$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfd8084d-f118-3f75-b68e-6d7e9b945913.roa File: bfd8084d-f118-3f75-b68e-6d7e9b945913.roa (raw, json) Hash identifier: PP57c6isStVmdzwZBJ+ahkp7PSNhlhADhwbWndAadtM= Subject key identifier: B9:2F:F4:BF:44:00:F3:7C:22:16:D5:0A:D9:7E:5D:F5:95:0E:25:C5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498BB12B8CA2B55571F9AA40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfd8084d-f118-3f75-b68e-6d7e9b945913.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b1:2b:8c:a2:b5:55:71:f9:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3cd55e26-ef35-4d3f-8573-482aac72577d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3a:51:f8:96:83:7a:c4:a4:b6:9e:33:64:7f: 47:6b:5c:8c:5f:c2:32:cf:04:32:1d:76:c1:f2:55: 65:22:1b:1e:b9:75:2c:50:40:2e:d5:2d:0e:45:ee: 4c:e4:c3:f6:6a:c3:e5:36:87:82:f6:01:67:47:e3: bc:65:75:e6:08:33:39:2d:4d:1c:7c:52:e4:b5:66: 8e:5c:c2:de:05:c8:82:9f:7e:9a:c8:45:7e:d7:fe: 51:eb:89:0e:80:b1:cf:81:48:80:d8:8a:89:cf:ed: 61:0f:25:2c:f4:af:5c:5a:23:45:94:19:78:52:24: 45:99:30:51:a2:8c:ec:6d:b9:ef:13:05:6e:89:40: fd:50:8a:b2:a9:29:39:a6:37:d3:26:f5:2b:9c:09: bf:2a:e7:83:3d:12:bb:a2:6b:c4:78:05:6b:e2:5c: 13:65:bb:c3:72:27:b4:21:8b:7a:12:d6:5f:63:eb: c6:ad:06:26:79:6f:00:2f:5e:65:d2:45:7c:bc:16: f5:7c:be:34:ed:75:9a:83:b1:b4:a9:4a:a8:50:8e: 58:32:51:92:9c:3d:6e:c1:14:87:13:28:14:09:ee: 8a:73:20:92:9f:39:1b:92:ee:17:9b:16:55:cb:a2: fb:c0:d3:0d:88:79:28:5b:e2:da:4b:9d:e5:e8:40: be:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2F:F4:BF:44:00:F3:7C:22:16:D5:0A:D9:7E:5D:F5:95:0E:25:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfd8084d-f118-3f75-b68e-6d7e9b945913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:35:8f:e6:02:29:24:24:06:5f:29:83:10:50:9d:75:55:fd: 3e:8a:60:bf:0d:e4:92:ae:01:d3:40:52:27:78:02:ea:b2:4e: 66:d2:ec:2f:92:0e:47:49:1c:0a:74:8c:9b:33:ac:ba:5c:24: 7e:0f:f6:31:f0:79:9f:40:59:17:ae:e1:dd:66:93:2e:72:da: 33:c2:68:eb:82:4e:8b:04:d3:ec:2f:5f:f1:34:3d:b5:6e:c2: de:03:8a:07:5b:58:b9:c8:f3:b8:19:9f:cb:42:0c:16:53:97: 4f:b5:2f:d6:6c:2e:04:13:8d:f6:87:12:4c:e7:42:ea:b5:45: 15:dc:9c:2d:e8:c7:26:9a:6b:4f:da:d6:c4:0e:d4:b4:0c:d6: e5:47:bd:24:6c:b7:e7:95:86:0f:5e:2e:de:c7:31:30:c7:0a: 3b:1d:8a:d0:18:6c:13:87:1d:9d:1e:ba:5d:ee:74:f1:51:e1: 88:96:28:0c:39:cf:34:7a:4e:4e:97:1a:2a:6a:e9:1c:64:09: 4f:df:8d:67:61:ba:31:c0:1f:99:2a:e5:94:bf:ee:18:c0:11: a1:0e:03:50:6b:03:18:af:73:f6:4b:fd:b6:d7:4d:a8:93:03: 71:e8:88:63:4a:4e:d2:0d:da:84:4c:44:6f:fd:2b:0f:4c:39: dd:24:d9:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji7ErjKK1VXH5qkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2NkNTVlMjYtZWYzNS00ZDNmLTg1NzMtNDgyYWFjNzI1NzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TpR+JaDesSktp4zZH9Ha1yMX8IyzwQyHXbB 8lVlIhseuXUsUEAu1S0ORe5M5MP2asPlNoeC9gFnR+O8ZXXmCDM5LU0cfFLktWaO XMLeBciCn36ayEV+1/5R64kOgLHPgUiA2IqJz+1hDyUs9K9cWiNFlBl4UiRFmTBR oozsbbnvEwVuiUD9UIqyqSk5pjfTJvUrnAm/KueDPRK7omvEeAVr4lwTZbvDcie0 IYt6EtZfY+vGrQYmeW8AL15l0kV8vBb1fL407XWag7G0qUqoUI5YMlGSnD1uwRSH EygUCe6KcyCSnzkbku4XmxZVy6L7wNMNiHkoW+LaS53l6EC+nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkv9L9EAPN8IhbVCtl+XfWVDiXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmZkODA4NGQtZjExOC0z Zjc1LWI2OGUtNmQ3ZTliOTQ1OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU1j+YCKSQkBl8pgxBQnXVV/T6KYL8N5JKuAdNAUid4AuqyTmbS7C+S DkdJHAp0jJszrLpcJH4P9jHweZ9AWReu4d1mky5y2jPCaOuCTosE0+wvX/E0PbVu wt4DigdbWLnI87gZn8tCDBZTl0+1L9ZsLgQTjfaHEkznQuq1RRXcnC3oxyaaa0/a 1sQO1LQM1uVHvSRst+eVhg9eLt7HMTDHCjsditAYbBOHHZ0eul3udPFR4YiWKAw5 zzR6Tk6XGipq6RxkCU/fjWdhujHAH5kq5ZS/7hjAEaEOA1BrAxivc/ZL/bbXTaiT A3HoiGNKTtIN2oRMRG/9Kw9MOd0k2co= -----END CERTIFICATE-----Generated at Sat Sep 26 12:45:44 2026 by rpki-client