$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa File: 31d6b714-fc08-30e0-80b0-f05d486bd52a.roa (raw, json) Hash identifier: phfxhHPFiZ83maif6fzay0YCsFYMehqCZVQ3yi6iyb8= Subject key identifier: 61:0D:71:84:99:0C:83:8B:C7:A7:13:F5:D2:5B:8D:1E:6F:94:BB:C8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4989A06402579C757EB6647A Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:a0:64:02:57:9c:75:7e:b6:64:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d63ce2f2-5b1c-4b32-836e-dff0dae8dbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:14:c7:c2:57:c1:1c:6e:1d:e7:9c:16:21:59: bd:09:f6:a4:02:53:20:d5:ca:72:63:a9:a0:3a:4b: 71:a8:f1:85:b8:ec:f2:e9:a5:6a:5b:22:79:bf:44: d0:a5:25:e4:2f:69:fe:4b:a7:2e:ff:57:2f:a6:b6: 75:c0:95:7d:b7:9b:a6:23:ff:ef:1b:8b:56:9c:ba: 28:9d:1c:56:33:a6:2b:f7:a1:9d:42:11:39:85:26: 28:a5:da:ad:bb:f3:26:5d:73:50:87:e8:66:6b:e8: e3:aa:29:75:26:da:b1:d1:6c:7a:53:b7:2d:12:1d: 84:21:97:fd:f0:e4:f7:68:a5:72:71:af:d6:fa:46: 9a:b4:13:4a:57:b8:73:2b:24:9f:8c:79:fc:37:ad: 45:83:d3:71:1a:19:ef:94:a1:44:90:d1:1f:3d:75: 2c:f2:a9:d0:af:96:93:42:36:e8:dc:06:b7:0b:4e: 73:47:1b:4d:7e:a9:d9:9e:9e:80:6e:39:05:01:29: d8:9d:9f:dc:a1:a3:78:19:21:c4:5f:18:0a:8d:aa: da:e8:70:b8:7f:a1:95:5e:0b:77:56:8a:a0:a7:43: cc:25:75:1f:ea:1a:d6:c3:65:68:cc:bf:a9:59:82: b3:d8:80:46:1e:de:aa:95:73:07:7a:04:40:ca:00: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0D:71:84:99:0C:83:8B:C7:A7:13:F5:D2:5B:8D:1E:6F:94:BB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:bf:f0:a5:cb:95:21:0a:bc:b1:51:63:fc:ec:1c:4f:20:76: 4b:6b:53:bd:b3:be:bc:70:52:13:89:62:e2:62:50:14:10:d1: 39:f7:c1:ee:71:7a:c4:5b:09:cf:1b:f8:de:2b:21:63:f6:ce: 82:32:15:32:f9:88:4a:65:1b:6f:50:8b:11:21:18:13:8d:5a: c2:bd:ef:f3:13:85:eb:07:7c:4e:31:f8:2c:db:f5:af:1e:85: f2:1c:b2:42:11:7e:f2:84:95:fb:d5:41:e9:c0:c6:b9:47:52: 6e:3a:ad:de:24:fd:1c:3e:30:07:c5:c8:29:a7:22:94:2f:d8: 0e:bc:55:25:62:37:0e:19:01:5e:02:a5:4a:86:30:09:74:61: 5f:f3:3d:0e:5e:eb:ec:72:cf:d7:51:49:20:cc:dc:33:c7:a2: 1d:ca:97:5a:0c:32:57:4a:c4:02:89:94:a2:0d:a3:35:e0:63: 70:a1:07:8b:c1:9c:0d:51:41:0a:4e:a8:2e:7b:a7:82:a7:cb: c0:b7:58:28:d4:22:4e:4d:2e:7b:1d:87:3c:38:5f:e6:ad:fd: a8:74:5e:c5:bd:43:a5:3c:3a:1d:77:1e:19:90:64:a9:ff:2c: f9:b8:c3:85:5a:a8:ec:a7:05:ed:81:e7:76:ae:58:05:8a:aa: 3c:ec:c9:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiaBkAlecdX62ZHowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDYzY2UyZjItNWIxYy00YjMyLTgzNmUtZGZmMGRhZThkYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhTHwlfBHG4d55wWIVm9CfakAlMg1cpyY6mg OktxqPGFuOzy6aVqWyJ5v0TQpSXkL2n+S6cu/1cvprZ1wJV9t5umI//vG4tWnLoo nRxWM6Yr96GdQhE5hSYopdqtu/MmXXNQh+hma+jjqil1Jtqx0Wx6U7ctEh2EIZf9 8OT3aKVyca/W+kaatBNKV7hzKySfjHn8N61Fg9NxGhnvlKFEkNEfPXUs8qnQr5aT Qjbo3Aa3C05zRxtNfqnZnp6AbjkFASnYnZ/coaN4GSHEXxgKjara6HC4f6GVXgt3 Voqgp0PMJXUf6hrWw2VozL+pWYKz2IBGHt6qlXMHegRAygC9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGENcYSZDIOLx6cT9dJbjR5vlLvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzFkNmI3MTQtZmMwOC0z MGUwLTgwYjAtZjA1ZDQ4NmJkNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG/8KXLlSEKvLFRY/zsHE8gdktrU72zvrxwUhOJYuJiUBQQ0Tn3we5x esRbCc8b+N4rIWP2zoIyFTL5iEplG29QixEhGBONWsK97/MThesHfE4x+Czb9a8e hfIcskIRfvKElfvVQenAxrlHUm46rd4k/Rw+MAfFyCmnIpQv2A68VSViNw4ZAV4C pUqGMAl0YV/zPQ5e6+xyz9dRSSDM3DPHoh3Kl1oMMldKxAKJlKINozXgY3ChB4vB nA1RQQpOqC57p4Kny8C3WCjUIk5NLnsdhzw4X+at/ah0XsW9Q6U8Oh13HhmQZKn/ LPm4w4VaqOynBe2B53auWAWKqjzsyUE= -----END CERTIFICATE-----Generated at Sun Oct 4 08:13:42 2026 by rpki-client