$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/03fd9d40-90d5-30cd-8a71-6ca677c00e38.roa File: 03fd9d40-90d5-30cd-8a71-6ca677c00e38.roa (raw, json) Hash identifier: vZn7mqSgceKXyvEPwUXtCBoMLSaj9NWwWojvGwoscYE= Subject key identifier: DE:D6:08:AF:84:9D:8E:69:10:0C:B8:A6:EB:AF:24:26:C5:F1:8D:F1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F497320E972B5B3E0EC47E080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/03fd9d40-90d5-30cd-8a71-6ca677c00e38.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 65.22.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:20:e9:72:b5:b3:e0:ec:47:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c9be0d52-91ea-41f3-8d84-a3d0bd39a280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:ff:12:35:f9:49:8b:2d:0a:6d:c5:44:8a: 49:3b:6d:13:b3:1d:19:8e:37:db:b1:0d:95:04:0c: 8d:1a:10:6c:3d:39:a2:55:87:3d:4f:84:97:d3:9e: 02:1a:66:6f:0b:2b:33:bf:8f:87:0f:13:d6:de:59: ea:39:66:34:a0:54:9e:97:f2:4b:1a:fb:93:cd:23: 93:44:a4:49:e6:3a:fe:a5:c6:58:d1:ec:9d:b4:2c: c6:65:cf:30:b5:13:84:47:2c:e4:dd:65:a3:61:73: 9a:88:58:f0:72:ac:b5:a7:8e:95:74:9c:48:b5:e8: ea:9d:46:2d:02:e3:d4:d1:a7:4b:da:82:58:2f:d3: a6:6c:eb:7a:f6:d6:fd:f7:64:2d:d0:79:80:f2:23: 81:0c:06:b7:43:53:46:e4:95:5f:5d:74:40:7a:fa: 94:d9:51:07:4f:f3:95:e5:f9:aa:86:43:11:2f:16: 91:1e:b7:8a:0c:85:69:ab:30:5c:4c:d1:03:da:fe: c5:dc:d4:fe:57:5f:c2:cb:36:40:af:b1:ba:2d:2e: 3d:c9:f0:b9:3f:ee:c6:4a:79:70:9c:3a:ea:9e:3a: 01:6a:4f:84:63:be:55:62:be:75:21:28:bb:60:ae: d1:b8:63:2b:21:39:e6:74:5d:5b:9a:0c:a4:fd:1e: 73:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D6:08:AF:84:9D:8E:69:10:0C:B8:A6:EB:AF:24:26:C5:F1:8D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/03fd9d40-90d5-30cd-8a71-6ca677c00e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d8:6f:37:b7:52:d3:6b:c0:ff:0e:46:c9:de:cb:24:83:bd: ef:9a:37:dc:bf:c1:96:10:85:af:a6:5b:a6:2e:4a:b1:7f:1d: 56:13:91:11:33:c6:8d:64:32:f1:27:aa:22:ac:0a:a5:89:89: 63:7e:8b:a4:7d:59:61:cd:4b:30:a8:7c:b9:9e:7d:89:b7:fc: 9a:9c:16:2f:2b:78:bc:d2:61:2b:cf:c3:e3:a7:e3:fd:33:f7: e5:77:a4:12:37:87:ec:f7:7a:c0:75:5c:ba:6e:a2:b3:eb:58: df:3c:24:1c:55:f9:73:22:85:37:79:4a:67:fb:7d:f7:3a:85: 84:e7:48:4c:b8:37:d5:be:46:6c:96:44:e9:92:18:57:ec:e2: 6e:39:c0:8f:a7:fe:7f:0d:71:d0:ad:ba:5d:c4:72:b8:05:4e: 73:07:6b:85:d3:8d:0d:98:60:46:12:12:56:68:ee:d0:d0:be: 80:bd:f7:44:3e:27:19:ed:38:aa:24:ad:e9:7b:83:19:49:83: c0:d1:c3:38:f4:d7:e5:be:e5:bf:3f:6c:4b:d5:5a:4b:47:16: e1:a7:eb:7c:a0:c9:64:9a:02:6f:f7:0f:84:9e:0b:07:54:bd: 0b:f3:a2:66:06:15:c5:f8:7d:a4:91:c2:15:d9:26:c3:75:f5: 7c:e1:62:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyDpcrWz4OxH4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzliZTBkNTItOTFlYS00MWYzLThkODQtYTNkMGJkMzlhMjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0//EjX5SYstCm3FRIpJO20Tsx0ZjjfbsQ2V BAyNGhBsPTmiVYc9T4SX054CGmZvCyszv4+HDxPW3lnqOWY0oFSel/JLGvuTzSOT RKRJ5jr+pcZY0eydtCzGZc8wtROERyzk3WWjYXOaiFjwcqy1p46VdJxItejqnUYt AuPU0adL2oJYL9OmbOt69tb992Qt0HmA8iOBDAa3Q1NG5JVfXXRAevqU2VEHT/OV 5fmqhkMRLxaRHreKDIVpqzBcTNED2v7F3NT+V1/CyzZAr7G6LS49yfC5P+7GSnlw nDrqnjoBak+EY75VYr51ISi7YK7RuGMrITnmdF1bmgyk/R5zvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7WCK+EnY5pEAy4puuvJCbF8Y3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDNmZDlkNDAtOTBkNS0z MGNkLThhNzEtNmNhNjc3YzAwZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATYbze3UtNrwP8ORsneyySDve+aN9y/wZYQha+mW6YuSrF/HVYTkREz xo1kMvEnqiKsCqWJiWN+i6R9WWHNSzCofLmefYm3/JqcFi8reLzSYSvPw+On4/0z 9+V3pBI3h+z3esB1XLpuorPrWN88JBxV+XMihTd5Smf7ffc6hYTnSEy4N9W+RmyW ROmSGFfs4m45wI+n/n8NcdCtul3EcrgFTnMHa4XTjQ2YYEYSElZo7tDQvoC990Q+ JxntOKokrel7gxlJg8DRwzj01+W+5b8/bEvVWktHFuGn63ygyWSaAm/3D4SeCwdU vQvzomYGFcX4faSRwhXZJsN19XzhYpo= -----END CERTIFICATE-----Generated at Mon Sep 28 16:21:19 2026 by rpki-client