$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa File: c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa (raw, json) Hash identifier: FcwbTOEy3FVDQQbdXNKl+InUk2j88UNHTVDud7nWGJM= Subject key identifier: DD:E7:AD:65:83:69:C8:05:E4:E2:44:30:61:DE:CA:37:4A:8A:CB:F3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49899E5F63524E2DA3D8B154 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:9e:5f:63:52:4e:2d:a3:d8:b1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b354294-c0c9-48d9-8a9d-12d6e985fe70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:51:36:3d:3c:cd:6d:52:87:f3:9b:4c:8e: 00:01:cf:9b:4f:58:f9:f5:5d:36:e8:70:46:bc:1b: 13:83:59:d4:e1:85:b2:d3:5d:63:e5:1a:5b:c1:80: b7:cd:b9:44:42:d4:0d:23:7a:30:64:7c:98:aa:c7: d3:4f:fe:2e:2d:ae:d2:e5:62:1d:73:f2:74:61:ae: e6:dd:f9:0a:d5:28:5a:0a:bb:4d:93:ee:6a:d7:71: 7e:b4:89:46:35:91:36:46:78:92:fb:26:38:b6:ab: 71:8b:f1:5c:74:ed:3f:52:84:94:f8:87:42:20:f9: 7c:3f:02:25:49:52:3a:13:7a:1b:11:1f:9a:8b:42: c0:57:25:51:7f:1f:a0:7b:20:c2:a3:90:88:30:6d: c9:8d:39:ef:63:ca:89:3f:11:44:f5:9c:5b:99:a8: 50:e6:17:a2:56:b8:e9:a2:d3:d5:02:75:eb:3a:58: cf:c1:e4:5d:78:81:d6:2e:90:b5:30:c9:d5:4b:d9: 11:dc:0a:2e:43:3a:d3:6a:6c:52:f9:e5:9b:c3:08: 32:6a:db:b5:18:fc:74:e8:d9:5b:98:c0:ac:e4:a3: 0d:f3:72:96:8f:48:f2:b0:22:ad:c8:dd:63:47:54: 45:d8:e3:a9:ab:1f:c9:28:31:b9:58:e8:30:3e:55: bb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E7:AD:65:83:69:C8:05:E4:E2:44:30:61:DE:CA:37:4A:8A:CB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f0:5a:66:f5:39:5f:f6:f7:02:10:99:08:d0:f6:8c:fc:50: 5a:65:51:0b:1c:55:b4:5d:e9:99:45:c5:9d:ce:b7:2a:70:a8: 53:cf:42:e0:cc:23:a7:e9:3e:7b:c6:15:6f:bd:76:14:8d:f9: 04:6a:d1:05:c2:74:ec:51:28:33:aa:13:16:0c:35:24:67:8f: de:7e:85:40:f4:5d:6f:d8:d8:be:42:65:ff:8e:6e:bf:04:d6: 1b:bd:79:7c:1f:28:5f:65:dd:56:aa:95:20:76:fa:21:9e:41: 6d:f8:56:4b:84:30:f4:eb:0c:3f:06:b0:f1:86:00:e7:77:63: c6:90:f2:a0:02:8b:9f:70:fe:80:c2:d0:cd:9c:ad:8c:cb:2c: 75:ae:1f:1e:a4:da:be:e7:ef:7e:02:a9:b1:38:4c:74:f6:0a: c0:be:12:40:8f:fd:f8:3f:a3:50:a4:60:25:31:22:f5:06:d8: 97:9b:23:b9:84:d0:18:a8:2d:7e:b5:b1:75:24:87:30:c1:fc: 2b:76:d0:8c:32:ee:8c:77:40:fb:1e:88:3e:c0:7f:cb:1e:71: ac:7b:83:bd:32:7d:dc:b9:05:73:8f:29:c7:f2:d9:50:1b:e0: 71:8e:51:41:74:32:df:e8:87:cd:72:a7:c0:e4:e8:cc:47:4e: 9b:d3:20:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiZ5fY1JOLaPYsVQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGIzNTQyOTQtYzBjOS00OGQ5LThhOWQtMTJkNmU5ODVmZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8pRNj08zW1Sh/ObTI4AAc+bT1j59V026HBG vBsTg1nU4YWy011j5RpbwYC3zblEQtQNI3owZHyYqsfTT/4uLa7S5WIdc/J0Ya7m 3fkK1ShaCrtNk+5q13F+tIlGNZE2RniS+yY4tqtxi/FcdO0/UoSU+IdCIPl8PwIl SVI6E3obER+ai0LAVyVRfx+geyDCo5CIMG3JjTnvY8qJPxFE9ZxbmahQ5heiVrjp otPVAnXrOljPweRdeIHWLpC1MMnVS9kR3AouQzrTamxS+eWbwwgyatu1GPx06Nlb mMCs5KMN83KWj0jysCKtyN1jR1RF2OOpqx/JKDG5WOgwPlW74wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3nrWWDacgF5OJEMGHeyjdKisvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzZlOWY2YzItYWQzZC0z NGM5LTk2MDktZGJjY2Y3MjdkOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnwWmb1OV/29wIQmQjQ9oz8UFplUQscVbRd6ZlFxZ3OtypwqFPPQuDM I6fpPnvGFW+9dhSN+QRq0QXCdOxRKDOqExYMNSRnj95+hUD0XW/Y2L5CZf+Obr8E 1hu9eXwfKF9l3VaqlSB2+iGeQW34VkuEMPTrDD8GsPGGAOd3Y8aQ8qACi59w/oDC 0M2crYzLLHWuHx6k2r7n734CqbE4THT2CsC+EkCP/fg/o1CkYCUxIvUG2JebI7mE 0BioLX61sXUkhzDB/Ct20Iwy7ox3QPseiD7Af8secax7g70yfdy5BXOPKcfy2VAb 4HGOUUF0Mt/oh81yp8Dk6MxHTpvTIOk= -----END CERTIFICATE-----Generated at Sat Sep 26 00:28:20 2026 by rpki-client