$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa File: 3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa (raw, json) Hash identifier: P1S1JpUoQmmZZAFXGrnzNNUbQ7pugyXqbTaNZoT6OQU= Subject key identifier: 7C:06:BE:E3:C2:34:48:70:EB:35:92:C4:1B:38:0C:D9:03:1C:81:82 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F497322316FF562A18669E180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:22:31:6f:f5:62:a1:86:69:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=22ac89a0-ddd1-4574-84d6-caeea4a938a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:c0:03:01:e8:f0:84:11:40:2a:96:4a:96: b0:d0:02:15:c5:7a:33:10:40:c9:95:9f:3d:d4:cd: 03:21:9f:7e:4f:19:33:5d:d2:6f:9b:a5:24:5c:45: 4d:32:fa:fb:52:c6:ea:dd:b2:40:88:86:56:bf:f9: ea:4e:c5:76:31:d9:9a:52:43:82:13:01:f2:a8:84: 47:d7:c7:18:e7:d1:3e:1a:b0:99:b3:60:28:52:2e: bf:f3:c4:8d:87:fa:a5:e6:e0:3c:0d:f5:e1:83:63: 2e:66:bd:4c:a5:27:f7:cb:bd:11:c2:4e:18:45:92: d8:65:04:35:54:e4:5b:8c:d1:3b:ba:8e:a8:cc:3a: e3:a9:49:ef:ce:71:c3:e4:aa:e8:22:99:08:0a:cd: b9:a5:6a:8a:85:e0:28:ad:ff:5d:7f:3f:18:a1:46: 47:34:7b:e9:5b:ff:76:0e:a1:d6:0d:2e:ff:aa:fa: d5:5a:f4:38:60:67:94:b1:55:0a:f6:ec:41:5e:03: 01:8f:0d:80:1c:82:a4:38:30:92:be:a0:4f:53:ff: 0c:f3:e2:79:75:6c:3a:03:bf:c0:2c:27:17:3f:f8: ee:ce:ea:25:24:10:f0:df:a7:82:84:f9:02:70:b8: 14:13:c4:e4:3c:bb:70:97:5b:cd:fa:53:1e:5a:d7: 49:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:06:BE:E3:C2:34:48:70:EB:35:92:C4:1B:38:0C:D9:03:1C:81:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:7c:9d:03:c4:32:dd:9d:e9:25:67:17:38:98:54:49:d5:a1: 61:4b:c0:69:39:70:e9:fa:8f:09:67:5e:8d:5a:b2:da:24:df: 2c:1b:28:e7:0f:96:09:44:4b:f2:99:c4:37:cc:03:10:56:19: 87:f6:87:57:2b:f9:37:0a:b8:e5:76:f6:57:24:c8:08:9d:8d: ed:7a:a4:da:e7:af:c2:e3:4b:5f:86:c8:7e:98:27:8c:b1:53: b7:3e:5a:c5:3c:d3:37:cc:9d:f1:2a:f1:09:4b:79:d5:a8:ae: f4:cb:f9:e8:77:f2:7d:cc:93:aa:1b:b1:fd:3b:7b:0e:e8:70: 71:3d:f8:4e:ac:1d:fe:72:db:65:aa:b6:f8:52:69:28:cf:4d: 3f:ec:df:fc:f7:07:40:77:48:94:0d:ec:d3:74:a8:af:a4:ef: c6:2f:c0:ab:f0:85:8f:ed:24:06:46:ca:ef:f9:fe:c9:d7:e7: 21:9a:76:17:b1:ec:59:c5:e1:51:75:0f:31:23:43:d2:1c:1b: d0:dd:17:a6:06:98:2c:f8:54:3d:2f:7a:dd:78:05:8f:76:60: bf:56:d3:a4:03:6f:a8:a4:1f:96:19:2f:02:ac:e3:30:10:4d: d1:6d:6c:af:d4:a5:fe:c7:e1:0d:28:34:af:f4:93:49:37:04: b3:dd:e6:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyIxb/VioYZp4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjJhYzg5YTAtZGRkMS00NTc0LTg0ZDYtY2FlZWE0YTkzOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwbAAwHo8IQRQCqWSpaw0AIVxXozEEDJlZ89 1M0DIZ9+TxkzXdJvm6UkXEVNMvr7Usbq3bJAiIZWv/nqTsV2MdmaUkOCEwHyqIRH 18cY59E+GrCZs2AoUi6/88SNh/ql5uA8DfXhg2MuZr1MpSf3y70Rwk4YRZLYZQQ1 VORbjNE7uo6ozDrjqUnvznHD5KroIpkICs25pWqKheAorf9dfz8YoUZHNHvpW/92 DqHWDS7/qvrVWvQ4YGeUsVUK9uxBXgMBjw2AHIKkODCSvqBPU/8M8+J5dWw6A7/A LCcXP/juzuolJBDw36eChPkCcLgUE8TkPLtwl1vN+lMeWtdJZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwGvuPCNEhw6zWSxBs4DNkDHIGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2M2OWI5YTAtMzNkOS0z Njg3LWEwYzUtMDc1NjRhZWRkMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJ8nQPEMt2d6SVnFziYVEnVoWFLwGk5cOn6jwlnXo1astok3ywbKOcP lglES/KZxDfMAxBWGYf2h1cr+TcKuOV29lckyAidje16pNrnr8LjS1+GyH6YJ4yx U7c+WsU80zfMnfEq8QlLedWorvTL+eh38n3Mk6obsf07ew7ocHE9+E6sHf5y22Wq tvhSaSjPTT/s3/z3B0B3SJQN7NN0qK+k78YvwKvwhY/tJAZGyu/5/snX5yGadhex 7FnF4VF1DzEjQ9IcG9DdF6YGmCz4VD0vet14BY92YL9W06QDb6ikH5YZLwKs4zAQ TdFtbK/Upf7H4Q0oNK/0k0k3BLPd5i8= -----END CERTIFICATE-----Generated at Fri Sep 25 14:28:17 2026 by rpki-client