$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd3864df-24b5-341b-a471-671ea4c815ca.roa File: dd3864df-24b5-341b-a471-671ea4c815ca.roa (raw, json) Hash identifier: mbRr2PT7L7Onf9vmJGI/jPo988mESA8vlfH8dFrrbhY= Subject key identifier: 9A:64:3B:6B:DB:04:9C:B8:61:8C:B2:4C:6C:FA:CD:45:00:DE:39:1B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974EDC1454252F64A3A5F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd3864df-24b5-341b-a471-671ea4c815ca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ed:c1:45:42:52:f6:4a:3a:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7aea6a1d-02f0-4c49-96d6-fcf64e0ee4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:60:29:e5:58:f6:48:28:56:4a:81:0e:dc:4d: c0:42:49:14:95:87:07:1f:f6:a2:34:86:13:88:4a: 13:bb:19:00:c3:f8:a0:f8:b9:bb:d3:2a:6b:1e:39: 86:a3:a6:f5:1a:a3:e4:65:dd:e5:da:db:1f:d3:e9: 2e:07:a6:02:af:73:b2:65:14:63:62:aa:76:bd:b7: b5:3e:9c:2c:c3:fa:37:7f:55:9b:8e:a3:81:63:ca: bd:2b:b2:11:b0:93:25:73:cd:2b:a0:26:88:79:7a: 8b:56:04:37:53:25:dd:a1:46:c3:c5:70:f0:69:a9: 95:1a:79:f5:a6:39:1e:44:51:91:6b:70:77:65:05: 44:19:25:43:e7:75:d1:24:62:41:70:3f:f1:35:53: 91:7a:89:71:e4:67:2d:27:9c:a9:d1:ef:5a:2a:15: 34:69:c9:13:d4:7b:49:54:6d:45:49:09:25:62:4f: 3b:e6:54:35:4d:10:46:ce:f1:46:32:9d:f2:87:1e: ed:12:20:22:9d:5b:27:c2:13:ce:6c:d6:ec:fe:bc: 65:76:9e:4e:03:83:8d:a0:e3:32:24:29:07:40:94: e7:e6:36:d0:0c:23:cc:cb:97:dc:e2:cc:f7:e8:d8: 0b:18:1d:c4:d4:40:c2:c9:55:df:c7:37:e7:32:4b: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:64:3B:6B:DB:04:9C:B8:61:8C:B2:4C:6C:FA:CD:45:00:DE:39:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd3864df-24b5-341b-a471-671ea4c815ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:1b:1c:6b:f8:f3:3d:43:f1:25:cf:5c:93:d9:5f:05:0f:fd: d1:dd:0d:48:bb:97:44:88:9d:ac:90:e3:83:13:2b:5d:f3:62: cd:ff:62:a6:be:0e:2b:fd:5c:c1:25:3e:14:e8:17:f2:2c:43: 29:b1:1a:a1:2d:f3:7f:91:ea:f4:bd:87:6b:f3:6b:fd:00:8f: c5:bb:ea:a5:4d:9d:7f:ae:ff:a2:af:5a:9c:3e:b9:fe:6f:23: c2:a5:d9:77:77:6a:84:f4:53:1f:40:5d:24:18:d4:28:14:9f: 23:3c:98:fb:77:8e:24:6c:af:48:cc:f4:07:21:6a:91:af:09: af:6c:95:6a:31:e9:04:18:39:06:67:50:ec:a4:ec:12:b8:d4: 14:81:71:2d:8b:eb:25:04:1c:a0:76:67:e5:67:3f:52:55:83: 20:53:35:c5:fc:58:ed:cb:cf:46:ae:ed:5c:a1:6d:f2:fd:34: b6:d7:08:a7:35:49:a4:72:dd:c0:1f:9c:7f:7f:f3:90:a9:82: 43:a5:e8:a3:5e:f6:c2:0a:0a:23:51:11:0d:0b:a0:17:63:2b: b6:b6:4d:0c:a8:f1:20:0d:27:fa:1f:4b:99:18:5b:b8:2f:83: af:d7:0e:79:70:6b:61:20:aa:e9:c1:df:85:f7:fa:c2:09:72: aa:df:ae:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdO3BRUJS9ko6X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2FlYTZhMWQtMDJmMC00YzQ5LTk2ZDYtZmNmNjRlMGVlNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWAp5Vj2SChWSoEO3E3AQkkUlYcHH/aiNIYT iEoTuxkAw/ig+Lm70yprHjmGo6b1GqPkZd3l2tsf0+kuB6YCr3OyZRRjYqp2vbe1 Ppwsw/o3f1WbjqOBY8q9K7IRsJMlc80roCaIeXqLVgQ3UyXdoUbDxXDwaamVGnn1 pjkeRFGRa3B3ZQVEGSVD53XRJGJBcD/xNVOReolx5GctJ5yp0e9aKhU0ackT1HtJ VG1FSQklYk875lQ1TRBGzvFGMp3yhx7tEiAinVsnwhPObNbs/rxldp5OA4ONoOMy JCkHQJTn5jbQDCPMy5fc4sz36NgLGB3E1EDCyVXfxzfnMkuSpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpkO2vbBJy4YYyyTGz6zUUA3jkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGQzODY0ZGYtMjRiNS0z NDFiLWE0NzEtNjcxZWE0YzgxNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkbHGv48z1D8SXPXJPZXwUP/dHdDUi7l0SInayQ44MTK13zYs3/Yqa+ Div9XMElPhToF/IsQymxGqEt83+R6vS9h2vza/0Aj8W76qVNnX+u/6KvWpw+uf5v I8Kl2Xd3aoT0Ux9AXSQY1CgUnyM8mPt3jiRsr0jM9AchapGvCa9slWox6QQYOQZn UOyk7BK41BSBcS2L6yUEHKB2Z+VnP1JVgyBTNcX8WO3Lz0au7VyhbfL9NLbXCKc1 SaRy3cAfnH9/85CpgkOl6KNe9sIKCiNREQ0LoBdjK7a2TQyo8SANJ/ofS5kYW7gv g6/XDnlwa2EgqunB34X3+sIJcqrfrlQ= -----END CERTIFICATE-----Generated at Fri Sep 25 18:32:56 2026 by rpki-client