:80:80:3d:e3:e6:31:44:19:97:b4:f5:5e:e9: 08:7d:66:03:3f:92:e7:30:84:5a:03:82:ec:1f:ec:7b:04:e5: dc:a4:bc:53:c2:b4:9c:16:72:24:e6:0e:10:29:b6:1e:33:f6: 57:b4:39:74:97:05:50:7f:72:a6:12:8b:83:6b:30:c8:d3:47: 8e:3b:0d:b7:d5:09:e4:9e:a4:da:4e:7f:cf:4f:53:49:87:1e: 5c:d7:73:04:96:a9:7d:b4:5f:4a:f2:b4:0e:fe:5c:76:82:5b: 80:89:23:cb:60:06:d6:69:3d:15:bb:12:27:19:8c:1a:ff:c2: e0:8d:2b:a9:75:59:f3:58:8a:76:59:c0:d5:4f:47:db:9d:0a: 2a:b0:8a:94:9e:0d:30:fb:86:32:e5:31:e9:cc:68:df:67:d4: de:48:ea:40:65:1d:27:10:ab:7f:16:5a:c7:cf:ca:9b:18:c5: 4e:81:30:71:1f:ba:dc:5e:a7:f0:0a:a4:38:a5:5d:66:94:57: 03:f8:ea:2c:ca:64:f2:57:1d:ac:2a:fc:99:d7:cd:87:ff:6e: 5e:47:64:53:c6:fe:50:9a:cb:85:3f:fa:1c:5f:2d:38:6d:f3: 79:5f:bb:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDCpSdeQlf6/uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjZhNDJkODAtNzhmYi00NWExLWE1ZmMtNWNjMjhlM2MzZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07oHNFmnyt5Jqsz9gyNjDaEe4lzPrwoD9cnj KPVaNHn30D75Fbe9dicswRkx2PUTeAECIHJXSKtMX7Ade8K53p0XhTiP5ek/ATul 8ZohA8rsdEBLYYZLyjgSayUzcDKDj4z8rKqyNBEx9yP+I8/Mg+j43M6cKD0VHMH3 AQBBDAKuD8o2VkI+R9EE+JlpE5uTAZDJxmZRURSCiFfszjihblRx09IbBcDjTgC0 2KtGJKjb99uXQd2uS+jpXipMyG5eDHGqUoOAzoQIjAGMA0Jws3JpH5yYaBJ2gUTQ 6znXpVZgC+HNNWJRrsDCmhLA5T5eoIBxxCtJwnlwhIBzsI1TzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkmpdyx2PICDPK47akRbvwfhLeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmYyZjQ3Y2MtMjRmOS0z MmZjLTlkMGMtNDE3MmVhOGFhZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQdbRdtffJPkETvEkJCJvo0DeYnNy8wgIA94+YxRBmXtPVe6Qh9ZgM/ kucwhFoDguwf7HsE5dykvFPCtJwWciTmDhApth4z9le0OXSXBVB/cqYSi4NrMMjT R447DbfVCeSepNpOf89PU0mHHlzXcwSWqX20X0rytA7+XHaCW4CJI8tgBtZpPRW7 EicZjBr/wuCNK6l1WfNYinZZwNVPR9udCiqwipSeDTD7hjLlMenMaN9n1N5I6kBl HScQq38WWsfPypsYxU6BMHEfutxep/AKpDilXWaUVwP46izKZPJXHawq/JnXzYf/ bl5HZFPG/lCay4U/+hxfLTht83lfu6U= -----END CERTIFICATE-----Generated at Fri Sep 25 10:08:52 2026 by rpki-client