$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfc66b7e-e101-360f-83f7-999dd47957b8.roa File: bfc66b7e-e101-360f-83f7-999dd47957b8.roa (raw, json) Hash identifier: a/PRN1DuBHLA/KlI6lL1KPFTq9NHaUAIUN+KE9Xj4OU= Subject key identifier: 49:79:03:E8:0D:C2:B6:A7:7D:91:5B:E4:4D:C0:A8:7A:22:44:DA:50 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49729B940A8062E08ADC1BC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfc66b7e-e101-360f-83f7-999dd47957b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:9b:94:0a:80:62:e0:8a:dc:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c8242072-75e0-4bee-86c3-55db77b270a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:6b:6e:6b:13:d3:10:cc:df:54:eb:57:73: 45:32:b3:21:5c:a9:2b:1c:77:80:14:04:67:44:c6: 2e:a8:a2:7a:cc:cb:ac:a4:08:95:b7:ab:7e:96:36: e8:d5:22:1a:b0:fd:db:1f:0a:19:c2:e1:4e:d1:3f: a5:e8:75:0d:77:fa:01:55:d9:ff:64:db:d6:36:82: 5b:6f:f9:84:a9:e1:a2:76:66:aa:59:a5:60:b5:db: 96:83:6a:1e:84:b1:69:25:f3:5b:6f:17:d6:4a:99: d4:03:f3:26:5e:b1:03:b1:9a:98:f1:1f:9c:3b:17: 1b:23:25:b0:6c:90:25:20:57:ff:9c:f1:6d:cb:06: eb:84:cb:7e:2e:c6:8d:52:c9:58:6c:fe:84:f6:14: f8:71:54:da:cb:71:43:0f:18:7a:d4:41:9f:49:4b: b0:8f:7f:e6:4e:7f:b7:4e:c9:d0:51:21:58:42:60: 1b:75:b7:53:54:cb:a3:b3:b2:d8:8a:0d:f4:5f:6b: e7:c2:3d:16:3c:d9:4e:a1:b7:04:8b:a5:e6:8c:93: 6f:f5:61:c7:0e:c4:ce:4d:d1:c7:26:92:8d:59:58: 3e:53:2f:a8:52:c3:d4:0d:c9:b2:a6:58:46:1d:18: 29:0b:35:92:1e:8d:5d:76:2f:18:40:55:ca:e7:60: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:79:03:E8:0D:C2:B6:A7:7D:91:5B:E4:4D:C0:A8:7A:22:44:DA:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfc66b7e-e101-360f-83f7-999dd47957b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:73:ba:83:b9:2f:10:78:2d:4d:f3:6f:21:cb:09:2e:ac:35: cd:8a:06:7c:86:01:2b:98:36:f6:3f:5f:ec:e1:7a:de:4a:88: d0:50:20:53:9a:e4:f7:d0:3e:f5:a3:2e:81:25:b9:63:7a:1b: 2c:bc:e4:be:ba:a5:a7:f3:1f:9f:d5:ab:5d:ad:c2:8f:02:36: 47:f5:45:3a:a7:83:88:e3:2d:c6:41:05:59:4a:f5:fa:d0:20: cd:03:0c:1e:ad:8f:9b:9f:20:f5:e5:56:42:1d:20:5e:51:6a: fd:42:4e:89:b0:13:f0:88:27:0f:81:14:ed:3a:b2:ce:20:1f: 98:91:b2:c1:91:e6:11:63:49:a8:3b:c5:26:a2:42:91:31:29: c4:90:46:0b:4b:76:b3:ec:67:37:21:de:2a:c4:f8:54:a2:cb: e3:39:de:c5:20:da:da:0b:18:9c:76:c8:8d:50:3a:d1:c2:74: 77:22:8c:1c:66:59:db:fa:c2:cb:61:a6:3f:f5:78:00:27:04: 66:a2:fe:4d:87:a0:46:07:21:9f:2a:1b:68:1d:33:c4:c4:59: 3c:c7:cf:47:45:fe:36:7b:84:10:09:40:17:70:80:25:d2:c8: 01:0f:f1:c2:0a:a4:ac:fc:54:b3:b9:ac:a6:9a:6a:82:d2:8f: 3e:f5:9e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcpuUCoBi4IrcG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzgyNDIwNzItNzVlMC00YmVlLTg2YzMtNTVkYjc3YjI3MGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4VrbmsT0xDM31TrV3NFMrMhXKkrHHeAFARn RMYuqKJ6zMuspAiVt6t+ljbo1SIasP3bHwoZwuFO0T+l6HUNd/oBVdn/ZNvWNoJb b/mEqeGidmaqWaVgtduWg2oehLFpJfNbbxfWSpnUA/MmXrEDsZqY8R+cOxcbIyWw bJAlIFf/nPFtywbrhMt+LsaNUslYbP6E9hT4cVTay3FDDxh61EGfSUuwj3/mTn+3 TsnQUSFYQmAbdbdTVMujs7LYig30X2vnwj0WPNlOobcEi6XmjJNv9WHHDsTOTdHH JpKNWVg+Uy+oUsPUDcmyplhGHRgpCzWSHo1ddi8YQFXK52B/TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl5A+gNwranfZFb5E3AqHoiRNpQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmZjNjZiN2UtZTEwMS0z NjBmLTgzZjctOTk5ZGQ0Nzk1N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRzuoO5LxB4LU3zbyHLCS6sNc2KBnyGASuYNvY/X+zhet5KiNBQIFOa 5PfQPvWjLoEluWN6Gyy85L66pafzH5/Vq12two8CNkf1RTqng4jjLcZBBVlK9frQ IM0DDB6tj5ufIPXlVkIdIF5Rav1CTomwE/CIJw+BFO06ss4gH5iRssGR5hFjSag7 xSaiQpExKcSQRgtLdrPsZzch3irE+FSiy+M53sUg2toLGJx2yI1QOtHCdHcijBxm Wdv6wsthpj/1eAAnBGai/k2HoEYHIZ8qG2gdM8TEWTzHz0dF/jZ7hBAJQBdwgCXS yAEP8cIKpKz8VLO5rKaaaoLSjz71noA= -----END CERTIFICATE-----Generated at Fri Sep 25 17:45:38 2026 by rpki-client