$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/09207ce9-918b-370d-8925-a834e1bfa5fe.roa File: 09207ce9-918b-370d-8925-a834e1bfa5fe.roa (raw, json) Hash identifier: uRIDii1dv8ZbpVs1H3yRqFZXX9AmFM33dVGZWLHK0nE= Subject key identifier: 21:DB:19:B3:C9:E3:81:F5:8A:B8:4D:24:3B:CA:FE:81:83:2C:C6:45 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4973262EB70766FD999CEDA0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/09207ce9-918b-370d-8925-a834e1bfa5fe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 65.22.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:26:2e:b7:07:66:fd:99:9c:ed:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eb4aefe1-f1ea-479d-961d-d2009b583fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b5:31:b0:c5:7c:bb:43:a5:c8:d5:21:cc:4c: 58:d5:ec:c6:87:c8:74:01:48:77:ce:58:13:4c:c8: 6d:c3:fe:41:04:db:1f:3f:21:14:fb:cb:fe:20:49: c0:8b:a9:f4:a1:29:88:67:3f:10:93:b3:e4:0c:32: 3e:f7:3f:14:d6:c8:53:63:8b:49:31:31:7d:eb:33: 55:3e:9a:8f:4f:d1:3d:35:05:f9:7b:46:e3:fe:26: ac:db:67:95:b1:ce:4b:f0:ee:99:4c:f6:35:84:2d: 56:4e:2b:56:d6:aa:86:69:e6:a4:f1:b9:33:81:7b: 36:b1:96:a5:52:3b:18:f2:61:a9:f6:e1:84:fd:90: a8:fc:02:7a:2e:a0:1c:5e:fe:7c:06:5d:2c:74:37: 4f:62:3c:99:2a:9a:8a:a4:c3:34:5f:e9:50:ad:bd: c7:1e:e3:90:c8:09:58:88:77:71:99:88:37:0d:09: 58:d2:0d:7b:ac:9c:e6:7b:2a:0c:a2:5c:50:8c:4f: 79:7d:9a:7d:c3:7d:25:26:0e:59:c0:2f:5d:9c:7b: ec:c6:0c:5c:6b:bb:f3:db:ef:fa:c9:89:96:bd:3a: 7f:93:2a:58:c4:30:44:ff:11:f2:52:52:67:bd:01: 06:b8:e1:79:ae:56:75:80:cf:a7:ee:fd:33:be:ee: 2a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DB:19:B3:C9:E3:81:F5:8A:B8:4D:24:3B:CA:FE:81:83:2C:C6:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/09207ce9-918b-370d-8925-a834e1bfa5fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:76:00:79:15:c3:46:0d:e1:f9:75:6c:be:04:ba:90:86:61: b0:69:dc:62:5e:11:ea:98:b2:34:77:c6:cb:86:f6:59:8a:5c: 59:db:0b:22:13:f1:d6:c5:ef:cc:14:31:f4:4e:a7:6a:91:62: 48:d8:71:bb:75:ae:4f:40:f4:a6:39:9a:c4:e1:d6:c7:21:4c: 98:15:be:8a:95:5f:d8:e7:8e:d2:cb:5a:5e:e5:9a:95:08:8f: d7:c5:19:a3:aa:d3:da:c9:94:b3:72:1f:eb:b9:94:7c:24:1f: 43:4b:57:e0:b4:8f:48:3f:04:12:51:2c:58:fa:c1:00:27:ce: fa:57:64:f4:0d:b0:7c:c3:f0:29:cc:56:50:25:68:1a:ea:c9: 8c:07:95:b4:69:84:27:21:3a:6e:e7:ce:58:03:02:6d:f0:be: 2f:cc:77:55:8b:57:e1:8c:93:30:e9:38:67:ca:dd:1a:fc:2c: 14:e5:a3:fb:29:ed:34:63:bb:94:b6:29:cd:a9:f9:44:7f:3f: 48:e2:1a:54:0a:10:81:8a:76:f5:c2:5d:0c:8a:d6:7a:06:71: 92:bb:3c:83:43:47:9d:b4:61:0f:7a:35:e1:0d:6f:07:5d:c6: 1b:06:08:8c:65:57:8d:92:53:ae:dd:42:a7:29:62:0e:77:4c: d6:57:ca:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyYutwdm/Zmc7aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWI0YWVmZTEtZjFlYS00NzlkLTk2MWQtZDIwMDliNTgzZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LUxsMV8u0OlyNUhzExY1ezGh8h0AUh3zlgT TMhtw/5BBNsfPyEU+8v+IEnAi6n0oSmIZz8Qk7PkDDI+9z8U1shTY4tJMTF96zNV PpqPT9E9NQX5e0bj/ias22eVsc5L8O6ZTPY1hC1WTitW1qqGaeak8bkzgXs2sZal UjsY8mGp9uGE/ZCo/AJ6LqAcXv58Bl0sdDdPYjyZKpqKpMM0X+lQrb3HHuOQyAlY iHdxmYg3DQlY0g17rJzmeyoMolxQjE95fZp9w30lJg5ZwC9dnHvsxgxca7vz2+/6 yYmWvTp/kypYxDBE/xHyUlJnvQEGuOF5rlZ1gM+n7v0zvu4q7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHbGbPJ44H1irhNJDvK/oGDLMZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDkyMDdjZTktOTE4Yi0z NzBkLTg5MjUtYTgzNGUxYmZhNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD52AHkVw0YN4fl1bL4EupCGYbBp3GJeEeqYsjR3xsuG9lmKXFnbCyIT 8dbF78wUMfROp2qRYkjYcbt1rk9A9KY5msTh1schTJgVvoqVX9jnjtLLWl7lmpUI j9fFGaOq09rJlLNyH+u5lHwkH0NLV+C0j0g/BBJRLFj6wQAnzvpXZPQNsHzD8CnM VlAlaBrqyYwHlbRphCchOm7nzlgDAm3wvi/Md1WLV+GMkzDpOGfK3Rr8LBTlo/sp 7TRju5S2Kc2p+UR/P0jiGlQKEIGKdvXCXQyK1noGcZK7PINDR520YQ96NeENbwdd xhsGCIxlV42SU67dQqcpYg53TNZXyu0= -----END CERTIFICATE-----Generated at Fri Sep 25 18:35:33 2026 by rpki-client