$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c0dae30-c78c-328b-885f-532eef23b979.roa File: 3c0dae30-c78c-328b-885f-532eef23b979.roa (raw, json) Hash identifier: eOpQRSPD9mKE/VVqvXFts0sBreMa1d0qOgcVIlaQgF0= Subject key identifier: BA:07:2F:35:5A:CB:9E:CF:FF:1D:53:F3:7E:43:A5:16:5B:48:94:45 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498B6536ED4721EC5F312F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c0dae30-c78c-328b-885f-532eef23b979.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 65.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:65:36:ed:47:21:ec:5f:31:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=14be19f0-cbad-41ae-b9e7-fdcd2adb804b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:09:4b:5f:0c:5a:a6:08:18:64:d9:d8:c3:09: 4d:13:a1:98:4b:5b:63:1f:40:92:99:74:9a:e8:f2: cf:7c:55:c3:3b:52:63:f3:db:1e:69:d0:6c:32:1d: 91:bc:3e:15:32:ca:6e:f0:ff:47:a0:2b:04:a3:f4: c8:a8:c6:11:4d:34:94:58:5b:eb:30:c3:d6:b7:d3: 42:c2:e7:57:85:e3:ec:b1:fe:9d:8c:b5:66:59:31: 2d:fd:5c:1b:8c:27:be:22:8a:8b:f6:f9:98:80:e3: f3:03:b1:91:78:d1:61:11:16:21:e0:00:75:cf:d1: 4d:06:f3:ba:93:7b:dd:dc:a4:c8:f1:c9:a4:bc:23: b6:4b:a2:37:16:64:ad:e0:0a:28:93:05:60:75:bc: 62:9b:47:8a:9b:89:81:19:86:ec:f8:40:8a:3f:41: 4a:6c:77:4d:ca:d1:62:17:aa:49:e5:a6:93:21:77: f2:78:0d:33:b8:30:af:dc:4d:8a:6b:8f:05:7b:ed: 7b:41:bb:1f:36:94:74:44:ca:21:8b:7c:71:4a:c1: 83:25:c3:7e:02:9e:71:20:f9:a5:3f:60:77:30:64: 4d:52:9a:14:92:49:c6:68:90:b9:63:99:dc:ca:37: 0e:6b:bd:33:47:f6:a8:43:66:ea:7e:3e:0c:18:32: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:07:2F:35:5A:CB:9E:CF:FF:1D:53:F3:7E:43:A5:16:5B:48:94:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c0dae30-c78c-328b-885f-532eef23b979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:76:c8:50:95:36:4d:14:2d:1d:23:3e:d2:ae:b6:4f:39:f2: 62:e8:19:07:92:ff:f2:3e:8a:7c:d9:38:ea:18:95:a2:42:28: 80:7a:8a:48:a2:ea:07:3f:39:c8:94:35:4a:f1:ec:28:34:69: 27:8f:ad:6c:ba:07:8a:4d:4a:7b:5d:20:63:d8:3f:e5:cc:18: 80:56:2b:ca:5d:fb:93:0e:55:75:90:68:e8:96:15:64:83:5d: c8:e2:e5:34:b6:a0:b6:0a:48:f3:cb:ab:bd:de:70:cf:39:8a: 9e:05:e5:dc:6a:3f:98:03:a4:b9:b9:b8:f3:19:b6:7b:ed:bb: 0a:04:e2:68:9a:3c:a4:af:18:2c:1f:20:cc:12:ce:6c:83:73: 49:11:a3:79:9a:cb:b4:cf:18:08:11:8e:de:82:a7:d6:52:bb: c0:61:95:5f:f0:6a:8c:2a:f8:c4:58:00:ea:e3:78:d5:b3:bb: d7:85:8c:d3:bc:c9:6a:70:4f:49:43:2b:97:18:f2:f1:ff:cf: e0:30:98:3d:f0:5b:cd:78:41:b1:0d:fd:16:aa:0b:86:13:43: 75:82:c0:92:a5:81:07:9f:1a:a1:c0:63:06:9d:39:65:10:56: 0b:10:e8:3c:86:d2:33:34:3e:5a:46:5e:20:c8:00:1a:7d:d1: 97:42:a1:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji2U27Uch7F8xL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTRiZTE5ZjAtY2JhZC00MWFlLWI5ZTctZmRjZDJhZGI4MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhglLXwxapggYZNnYwwlNE6GYS1tjH0CSmXSa 6PLPfFXDO1Jj89seadBsMh2RvD4VMspu8P9HoCsEo/TIqMYRTTSUWFvrMMPWt9NC wudXhePssf6djLVmWTEt/VwbjCe+IoqL9vmYgOPzA7GReNFhERYh4AB1z9FNBvO6 k3vd3KTI8cmkvCO2S6I3FmSt4AookwVgdbxim0eKm4mBGYbs+ECKP0FKbHdNytFi F6pJ5aaTIXfyeA0zuDCv3E2Ka48Fe+17QbsfNpR0RMohi3xxSsGDJcN+Ap5xIPml P2B3MGRNUpoUkknGaJC5Y5ncyjcOa70zR/aoQ2bqfj4MGDLZ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoHLzVay57P/x1T835DpRZbSJRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2MwZGFlMzAtYzc4Yy0z MjhiLTg4NWYtNTMyZWVmMjNiOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB2yFCVNk0ULR0jPtKutk858mLoGQeS//I+inzZOOoYlaJCKIB6ikii 6gc/OciUNUrx7Cg0aSePrWy6B4pNSntdIGPYP+XMGIBWK8pd+5MOVXWQaOiWFWSD Xcji5TS2oLYKSPPLq73ecM85ip4F5dxqP5gDpLm5uPMZtnvtuwoE4miaPKSvGCwf IMwSzmyDc0kRo3may7TPGAgRjt6Cp9ZSu8BhlV/waowq+MRYAOrjeNWzu9eFjNO8 yWpwT0lDK5cY8vH/z+AwmD3wW814QbEN/RaqC4YTQ3WCwJKlgQefGqHAYwadOWUQ VgsQ6DyG0jM0PlpGXiDIABp90ZdCoe4= -----END CERTIFICATE-----Generated at Sat Sep 26 02:44:53 2026 by rpki-client