$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faf3492f-7476-3a62-8ecd-c62a28c05672.roa File: faf3492f-7476-3a62-8ecd-c62a28c05672.roa (raw, json) Hash identifier: lnVNc9+AOadvIi3YQIXzyw+SKDgTmKGqMmh40LLptL0= Subject key identifier: C0:E1:97:34:99:6B:E5:1D:06:22:71:E0:54:1D:37:D0:59:76:51:FB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49882C381FFC1F39936A0B40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faf3492f-7476-3a62-8ecd-c62a28c05672.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:2c:38:1f:fc:1f:39:93:6a:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a62eb356-0b97-4496-9fec-f227f82fc20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:c0:2a:ae:24:26:38:59:32:24:84:f2:fd: 9d:12:e5:bc:0c:b8:5e:34:c3:c4:0b:f3:11:09:1e: fb:84:b7:f3:31:98:4f:dd:dd:c7:d5:75:9f:c4:69: 2e:37:ee:40:ff:27:fc:a3:66:46:91:a0:e9:ef:af: 95:49:0a:74:7b:4d:f2:35:b8:c4:a5:f9:2b:d9:41: 4c:78:4b:ee:28:ca:4a:60:55:27:bb:92:12:87:66: ec:04:d2:8b:39:58:31:ce:83:bd:2b:71:6b:0f:77: d1:d5:89:86:e4:85:b6:02:0f:4f:cd:42:8d:25:5d: ff:02:3f:5b:ac:6b:27:96:30:06:d0:77:61:f2:12: de:a1:fc:7f:5f:ff:f2:c8:d0:4d:a7:03:8c:b4:7e: b9:e0:85:a6:17:81:4b:1c:f6:bd:15:87:ee:bf:aa: 9c:3b:5b:77:76:cb:01:4e:9f:56:9d:1d:c9:87:87: ba:65:93:d1:81:ec:66:21:95:b2:87:e5:46:e8:7c: 80:b4:71:a6:c4:ee:3a:e0:e9:a4:48:14:15:48:8b: b5:b7:90:86:a5:3b:22:92:1f:6a:03:6f:8e:60:61: a2:25:a7:a0:bc:4c:11:d5:1e:90:1c:0f:b5:da:40: da:52:af:3e:86:32:40:6b:93:fd:fe:d3:43:11:b0: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E1:97:34:99:6B:E5:1D:06:22:71:E0:54:1D:37:D0:59:76:51:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/faf3492f-7476-3a62-8ecd-c62a28c05672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:06:a9:df:a3:4a:e8:64:6f:33:98:a3:02:fe:f7:3b:c6:2f: 3c:a9:cd:68:c9:8c:16:2c:ba:d2:e0:4c:7a:19:f9:3d:52:36: 50:50:61:63:f0:fb:5d:ab:4f:d9:17:88:33:eb:63:04:fa:be: d6:97:0a:6b:0e:cc:1d:fe:2d:7b:b5:08:91:22:63:9a:12:f0: 2f:74:0a:a7:61:55:47:cd:7f:4c:d3:a4:ba:53:bf:0e:24:76: db:7f:38:93:57:82:d7:cb:ff:17:36:85:5f:74:ae:f2:63:6e: 25:06:5f:93:26:a9:53:4d:db:c7:29:c9:f1:a5:db:fd:79:b8: cc:fc:6c:3e:77:3e:d5:7b:ad:ef:03:62:22:30:99:a4:3a:83: 07:2a:57:83:fb:9e:87:0e:9d:71:a4:7f:79:cb:be:c2:00:40: 32:ac:09:b0:ef:61:d3:0e:5f:aa:75:84:ba:47:18:0c:0d:f2: bf:9e:33:56:cf:8d:d7:34:81:78:e2:31:67:06:5c:31:8f:92: 0d:2d:fd:9b:d7:9d:4b:28:6b:90:bf:7d:5e:bc:ce:62:0d:2d: 8f:af:d6:62:27:01:61:3b:2b:d5:0a:18:f9:01:d3:1e:74:1f: b5:a8:9b:45:fe:b3:f7:9e:df:86:88:49:3f:4a:91:25:dc:d9: 96:5a:55:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCw4H/wfOZNqC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTYyZWIzNTYtMGI5Ny00NDk2LTlmZWMtZjIyN2Y4MmZjMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu/AKq4kJjhZMiSE8v2dEuW8DLheNMPEC/MR CR77hLfzMZhP3d3H1XWfxGkuN+5A/yf8o2ZGkaDp76+VSQp0e03yNbjEpfkr2UFM eEvuKMpKYFUnu5ISh2bsBNKLOVgxzoO9K3FrD3fR1YmG5IW2Ag9PzUKNJV3/Aj9b rGsnljAG0Hdh8hLeofx/X//yyNBNpwOMtH654IWmF4FLHPa9FYfuv6qcO1t3dssB Tp9WnR3Jh4e6ZZPRgexmIZWyh+VG6HyAtHGmxO464OmkSBQVSIu1t5CGpTsikh9q A2+OYGGiJaegvEwR1R6QHA+12kDaUq8+hjJAa5P9/tNDEbD9lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDhlzSZa+UdBiJx4FQdN9BZdlH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmFmMzQ5MmYtNzQ3Ni0z YTYyLThlY2QtYzYyYTI4YzA1NjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQGqd+jSuhkbzOYowL+9zvGLzypzWjJjBYsutLgTHoZ+T1SNlBQYWPw +12rT9kXiDPrYwT6vtaXCmsOzB3+LXu1CJEiY5oS8C90CqdhVUfNf0zTpLpTvw4k dtt/OJNXgtfL/xc2hV90rvJjbiUGX5MmqVNN28cpyfGl2/15uMz8bD53PtV7re8D YiIwmaQ6gwcqV4P7nocOnXGkf3nLvsIAQDKsCbDvYdMOX6p1hLpHGAwN8r+eM1bP jdc0gXjiMWcGXDGPkg0t/ZvXnUsoa5C/fV68zmINLY+v1mInAWE7K9UKGPkB0x50 H7Wom0X+s/ee34aIST9KkSXc2ZZaVRM= -----END CERTIFICATE-----Generated at Fri Sep 25 18:18:17 2026 by rpki-client