$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa File: c1625472-18de-3d1e-a0f1-7bbc7f729425.roa (raw, json) Hash identifier: hNZepBrBl/I3XLHlBlfwChjhOd0kdv88QqyYb7IilPc= Subject key identifier: 42:25:EE:CC:66:86:6C:41:7E:CF:72:27:3F:5C:9C:E9:46:02:E7:8E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F497332CE2C0999D18E840F74 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:32:ce:2c:09:99:d1:8e:84:0f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0fb7320c-93e4-4bf7-9552-d434fc542226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:0b:b2:01:db:cf:5a:d8:3d:a7:8c:0e:eb: 11:ea:7f:77:cc:64:22:6e:d1:87:38:bb:fe:f7:a2: 0c:2b:bc:79:18:96:7a:7f:73:48:e9:4d:22:1c:19: ce:28:4e:e4:25:81:5c:46:5a:3a:f3:92:86:4b:b8: b6:e1:6c:21:77:75:39:69:a0:9c:0c:a7:21:cf:f3: ec:b4:5e:fb:7e:7a:da:a2:4c:e5:ba:7b:66:93:d6: c7:52:a9:f6:55:2e:bd:bb:54:6c:e5:56:72:0d:35: 5a:b0:29:88:1e:7c:bb:e2:97:87:5e:f3:03:d7:f9: fb:1d:be:89:f2:79:70:ed:20:d1:b0:9e:b3:c3:52: bd:ca:bc:76:d2:a1:ec:4d:ea:78:d8:1e:bc:4f:ff: 4b:bc:52:a6:e4:a2:93:e4:fc:c1:0b:b0:06:26:c0: 11:ab:1c:1d:a8:ac:14:92:33:d4:73:3b:79:3e:d1: 95:ab:64:4f:1f:29:45:95:1c:c2:3e:56:f6:1a:43: f0:6e:39:af:dc:d4:9e:73:76:14:30:f7:a3:ea:44: b5:58:1e:f3:1d:5a:0a:a9:8a:6e:b9:c3:cf:f5:c3: d2:c1:15:3d:3d:dd:bb:d2:b4:25:d5:45:79:49:2d: bd:35:28:ab:5b:dd:70:55:c6:4d:03:e9:2c:d4:9d: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:25:EE:CC:66:86:6C:41:7E:CF:72:27:3F:5C:9C:E9:46:02:E7:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f2:29:17:50:43:21:3b:c0:e2:b1:a6:d8:6e:62:5a:4b:d1: 6c:0a:3b:3b:d4:c5:f1:3f:f3:b0:17:57:41:f4:73:dc:6a:be: 6f:83:51:8c:c1:fa:d3:d7:af:c1:b2:d0:9b:f0:18:27:18:6d: c2:71:33:bc:c2:bb:80:d5:0b:6e:b4:93:cc:45:3d:44:87:36: 08:d1:91:32:97:00:b6:61:f0:54:67:61:4a:55:4b:ac:29:d3: d4:eb:e1:e4:11:5b:6b:66:48:c1:dd:25:df:ad:ae:2d:d9:2b: 92:6b:c5:34:2f:c6:7c:a2:dd:69:18:02:99:20:66:8a:d6:7b: 30:04:1b:8c:d5:a6:a3:22:d4:4b:b2:e5:b7:51:d8:ef:bd:bd: 15:82:05:bd:94:d3:07:a8:fa:fb:29:8d:ac:66:66:27:7b:71: e6:ea:29:06:ee:2c:a2:5c:0d:e8:0f:af:a1:ec:4d:2b:f7:95: ac:16:6c:b0:64:1a:8e:80:20:79:c4:e6:90:d2:0f:5e:d7:69: 24:9b:b4:2a:71:37:23:04:67:80:fb:62:85:bf:fb:7b:05:46: f4:c4:b4:50:c8:81:0d:d9:78:ad:bd:d2:60:6a:4e:9c:47:83: 90:2d:37:38:0b:dc:10:d4:15:d4:17:06:1c:ba:ad:65:13:0d: b0:b1:35:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczLOLAmZ0Y6ED3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGZiNzMyMGMtOTNlNC00YmY3LTk1NTItZDQzNGZjNTQyMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1cLsgHbz1rYPaeMDusR6n93zGQibtGHOLv+ 96IMK7x5GJZ6f3NI6U0iHBnOKE7kJYFcRlo685KGS7i24Wwhd3U5aaCcDKchz/Ps tF77fnraokzluntmk9bHUqn2VS69u1Rs5VZyDTVasCmIHny74peHXvMD1/n7Hb6J 8nlw7SDRsJ6zw1K9yrx20qHsTep42B68T/9LvFKm5KKT5PzBC7AGJsARqxwdqKwU kjPUczt5PtGVq2RPHylFlRzCPlb2GkPwbjmv3NSec3YUMPej6kS1WB7zHVoKqYpu ucPP9cPSwRU9Pd270rQl1UV5SS29NSirW91wVcZNA+ks1J3P0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIl7sxmhmxBfs9yJz9cnOlGAueOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzE2MjU0NzItMThkZS0z ZDFlLWEwZjEtN2JiYzdmNzI5NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvyKRdQQyE7wOKxpthuYlpL0WwKOzvUxfE/87AXV0H0c9xqvm+DUYzB +tPXr8Gy0JvwGCcYbcJxM7zCu4DVC260k8xFPUSHNgjRkTKXALZh8FRnYUpVS6wp 09Tr4eQRW2tmSMHdJd+tri3ZK5JrxTQvxnyi3WkYApkgZorWezAEG4zVpqMi1Euy 5bdR2O+9vRWCBb2U0weo+vspjaxmZid7cebqKQbuLKJcDegPr6HsTSv3lawWbLBk Go6AIHnE5pDSD17XaSSbtCpxNyMEZ4D7YoW/+3sFRvTEtFDIgQ3ZeK290mBqTpxH g5AtNzgL3BDUFdQXBhy6rWUTDbCxNcQ= -----END CERTIFICATE-----Generated at Fri Sep 25 08:07:35 2026 by rpki-client