$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f033c8e4-cff3-3b95-af18-42198ad5c50f.roa File: f033c8e4-cff3-3b95-af18-42198ad5c50f.roa (raw, json) Hash identifier: rzNveE3a02EekeWnQIiJS7JcivG6gx3rZOZNm+D5Gxg= Subject key identifier: 91:04:B3:10:C9:2D:A8:BD:4E:FF:AE:E0:29:19:6F:5A:66:A6:59:6D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4989B4E5B8E09CCAC3FDC840 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f033c8e4-cff3-3b95-af18-42198ad5c50f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:b4:e5:b8:e0:9c:ca:c3:fd:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=114099ad-3512-4a91-8c10-4204fd3d03f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:26:54:2e:30:82:b6:e3:c2:7c:e9:fa:86:19: 9c:00:64:70:8a:34:ba:12:c5:7d:92:62:43:60:7b: 5d:a4:2d:cf:6a:4b:6b:2b:35:b3:25:da:fd:36:de: d6:f4:f8:56:bd:26:15:8c:de:68:78:a7:7b:3b:fd: de:61:f7:e5:55:77:70:df:b2:df:b8:0d:a5:8a:c2: a0:f5:75:d4:80:86:2a:f3:21:42:50:ea:f8:bc:66: 11:08:e2:f5:06:a8:ab:9f:da:fc:90:0c:6c:f6:52: 0d:17:a1:85:14:58:2e:6a:de:27:59:51:07:d5:6d: fe:47:4e:c5:d4:d6:9a:d6:c8:5f:3d:d6:7e:9d:82: ca:23:1c:90:94:95:74:07:dc:66:a1:4a:06:ea:51: cb:19:02:21:ff:f1:cb:68:07:e2:91:9f:e8:ee:c3: 23:23:8a:71:90:cd:f3:3a:46:93:5d:be:c5:0c:77: e6:76:54:80:00:9c:6c:fa:3d:e0:3a:fe:96:e6:12: a5:4d:16:70:03:4a:08:f0:04:22:58:fb:5d:05:d9: 15:74:7f:b5:c5:c9:e0:78:cd:57:ff:86:8f:6a:52: 06:ab:f1:c7:f6:9b:fd:25:ef:d1:7e:f0:d5:a7:2a: 28:28:69:0a:33:c8:69:80:54:f4:02:7c:a7:e5:b2: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:04:B3:10:C9:2D:A8:BD:4E:FF:AE:E0:29:19:6F:5A:66:A6:59:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f033c8e4-cff3-3b95-af18-42198ad5c50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c1:5f:5b:dc:49:04:4b:84:f3:7f:55:7d:a3:8b:3e:9f:58: c2:2e:ab:43:5d:63:6a:9a:81:54:e4:bb:60:8b:07:d4:42:26: 00:e3:70:b4:31:c4:26:af:07:c2:b6:06:67:d1:2b:07:98:bc: 15:fe:ec:30:08:cc:fd:ae:6c:33:47:2a:4e:aa:c1:17:a2:f0: cb:4d:bf:ae:5a:07:85:b9:01:d7:f2:42:d7:a8:41:4c:74:39: 93:5c:a4:80:61:4b:e3:87:ac:56:64:84:77:4d:5e:06:cf:6c: b8:07:f9:6e:08:ae:41:f0:b8:5c:7c:94:79:7d:31:a3:f6:a5: 6d:05:5f:58:bd:7a:49:bc:46:bb:51:a0:7f:74:4a:b0:57:81: e9:ea:5f:79:69:0a:f1:28:3f:02:ab:47:1b:90:6d:76:7e:53: d0:7c:26:d9:d5:33:3e:01:09:23:7a:a0:72:42:74:f6:85:b0: 07:dc:27:d7:af:6d:40:16:a9:0e:27:16:53:7e:ae:7e:ad:48: b9:66:06:18:ff:2d:bb:d0:fb:60:59:47:50:51:0a:9d:b7:04: 24:be:01:bf:45:07:7a:98:94:23:25:44:75:df:9e:54:74:73: a3:27:f0:7b:7d:ff:3c:48:b0:f2:dc:c9:1e:4b:65:32:fe:2f: 39:c9:be:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JibTluOCcysP9yEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTE0MDk5YWQtMzUxMi00YTkxLThjMTAtNDIwNGZkM2QwM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCZULjCCtuPCfOn6hhmcAGRwijS6EsV9kmJD YHtdpC3PaktrKzWzJdr9Nt7W9PhWvSYVjN5oeKd7O/3eYfflVXdw37LfuA2lisKg 9XXUgIYq8yFCUOr4vGYRCOL1Bqirn9r8kAxs9lINF6GFFFguat4nWVEH1W3+R07F 1Naa1shfPdZ+nYLKIxyQlJV0B9xmoUoG6lHLGQIh//HLaAfikZ/o7sMjI4pxkM3z OkaTXb7FDHfmdlSAAJxs+j3gOv6W5hKlTRZwA0oI8AQiWPtdBdkVdH+1xcngeM1X /4aPalIGq/HH9pv9Je/RfvDVpyooKGkKM8hpgFT0Anyn5bL4lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEEsxDJLai9Tv+u4CkZb1pmplltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjAzM2M4ZTQtY2ZmMy0z Yjk1LWFmMTgtNDIxOThhZDVjNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjBX1vcSQRLhPN/VX2jiz6fWMIuq0NdY2qagVTku2CLB9RCJgDjcLQx xCavB8K2BmfRKweYvBX+7DAIzP2ubDNHKk6qwRei8MtNv65aB4W5AdfyQteoQUx0 OZNcpIBhS+OHrFZkhHdNXgbPbLgH+W4IrkHwuFx8lHl9MaP2pW0FX1i9ekm8RrtR oH90SrBXgenqX3lpCvEoPwKrRxuQbXZ+U9B8JtnVMz4BCSN6oHJCdPaFsAfcJ9ev bUAWqQ4nFlN+rn6tSLlmBhj/LbvQ+2BZR1BRCp23BCS+Ab9FB3qYlCMlRHXfnlR0 c6Mn8Ht9/zxIsPLcyR5LZTL+LznJvqY= -----END CERTIFICATE-----Generated at Fri Sep 25 15:20:13 2026 by rpki-client