$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d4eee336-418f-33ec-ae83-52005dedb02e.roa File: d4eee336-418f-33ec-ae83-52005dedb02e.roa (raw, json) Hash identifier: eDlK6YaTAQHSCQRVOF1T6L+00/YncevFtq46vBfFlv8= Subject key identifier: 3A:5E:81:EA:FE:9F:87:06:0E:AA:E9:9E:43:A5:08:9B:B2:8E:BD:80 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498B3A5ACC8C3DEBA317C9C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d4eee336-418f-33ec-ae83-52005dedb02e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:3a:5a:cc:8c:3d:eb:a3:17:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=50e1acf5-8495-417f-895e-cbb40913adf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:95:1e:48:23:5f:ec:03:c9:95:9b:ef:2e: b1:bb:7a:76:b8:d8:bc:5f:0c:e1:c7:c4:90:4f:2e: 88:63:a9:8b:1a:63:67:52:7a:a6:90:34:ca:2d:fa: 5c:3f:8f:58:39:a1:4c:c6:84:6c:50:c2:64:6f:1a: ff:a1:26:3c:77:80:b1:b3:65:3e:cc:f4:93:70:22: 2c:69:d8:86:e6:09:f6:f4:0f:48:f3:b5:96:9a:d1: 13:20:2e:49:bd:9b:4e:00:40:87:b0:5b:bb:91:c6: f0:7f:a9:16:76:d4:e9:ae:fb:ca:2a:6f:e0:32:f8: 09:f3:33:bd:86:46:df:f3:75:68:31:51:73:8b:04: 6e:a7:00:95:21:2a:19:31:0f:e4:2b:60:83:d4:64: dd:71:5c:a8:3a:e0:5e:59:31:6e:5c:df:63:64:98: 70:3e:56:7d:5b:3c:1f:fb:f6:8e:8f:ce:9b:8c:18: e1:eb:59:b6:cd:41:11:a6:38:0a:bd:02:ce:20:52: b6:81:67:9a:60:bc:c5:9e:a8:8e:ff:83:91:16:b5: 5c:23:11:ee:f8:f5:f1:19:73:8a:11:71:82:b1:5b: 70:d7:58:1f:97:a3:5a:4d:14:73:4f:c1:e9:fd:97: 4d:4a:49:8d:c9:4e:5a:28:0b:87:21:2e:fa:4d:a5: 25:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5E:81:EA:FE:9F:87:06:0E:AA:E9:9E:43:A5:08:9B:B2:8E:BD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d4eee336-418f-33ec-ae83-52005dedb02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:87:a1:9d:2b:a7:96:1e:d3:c1:a9:b3:50:56:30:5b:40:01: 7c:0f:ad:08:e3:f4:3b:d3:09:8b:3e:88:89:c9:d5:18:22:c8: 53:e4:a6:c2:cb:5b:b7:bf:30:80:e5:1a:1e:72:b9:53:93:2e: 11:29:fc:77:1f:1a:4f:f5:9a:fb:b5:69:21:18:a7:e4:d0:67: 52:c5:e4:5a:ee:52:67:aa:66:73:f8:68:70:6a:7c:a6:aa:c1: 4b:80:74:b6:2f:3b:fa:44:ba:46:60:c5:03:e0:68:b8:34:17: 63:8a:c4:ce:c5:8d:47:ff:c3:8f:a0:ca:e0:51:de:d9:2b:f0: 49:a0:94:41:45:33:9e:92:8d:14:e9:d0:33:bb:8f:ec:cb:ff: 59:f6:19:f7:7c:e5:c8:a9:99:cc:78:53:b8:7c:1e:39:b5:3e: 32:14:44:dd:98:c6:4b:32:ac:c7:25:17:a5:3f:ef:49:7a:d3: 08:c3:47:d5:66:8f:a1:f2:7b:98:34:e7:ed:01:62:91:c0:73: b1:0d:5d:b1:df:1b:ae:08:b5:74:53:31:b4:85:4d:73:ac:10: 01:00:53:20:d2:da:e2:bc:cc:d9:b5:19:38:06:c8:03:0a:3b: a0:8f:ff:ae:b9:86:8c:21:14:3e:41:c5:31:f5:48:b2:de:de: 00:ba:d1:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JizpazIw966MXycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTBlMWFjZjUtODQ5NS00MTdmLTg5NWUtY2JiNDA5MTNhZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS6VHkgjX+wDyZWb7y6xu3p2uNi8Xwzhx8SQ Ty6IY6mLGmNnUnqmkDTKLfpcP49YOaFMxoRsUMJkbxr/oSY8d4Cxs2U+zPSTcCIs adiG5gn29A9I87WWmtETIC5JvZtOAECHsFu7kcbwf6kWdtTprvvKKm/gMvgJ8zO9 hkbf83VoMVFziwRupwCVISoZMQ/kK2CD1GTdcVyoOuBeWTFuXN9jZJhwPlZ9Wzwf +/aOj86bjBjh61m2zUERpjgKvQLOIFK2gWeaYLzFnqiO/4ORFrVcIxHu+PXxGXOK EXGCsVtw11gfl6NaTRRzT8Hp/ZdNSkmNyU5aKAuHIS76TaUl3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpeger+n4cGDqrpnkOlCJuyjr2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDRlZWUzMzYtNDE4Zi0z M2VjLWFlODMtNTIwMDVkZWRiMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqHoZ0rp5Ye08Gps1BWMFtAAXwPrQjj9DvTCYs+iInJ1RgiyFPkpsLL W7e/MIDlGh5yuVOTLhEp/HcfGk/1mvu1aSEYp+TQZ1LF5FruUmeqZnP4aHBqfKaq wUuAdLYvO/pEukZgxQPgaLg0F2OKxM7FjUf/w4+gyuBR3tkr8EmglEFFM56SjRTp 0DO7j+zL/1n2Gfd85cipmcx4U7h8Hjm1PjIURN2YxksyrMclF6U/70l60wjDR9Vm j6Hye5g05+0BYpHAc7ENXbHfG64ItXRTMbSFTXOsEAEAUyDS2uK8zNm1GTgGyAMK O6CP/665howhFD5BxTH1SLLe3gC60XQ= -----END CERTIFICATE-----Generated at Fri Sep 25 06:42:26 2026 by rpki-client