$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa File: f814eaa4-d9f2-3117-939f-565eea6ef078.roa (raw, json) Hash identifier: g26tNQNy8EdAJ15ce7pBaf0gv3T8ZQFsivhHhZI0IB0= Subject key identifier: 00:0D:9D:7A:9F:7D:2D:86:A7:B7:34:59:75:41:31:7A:00:23:37:42 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4988CAC3C668E9CA9F353BA0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:ca:c3:c6:68:e9:ca:9f:35:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5a688872-aa6e-4e89-87ab-c1f6c71c6294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:27:e9:f9:aa:58:63:6b:e3:83:19:5c:5e: 73:77:ad:4f:66:76:61:bb:c8:ca:ff:fe:3c:d4:60: 01:7e:83:b9:2d:a1:30:63:00:d0:0e:73:b8:78:e7: 7d:f0:90:a9:1d:e3:78:2b:40:f8:92:4f:18:70:dd: d8:e1:b5:1e:f6:49:ef:d4:08:b1:4e:99:8e:d1:56: 96:9f:72:53:1e:e4:41:f1:69:d3:2b:c4:44:bd:00: 4e:5c:56:54:2d:83:21:c3:56:86:14:23:54:f2:af: 19:e7:da:ef:d2:24:eb:0e:bf:2b:f0:6d:bc:88:a6: 28:3a:84:43:69:91:9d:0f:f5:e4:d6:21:a3:e8:02: 4a:ef:d4:c3:71:bd:ad:ef:db:58:89:50:56:b6:47: f2:90:33:aa:f4:dc:7d:86:10:be:29:30:84:82:21: 13:7f:e2:ee:ca:20:09:4e:d2:e4:b5:cc:28:73:37: 07:d2:d5:70:5e:46:e7:8f:54:55:39:64:d3:c6:ab: 14:bb:00:cc:84:72:5b:d0:ce:14:5d:cd:7c:f7:de: 39:07:cc:33:91:b4:6d:7d:52:6e:76:fa:e4:0c:1b: 3c:30:87:90:96:ac:02:2c:cd:9f:a3:14:4b:47:87: 3e:7b:5e:0d:96:e6:45:9c:15:99:5e:c3:fc:34:d0: dd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0D:9D:7A:9F:7D:2D:86:A7:B7:34:59:75:41:31:7A:00:23:37:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7d:20:75:aa:10:35:9d:a8:a1:6c:65:ba:cb:1b:4e:c9:9a: 79:22:83:e7:a2:2d:c8:80:49:8c:20:5b:60:c7:e8:c6:9a:fe: 77:f5:ba:63:f4:72:ce:be:da:d9:a5:ef:4e:0f:f6:7f:f9:c8: 34:76:44:25:cc:1f:bf:a9:c4:76:4e:f3:f7:3e:b8:02:ef:1d: f9:0e:e3:72:cb:c0:14:ae:d8:2d:58:8f:6b:db:0b:2b:66:15: 31:f3:43:f6:c4:f8:76:e9:40:5d:32:06:70:95:c6:46:49:6c: 4a:54:f1:d5:04:53:49:03:4b:41:09:8c:23:2b:2d:a9:0d:71: 0f:8e:79:da:0b:7a:59:2b:29:2e:66:90:66:17:dd:71:20:16: d0:f5:68:e8:11:3b:91:17:69:90:f5:21:28:80:c9:e7:da:d3: ac:0b:41:a1:d8:6f:30:b5:a2:78:aa:e4:91:ed:c9:c1:92:41: 72:1e:61:7b:57:e4:5b:a8:4d:1c:84:86:7d:6b:4c:90:1c:57: fe:87:51:78:77:14:49:4e:67:50:44:44:30:05:f1:15:e7:96: bc:27:42:7e:5a:14:f3:65:1d:2a:de:6f:d2:59:23:d2:e5:46: a6:92:f4:17:e9:4f:07:dd:0b:3e:bd:d3:c1:7a:8e:5a:f2:a5: 11:26:d7:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiMrDxmjpyp81O6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWE2ODg4NzItYWE2ZS00ZTg5LTg3YWItYzFmNmM3MWM2Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllMn6fmqWGNr44MZXF5zd61PZnZhu8jK//48 1GABfoO5LaEwYwDQDnO4eOd98JCpHeN4K0D4kk8YcN3Y4bUe9knv1AixTpmO0VaW n3JTHuRB8WnTK8REvQBOXFZULYMhw1aGFCNU8q8Z59rv0iTrDr8r8G28iKYoOoRD aZGdD/Xk1iGj6AJK79TDcb2t79tYiVBWtkfykDOq9Nx9hhC+KTCEgiETf+LuyiAJ TtLktcwoczcH0tVwXkbnj1RVOWTTxqsUuwDMhHJb0M4UXc189945B8wzkbRtfVJu dvrkDBs8MIeQlqwCLM2foxRLR4c+e14NluZFnBWZXsP8NNDd5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAANnXqffS2Gp7c0WXVBMXoAIzdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjgxNGVhYTQtZDlmMi0z MTE3LTkzOWYtNTY1ZWVhNmVmMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA19IHWqEDWdqKFsZbrLG07Jmnkig+eiLciASYwgW2DH6Maa/nf1umP0 cs6+2tml704P9n/5yDR2RCXMH7+pxHZO8/c+uALvHfkO43LLwBSu2C1Yj2vbCytm FTHzQ/bE+HbpQF0yBnCVxkZJbEpU8dUEU0kDS0EJjCMrLakNcQ+OedoLelkrKS5m kGYX3XEgFtD1aOgRO5EXaZD1ISiAyefa06wLQaHYbzC1oniq5JHtycGSQXIeYXtX 5FuoTRyEhn1rTJAcV/6HUXh3FElOZ1BERDAF8RXnlrwnQn5aFPNlHSreb9JZI9Ll RqaS9BfpTwfdCz6908F6jlrypREm14k= -----END CERTIFICATE-----Generated at Fri Sep 25 14:17:38 2026 by rpki-client