$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/012b129a-df50-391e-9681-b9936988d02e.roa File: 012b129a-df50-391e-9681-b9936988d02e.roa (raw, json) Hash identifier: xJWH71g7HINKHWxAdspg9nbAOZwA2R3licLYjI2EJWs= Subject key identifier: 3E:46:4B:83:57:B1:0A:83:93:17:C4:97:5A:74:1A:A6:21:DA:68:19 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498BD26B9C4BB9765B89C620 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/012b129a-df50-391e-9681-b9936988d02e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 65.22.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:d2:6b:9c:4b:b9:76:5b:89:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba392e00-aece-4688-99ab-e4afc495408e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:b7:59:a1:bb:25:ce:01:17:72:c4:88:d0: 62:d8:14:e2:e6:82:04:4c:1d:bb:1d:88:ae:50:fa: 26:ab:7e:d0:44:dc:c9:4c:a7:e7:b2:15:39:08:d7: 2f:30:48:59:d4:77:77:fe:9c:fd:32:86:73:b8:39: 1d:4c:03:ed:55:75:e0:ba:42:ad:37:99:ec:60:8a: d9:0e:1d:41:88:f1:2a:88:37:b6:7d:69:1d:4b:6f: de:f9:66:1c:a9:a8:58:13:00:9d:dc:af:12:a7:63: 93:e5:9b:55:f2:e3:93:b6:9d:38:f5:92:25:69:ad: 81:50:36:ec:4c:a4:c6:3f:55:bc:b2:c4:d8:87:c0: 5b:97:de:30:f5:6a:bd:12:3c:e1:bc:d3:13:86:f3: 71:03:ee:f2:fb:40:1f:1c:8a:c7:a8:14:da:04:24: 2e:04:c1:d9:61:3e:cb:4f:58:37:e4:2b:70:60:b0: c5:8a:b4:74:89:a9:b0:93:9b:43:9b:75:5a:52:75: 0c:88:82:27:a0:41:70:b0:94:97:2b:24:94:e0:b7: 47:5a:90:cb:d7:81:3a:70:d6:f9:d4:92:86:b7:bf: 93:67:be:90:39:90:8f:c8:e2:3c:c3:0e:d9:54:e2: 06:14:6e:56:a8:71:cb:34:6f:86:e5:08:db:06:5a: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:46:4B:83:57:B1:0A:83:93:17:C4:97:5A:74:1A:A6:21:DA:68:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/012b129a-df50-391e-9681-b9936988d02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:41:c8:a8:71:49:af:a6:13:6a:11:5d:f9:df:7d:74:fb:48: 90:cc:98:43:32:8e:5c:0e:53:9c:d9:72:8d:43:1b:92:38:92: 12:7a:3c:3a:48:af:ad:c2:09:95:bb:6b:ad:68:bd:b6:6d:b2: d6:cf:38:33:40:21:0f:62:a9:83:59:df:a2:7a:39:5f:90:c2: a8:98:5d:a2:3e:e8:7e:8a:ca:13:08:7b:27:72:20:fd:e0:33: ca:47:1a:f7:62:e1:67:c5:55:b2:5a:95:50:96:73:7c:f2:cb: 48:3d:91:98:88:91:5b:0e:8d:b4:d2:08:8a:00:14:89:5f:ab: 52:3b:6c:4b:ae:ed:9b:c3:35:15:32:2f:90:e2:14:74:ad:3b: ed:36:ee:d5:8d:92:72:20:8a:9f:b2:97:81:14:50:76:71:78: 57:b1:8d:37:cd:30:74:ac:fe:5f:6e:46:fc:c6:f5:26:d7:f7: c9:4e:cd:d7:cb:a3:c3:d8:b4:51:30:d9:9a:b4:96:27:75:05: c1:2c:81:99:52:d5:de:57:d2:1e:1e:28:d3:c7:83:50:b4:6d: c5:56:4e:bc:59:0a:f1:64:79:d7:c4:7e:2e:09:42:0e:1f:03: 95:ae:7c:81:d4:8c:89:59:2c:96:e5:c4:d6:c1:ad:ee:8d:94: 6c:b5:af:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji9JrnEu5dluJxiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmEzOTJlMDAtYWVjZS00Njg4LTk5YWItZTRhZmM0OTU0MDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppm3WaG7Jc4BF3LEiNBi2BTi5oIETB27HYiu UPomq37QRNzJTKfnshU5CNcvMEhZ1Hd3/pz9MoZzuDkdTAPtVXXgukKtN5nsYIrZ Dh1BiPEqiDe2fWkdS2/e+WYcqahYEwCd3K8Sp2OT5ZtV8uOTtp049ZIlaa2BUDbs TKTGP1W8ssTYh8Bbl94w9Wq9EjzhvNMThvNxA+7y+0AfHIrHqBTaBCQuBMHZYT7L T1g35CtwYLDFirR0iamwk5tDm3VaUnUMiIInoEFwsJSXKySU4LdHWpDL14E6cNb5 1JKGt7+TZ76QOZCPyOI8ww7ZVOIGFG5WqHHLNG+G5QjbBlpfvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5GS4NXsQqDkxfEl1p0GqYh2mgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDEyYjEyOWEtZGY1MC0z OTFlLTk2ODEtYjk5MzY5ODhkMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFByKhxSa+mE2oRXfnffXT7SJDMmEMyjlwOU5zZco1DG5I4khJ6PDpI r63CCZW7a61ovbZtstbPODNAIQ9iqYNZ36J6OV+QwqiYXaI+6H6KyhMIeydyIP3g M8pHGvdi4WfFVbJalVCWc3zyy0g9kZiIkVsOjbTSCIoAFIlfq1I7bEuu7ZvDNRUy L5DiFHStO+027tWNknIgip+yl4EUUHZxeFexjTfNMHSs/l9uRvzG9SbX98lOzdfL o8PYtFEw2Zq0lid1BcEsgZlS1d5X0h4eKNPHg1C0bcVWTrxZCvFkedfEfi4JQg4f A5WufIHUjIlZLJblxNbBre6NlGy1r/M= -----END CERTIFICATE-----Generated at Sat Sep 26 03:57:22 2026 by rpki-client