$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c7441be3-018c-32a7-b3c8-000af3cc3e5e.roa File: c7441be3-018c-32a7-b3c8-000af3cc3e5e.roa (raw, json) Hash identifier: LzbHftNG0MDIODAG+6E4LO35WZIYy6gDCZ+a4XUfmtc= Subject key identifier: DE:A7:DF:5B:49:4F:92:6C:43:26:DE:C5:95:F2:A6:3F:EE:88:BB:A8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4988BC15F15D63A07B0496C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c7441be3-018c-32a7-b3c8-000af3cc3e5e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:bc:15:f1:5d:63:a0:7b:04:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=90d9603e-a6eb-4e14-a9e0-29084699d5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:b9:5c:f2:ed:fc:c7:5c:eb:0f:e8:64:68: 37:fb:fd:9f:92:7b:6a:eb:dd:7e:02:1b:c9:d7:4e: 8d:a8:af:5b:2d:a5:ec:c4:84:f7:04:7b:7d:52:95: 9d:2b:1e:2b:40:d3:21:91:a8:39:9a:54:6c:a0:54: 34:1d:b8:15:20:55:b2:0a:8f:19:20:f6:aa:04:23: e5:4d:c1:b3:01:aa:6f:dd:8c:4d:04:34:88:cf:d8: 8b:a8:62:81:b2:d5:b3:5c:4f:79:9b:68:c1:c5:f2: 49:84:c7:4e:c0:2d:b1:62:32:57:df:0d:ab:4f:69: 30:b9:41:c7:ca:e0:3d:fa:8e:99:d7:b3:60:7d:54: 8b:b9:93:f6:20:d8:40:b5:e2:6f:35:eb:e3:71:45: ce:2b:77:b9:3c:09:5b:d7:05:11:e2:dc:df:2f:ec: 78:af:c3:e2:b0:86:ff:26:ab:91:04:7f:6e:24:19: a3:aa:f9:8b:0a:18:89:c8:70:f2:c1:24:e5:39:ff: 93:fe:17:3d:6b:67:47:20:1c:3b:c0:43:0c:a4:31: d2:8d:0c:24:44:24:04:46:75:02:ad:07:ca:be:e3: 8e:b3:b6:42:46:e3:26:10:0d:53:b5:99:14:33:92: 71:d9:e3:f6:54:7a:f1:f4:46:a1:57:a9:f3:1c:8e: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A7:DF:5B:49:4F:92:6C:43:26:DE:C5:95:F2:A6:3F:EE:88:BB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c7441be3-018c-32a7-b3c8-000af3cc3e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ac:8b:2c:75:cc:26:c5:82:7f:d6:91:c5:dc:e7:7e:4c:2a: 1f:03:fa:89:84:34:e7:c7:e4:5a:e2:4c:af:40:d2:b7:c2:b7: 43:86:52:1f:01:b5:e1:4a:d9:10:a3:65:16:cd:7c:8c:eb:84: dc:fd:4f:d8:66:e6:b5:f9:16:75:94:f0:cb:b9:f3:89:e2:d8: 96:b1:fb:78:f4:f7:26:db:97:a7:1b:fc:9a:9e:6a:24:09:45: ba:b0:1b:e9:8c:c7:8c:0d:b2:0b:12:17:68:ac:3a:6d:5a:e3: f1:8c:50:a2:d3:ff:a6:2f:44:6d:cf:49:7b:57:9f:39:4f:1d: c7:36:d0:5e:97:f4:d4:24:fc:b3:a7:63:71:ef:ef:39:81:cf: 16:98:82:eb:65:99:10:5e:ec:21:58:e6:57:78:b6:3b:e8:28: 83:99:77:c2:23:c2:db:47:c2:51:12:71:04:6e:23:64:08:a5: 4e:a6:0b:10:e2:37:31:d1:4d:0c:bf:af:39:7c:b7:f2:ff:98: 1d:51:bb:4d:1a:55:59:83:f9:cc:08:bd:80:b8:c8:57:43:65: 84:b5:9e:ba:bf:48:94:c2:0e:4c:e5:08:72:96:0b:27:30:24: 31:14:29:75:c1:fb:77:b1:d9:96:a4:fd:aa:9c:27:ee:1a:30: a7:26:08:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiLwV8V1joHsElsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTBkOTYwM2UtYTZlYi00ZTE0LWE5ZTAtMjkwODQ2OTlkNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM+5XPLt/Mdc6w/oZGg3+/2fkntq691+AhvJ 106NqK9bLaXsxIT3BHt9UpWdKx4rQNMhkag5mlRsoFQ0HbgVIFWyCo8ZIPaqBCPl TcGzAapv3YxNBDSIz9iLqGKBstWzXE95m2jBxfJJhMdOwC2xYjJX3w2rT2kwuUHH yuA9+o6Z17NgfVSLuZP2INhAteJvNevjcUXOK3e5PAlb1wUR4tzfL+x4r8PisIb/ JquRBH9uJBmjqvmLChiJyHDywSTlOf+T/hc9a2dHIBw7wEMMpDHSjQwkRCQERnUC rQfKvuOOs7ZCRuMmEA1TtZkUM5Jx2eP2VHrx9EahV6nzHI5H7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6n31tJT5JsQybexZXypj/uiLuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzc0NDFiZTMtMDE4Yy0z MmE3LWIzYzgtMDAwYWYzY2MzZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOsiyx1zCbFgn/WkcXc535MKh8D+omENOfH5FriTK9A0rfCt0OGUh8B teFK2RCjZRbNfIzrhNz9T9hm5rX5FnWU8Mu584ni2Jax+3j09ybbl6cb/JqeaiQJ RbqwG+mMx4wNsgsSF2isOm1a4/GMUKLT/6YvRG3PSXtXnzlPHcc20F6X9NQk/LOn Y3Hv7zmBzxaYgutlmRBe7CFY5ld4tjvoKIOZd8IjwttHwlEScQRuI2QIpU6mCxDi NzHRTQy/rzl8t/L/mB1Ru00aVVmD+cwIvYC4yFdDZYS1nrq/SJTCDkzlCHKWCycw JDEUKXXB+3ex2Zak/aqcJ+4aMKcmCGI= -----END CERTIFICATE-----Generated at Fri Sep 25 06:42:42 2026 by rpki-client