$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa File: d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa (raw, json) Hash identifier: r/lOrGxgjenFkFzyYR+8CPMjCaOOXcFCWTAttDBGocA= Subject key identifier: 57:81:E9:88:3E:AC:F9:67:96:7D:BF:A6:AD:8C:D7:FA:53:79:19:CC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F497461E52701B96B9357FB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:61:e5:27:01:b9:6b:93:57:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=734f2193-cd32-46ef-b72c-dbf8a46bb023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e1:5d:2f:af:74:61:20:11:2a:b8:2e:0c:a6: d1:bc:2a:96:b8:8e:fd:08:64:fd:69:75:46:a0:06: 3c:a4:d4:7f:9a:9c:eb:0d:cc:1b:09:bd:75:bf:b7: 93:37:d1:02:6a:86:aa:db:4a:03:d5:3a:d4:ba:b1: 68:a7:70:a0:1a:76:89:2a:1e:b2:91:d8:fa:ac:c4: ce:dd:f6:b0:da:dd:d1:bc:5b:11:dc:d1:8d:bc:01: 01:af:c1:02:db:0c:00:66:17:c3:5b:81:62:16:4a: f6:fa:71:11:5d:a8:b4:98:98:0e:ed:34:34:a4:29: ae:c4:4e:61:6e:00:e7:4f:d4:8d:b8:e0:75:87:0d: ea:25:20:c0:48:dd:2c:4f:d6:f7:0a:84:1c:1f:0f: 2e:35:ae:08:65:24:ad:aa:34:71:ac:6a:a7:be:4b: 2c:68:77:ea:f3:01:76:85:b2:da:2f:17:37:11:8d: 8b:12:8d:33:ae:e1:cd:ea:d9:00:bb:e7:e3:d6:9e: 87:d9:47:4c:3e:57:72:8d:26:ca:53:81:3f:03:29: 93:07:ef:e1:0f:79:b3:6c:cd:0b:0a:48:5b:39:a2: 68:a7:b5:9b:e0:d8:60:3b:5b:37:97:5f:37:81:47: f2:a5:27:30:96:18:e9:4e:04:bb:08:f0:b4:b8:36: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:81:E9:88:3E:AC:F9:67:96:7D:BF:A6:AD:8C:D7:FA:53:79:19:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f9:7d:c6:64:e3:51:d1:10:96:b1:85:fe:d6:33:9a:d9:4c: c5:4e:8c:ac:a8:49:f9:06:66:8b:36:c8:b6:43:1f:f5:a5:46: 03:60:21:39:f9:54:f4:27:ac:eb:47:b6:65:84:0c:ee:f4:73: 35:b8:de:1f:20:11:3a:da:e2:05:56:8c:8e:d9:7d:59:f3:1c: 48:71:a7:6f:e4:31:df:36:4f:fa:4d:6c:8a:29:9b:6c:e7:3f: a3:3e:22:ad:f8:6f:2c:fd:11:04:f9:8f:51:41:96:5f:47:71: 93:32:57:23:83:bb:0c:a2:75:06:75:df:63:be:0d:6b:f6:66: 1b:4f:b8:1d:41:b6:28:38:7c:9a:cf:0a:7b:de:84:e8:c9:d4: ca:cc:3a:53:47:66:6f:b8:4a:bb:c5:7d:db:91:b6:46:cc:69: 7b:a9:ae:23:31:c0:a8:a3:55:70:36:74:3b:b5:a0:67:95:04: 8c:ac:8d:07:07:cb:47:bf:65:e6:09:99:33:26:63:41:6d:c5: 02:c8:0f:43:ec:08:8b:b1:2c:9a:e0:14:10:bc:f1:57:23:48: ac:88:2e:50:ef:cb:c4:50:63:80:cf:ce:44:20:03:22:1b:5e: f6:96:90:bf:e8:e3:93:46:8f:6b:64:72:79:21:8c:35:13:69: dd:e0:40:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGHlJwG5a5NX+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzM0ZjIxOTMtY2QzMi00NmVmLWI3MmMtZGJmOGE0NmJiMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuFdL690YSARKrguDKbRvCqWuI79CGT9aXVG oAY8pNR/mpzrDcwbCb11v7eTN9ECaoaq20oD1TrUurFop3CgGnaJKh6ykdj6rMTO 3faw2t3RvFsR3NGNvAEBr8EC2wwAZhfDW4FiFkr2+nERXai0mJgO7TQ0pCmuxE5h bgDnT9SNuOB1hw3qJSDASN0sT9b3CoQcHw8uNa4IZSStqjRxrGqnvkssaHfq8wF2 hbLaLxc3EY2LEo0zruHN6tkAu+fj1p6H2UdMPldyjSbKU4E/AymTB+/hD3mzbM0L CkhbOaJop7Wb4NhgO1s3l183gUfypScwlhjpTgS7CPC0uDayCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeB6Yg+rPlnln2/pq2M1/pTeRnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDc3NmZhMGEtOGYxMS0z MmY1LWE2ZjUtNjYzOWMxOWYwODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv5fcZk41HREJaxhf7WM5rZTMVOjKyoSfkGZos2yLZDH/WlRgNgITn5 VPQnrOtHtmWEDO70czW43h8gETra4gVWjI7ZfVnzHEhxp2/kMd82T/pNbIopm2zn P6M+Iq34byz9EQT5j1FBll9HcZMyVyODuwyidQZ132O+DWv2ZhtPuB1Btig4fJrP CnvehOjJ1MrMOlNHZm+4SrvFfduRtkbMaXupriMxwKijVXA2dDu1oGeVBIysjQcH y0e/ZeYJmTMmY0FtxQLID0PsCIuxLJrgFBC88VcjSKyILlDvy8RQY4DPzkQgAyIb XvaWkL/o45NGj2tkcnkhjDUTad3gQNg= -----END CERTIFICATE-----Generated at Fri Sep 25 19:51:27 2026 by rpki-client