$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa File: ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa (raw, json) Hash identifier: w5ttbYKIkNdpwfrOSOpMMwRwJAHsCc2/JP2YxW6U9kM= Subject key identifier: 00:74:26:0E:70:24:E3:6B:27:67:37:E7:01:9D:C8:BC:A0:9E:D7:3C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49878860B6E10DEA913F4300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:88:60:b6:e1:0d:ea:91:3f:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3c9ca629-7551-407e-aeb2-24f03d36895a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:4b:5a:26:f9:9a:e5:ab:4d:2a:fd:51:30: 4d:76:a0:7d:25:ec:8d:99:81:8d:0e:6c:86:1b:07: 6b:95:9c:67:a6:df:9a:4e:78:99:2f:31:d7:f9:24: 5a:8c:f7:81:7a:96:73:b8:dd:0e:2d:79:c9:cb:74: 6e:c6:73:d9:d5:68:17:9f:2a:54:4c:5e:4e:83:88: b3:b4:17:2b:84:0e:1d:c9:95:43:d4:23:c2:c6:83: 83:95:bb:b9:17:d4:7e:04:d1:30:b1:5f:d2:60:bf: 0b:62:83:1f:c9:37:25:a6:35:bc:2c:8e:19:6c:af: 88:56:bd:32:9c:30:0b:aa:12:83:d8:a4:b6:91:36: bb:f5:0e:ce:77:f6:0e:4e:9e:2c:39:85:e7:ca:a3: de:90:c7:3f:c9:55:7b:f5:4b:9a:61:84:2f:13:cc: 66:b7:be:fd:e1:0b:82:1a:32:80:90:6b:c0:5c:cb: 3c:94:f8:a6:01:f4:54:b7:ac:dc:8a:d8:ed:d7:1d: e5:a9:e3:ef:c9:c1:25:20:5b:18:86:68:76:37:e4: 2b:78:5e:14:d7:31:c6:38:03:53:60:37:40:53:cd: 46:8c:d1:f7:fd:6f:83:d2:70:fd:05:83:e3:82:f3: 4d:e2:5b:6c:26:ce:c4:65:27:77:a5:bb:0b:d0:e6: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:74:26:0E:70:24:E3:6B:27:67:37:E7:01:9D:C8:BC:A0:9E:D7:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c9:b4:89:3f:e1:30:c5:db:51:da:6f:dc:0a:85:37:54:39: eb:60:94:49:be:26:5f:81:ad:d9:03:77:32:4b:c5:7b:6d:47: ea:a0:93:1b:48:24:f5:18:95:54:83:96:90:22:dd:5e:a7:36: 0d:a1:07:b2:35:1b:47:68:ed:55:2b:26:67:ce:b5:29:30:03: 70:15:34:b7:bd:04:33:7e:ab:66:f0:a3:50:71:76:21:6b:bf: ce:0c:5b:5f:27:18:86:6c:3c:43:a8:fe:34:64:01:7b:38:d3: 59:68:1c:5c:2d:28:fb:05:bb:17:24:93:70:0b:12:df:02:8c: 6b:b8:81:ce:ba:cf:18:9d:82:66:18:3f:29:9f:c4:90:e1:46: fd:c2:42:1e:7d:1d:79:54:b4:f8:29:f1:bf:d6:b0:18:08:ef: 64:52:f7:7b:bd:b1:86:7c:8e:ea:5a:06:57:f9:6d:fe:84:ea: ba:34:56:48:7a:b7:a1:80:1a:25:f6:cc:49:83:3d:95:03:65: c9:b1:e9:96:7a:07:a0:b9:91:b2:7c:bd:43:c0:8e:c4:07:6a: 90:6a:70:8a:ac:27:88:1b:53:19:f4:55:c2:89:95:d7:aa:89: 4b:d7:75:57:5e:c4:16:45:39:da:d2:10:73:02:36:96:de:4b: 81:8e:10:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh4hgtuEN6pE/QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2M5Y2E2MjktNzU1MS00MDdlLWFlYjItMjRmMDNkMzY4OTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZZLWib5muWrTSr9UTBNdqB9JeyNmYGNDmyG GwdrlZxnpt+aTniZLzHX+SRajPeBepZzuN0OLXnJy3RuxnPZ1WgXnypUTF5Og4iz tBcrhA4dyZVD1CPCxoODlbu5F9R+BNEwsV/SYL8LYoMfyTclpjW8LI4ZbK+IVr0y nDALqhKD2KS2kTa79Q7Od/YOTp4sOYXnyqPekMc/yVV79UuaYYQvE8xmt7794QuC GjKAkGvAXMs8lPimAfRUt6zcitjt1x3lqePvycElIFsYhmh2N+QreF4U1zHGOANT YDdAU81GjNH3/W+D0nD9BYPjgvNN4ltsJs7EZSd3pbsL0Oau/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB0Jg5wJONrJ2c35wGdyLygntc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGRiMjIzODItMGYyYi0z YTdmLWJjNTctMjY4ZjhiMjVhOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRalMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/JtIk/4TDF21Hab9wKhTdUOetglEm+Jl+BrdkDdzJLxXttR+qgkxtI JPUYlVSDlpAi3V6nNg2hB7I1G0do7VUrJmfOtSkwA3AVNLe9BDN+q2bwo1BxdiFr v84MW18nGIZsPEOo/jRkAXs401loHFwtKPsFuxckk3ALEt8CjGu4gc66zxidgmYY PymfxJDhRv3CQh59HXlUtPgp8b/WsBgI72RS93u9sYZ8jupaBlf5bf6E6ro0Vkh6 t6GAGiX2zEmDPZUDZcmx6ZZ6B6C5kbJ8vUPAjsQHapBqcIqsJ4gbUxn0VcKJldeq iUvXdVdexBZFOdrSEHMCNpbeS4GOEGc= -----END CERTIFICATE-----Generated at Fri Sep 25 17:48:06 2026 by rpki-client