$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/45988d5b-d3a5-37af-8d03-d8a76497070d.roa File: 45988d5b-d3a5-37af-8d03-d8a76497070d.roa (raw, json) Hash identifier: CEMdlVYVlJ1+O9KJqn6thrco7Rqg+Uuvwau5SI/7JNo= Subject key identifier: 83:9D:C7:8D:22:BA:F0:B7:3A:F9:6C:C8:C7:28:42:7F:70:1C:26:7C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4973484C8562B4AA32113400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/45988d5b-d3a5-37af-8d03-d8a76497070d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 65.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:48:4c:85:62:b4:aa:32:11:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6b2f18c1-18bf-4805-9472-0622dad68eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:99:fe:df:62:8d:27:1b:ab:e6:4d:98:71: 3a:3b:25:a3:9c:8d:0c:20:b6:c2:dc:a5:6e:b6:3e: fb:91:c3:93:4c:2e:e4:ef:83:c2:6c:1d:4e:87:d9: f3:4a:fd:a1:4f:39:f3:5b:2f:3c:dd:23:9e:61:a9: 5f:e4:5c:14:44:02:59:55:96:73:e6:95:f1:b0:14: 5f:1d:4d:ea:36:e2:3d:2a:ec:ea:bb:d1:b0:a0:df: a0:26:ed:28:20:ca:3a:40:cd:9d:95:ea:da:da:ee: b6:6d:ed:9c:c0:1c:f4:15:aa:f3:a2:04:77:71:8c: 7d:43:de:08:2f:96:8e:df:ed:07:c0:fb:1c:83:08: 3a:a5:ba:ec:13:f4:91:0e:13:d7:a4:57:31:a5:0e: f7:30:cc:f7:cb:0c:a4:a4:7a:d8:a5:5d:3c:39:f5: 0a:d0:73:fb:fb:42:45:89:17:ec:43:a8:7b:a8:3a: dc:41:96:3d:b1:75:76:da:6f:45:b9:18:e6:0e:12: a3:c3:65:e8:20:ac:c5:75:f6:87:76:cf:1f:36:6a: ea:ea:4a:2e:7d:d5:d5:e5:bf:6f:31:82:52:c8:0b: ec:16:b3:c8:dd:2e:ab:3e:00:2e:fa:ea:1b:3b:ec: 60:c5:bf:30:07:2e:0f:09:f4:2d:1b:9f:15:e1:5a: d7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9D:C7:8D:22:BA:F0:B7:3A:F9:6C:C8:C7:28:42:7F:70:1C:26:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/45988d5b-d3a5-37af-8d03-d8a76497070d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:60:7c:5c:ba:8c:a7:d5:c3:3b:ec:db:d0:4e:84:c4:ab:fe: 7a:26:e4:52:86:4a:45:98:1e:31:09:e8:a7:23:9f:db:36:60: 98:77:ae:58:72:6c:f9:5a:9e:21:69:98:08:51:ec:49:72:5d: 33:ef:97:e6:28:b6:12:77:fa:20:a9:66:68:64:ae:6c:f9:91: 6f:df:d3:a9:60:7c:e3:6e:37:aa:77:46:17:30:d0:fb:4f:31: ed:93:8d:b5:7a:5c:62:ce:aa:33:08:e7:75:30:82:24:b9:c5: 11:fe:88:82:11:d8:f1:86:cf:c7:a2:a3:34:43:71:2b:0e:91: 45:94:78:cd:de:9f:2d:29:96:38:7c:a5:d6:fb:ac:e1:37:99: e2:57:30:80:31:af:8a:f2:3f:99:b1:31:1e:65:3c:fe:61:75: 47:bc:1d:16:a9:38:82:c3:d8:3f:99:cd:ab:3a:74:33:d8:a8: 68:8a:fe:5d:e8:73:59:60:b5:ea:d2:a3:c6:6c:70:76:28:97: b7:9d:84:3c:a0:b0:c7:7a:ce:b8:70:48:0c:5a:bd:1a:76:c2: 34:fd:c4:48:7b:27:32:bc:5c:98:9a:59:ad:93:70:51:20:e5: 94:0c:9d:4a:5e:3a:79:1c:d3:b9:77:a1:80:d2:15:0d:a9:ff: fd:8e:17:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0hMhWK0qjIRNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmIyZjE4YzEtMThiZi00ODA1LTk0NzItMDYyMmRhZDY4ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP6Z/t9ijScbq+ZNmHE6OyWjnI0MILbC3KVu tj77kcOTTC7k74PCbB1Oh9nzSv2hTznzWy883SOeYalf5FwURAJZVZZz5pXxsBRf HU3qNuI9Kuzqu9GwoN+gJu0oIMo6QM2dlera2u62be2cwBz0FarzogR3cYx9Q94I L5aO3+0HwPscgwg6pbrsE/SRDhPXpFcxpQ73MMz3ywykpHrYpV08OfUK0HP7+0JF iRfsQ6h7qDrcQZY9sXV22m9FuRjmDhKjw2XoIKzFdfaHds8fNmrq6koufdXV5b9v MYJSyAvsFrPI3S6rPgAu+uobO+xgxb8wBy4PCfQtG58V4VrXwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOdx40iuvC3OvlsyMcoQn9wHCZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDU5ODhkNWItZDNhNS0z N2FmLThkMDMtZDhhNzY0OTcwNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZgfFy6jKfVwzvs29BOhMSr/nom5FKGSkWYHjEJ6Kcjn9s2YJh3rlhy bPlaniFpmAhR7ElyXTPvl+YothJ3+iCpZmhkrmz5kW/f06lgfONuN6p3Rhcw0PtP Me2TjbV6XGLOqjMI53UwgiS5xRH+iIIR2PGGz8eiozRDcSsOkUWUeM3eny0pljh8 pdb7rOE3meJXMIAxr4ryP5mxMR5lPP5hdUe8HRapOILD2D+Zzas6dDPYqGiK/l3o c1lgterSo8ZscHYol7edhDygsMd6zrhwSAxavRp2wjT9xEh7JzK8XJiaWa2TcFEg 5ZQMnUpeOnkc07l3oYDSFQ2p//2OF6o= -----END CERTIFICATE-----Generated at Fri Sep 25 22:06:28 2026 by rpki-client