$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4725fcfe-b6f5-3187-a026-4e534e121a37.roa File: 4725fcfe-b6f5-3187-a026-4e534e121a37.roa (raw, json) Hash identifier: NgXmVNo5mY2fVnuUfDDGYWNBd5nYwI0YOw5CG5SFEP8= Subject key identifier: 87:4B:D8:8B:42:C8:1D:DA:65:EB:38:E9:BF:74:D8:87:22:DB:1F:49 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4988FFD084804081B38ED780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4725fcfe-b6f5-3187-a026-4e534e121a37.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 65.22.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:ff:d0:84:80:40:81:b3:8e:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ef850187-9a22-468e-8f4f-db5e9d33e7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:33:8d:f0:d0:e0:77:db:f8:ab:6e:eb:5c:cc: 08:e7:5c:b2:8d:f8:2c:c7:86:63:87:f8:da:79:c6: ac:99:88:48:32:ff:9e:da:8d:6c:4e:60:47:de:88: ce:ec:4b:0f:d8:27:63:13:01:b1:eb:08:13:c2:d3: 20:cc:e7:28:32:45:98:8b:9a:be:01:d9:c0:f8:73: e3:73:40:1a:d4:18:ef:04:00:19:c9:d3:92:e8:0b: f2:70:a0:79:ab:07:83:80:ad:84:f6:af:e1:9c:69: 38:95:0b:5e:3c:4b:69:96:11:ef:5f:89:aa:95:49: 88:d1:f1:4f:fb:4a:b3:49:b3:05:1d:de:f3:12:0b: 73:aa:15:d8:c1:c7:19:63:1b:37:c2:98:00:98:76: f5:2b:e1:7d:4d:4b:90:6a:b6:1c:ee:ea:49:5e:51: 3e:2e:d8:02:b4:31:0c:be:58:55:f7:75:3c:f8:7e: ca:4e:e0:5a:a6:ac:0e:8d:92:e0:0e:a5:3f:38:34: 47:fd:1f:93:34:5d:b2:14:7f:5d:b4:77:f0:b7:1a: 8b:e7:93:51:4b:5d:36:8d:b8:94:54:55:72:91:1b: ab:41:50:be:ca:72:be:10:d0:ab:f7:5f:a4:82:66: f4:c9:83:4e:03:bd:21:2b:aa:a9:09:be:60:e2:27: 56:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:D8:8B:42:C8:1D:DA:65:EB:38:E9:BF:74:D8:87:22:DB:1F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4725fcfe-b6f5-3187-a026-4e534e121a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d3:eb:14:5e:d7:22:16:f4:fb:0a:f2:95:e6:06:46:73:0d: 11:65:c7:e2:0c:f7:9c:31:71:c6:c6:4a:a8:25:db:b9:45:99: b6:f0:dc:c1:83:4e:ba:1e:4c:d5:db:a7:07:c7:aa:91:66:e0: a7:99:92:5f:cd:e7:3a:bc:08:2e:02:19:45:74:4e:c3:41:e5: e0:01:4f:ce:4a:ce:14:6c:3a:c7:d3:4b:25:e8:3c:78:37:df: a4:d5:40:55:df:20:98:f9:2f:41:6a:36:7b:a1:9e:0e:0e:14: d1:2c:95:4b:0e:9b:d1:0f:cd:31:a1:40:35:34:fb:18:da:51: 98:94:b0:1a:ec:70:11:c1:af:b2:6d:d9:2c:55:b5:09:07:ec: 5b:bb:25:eb:96:99:7c:a5:b1:62:ef:19:d0:e7:91:c5:c8:29: 6f:8d:95:09:46:ff:28:ac:82:17:fc:0a:40:00:b3:1a:50:4a: ad:0d:99:80:c0:2a:68:9d:4f:a1:ca:cb:f1:a7:ec:40:f0:81: 4d:8d:c5:10:d1:2a:25:31:bb:28:1c:1d:b5:3b:46:61:2a:37: ee:11:55:b4:b4:20:c3:fe:6b:68:33:af:a8:7b:74:2d:2e:94: a2:c3:49:59:71:2f:b4:ee:5e:be:c3:93:4c:a4:28:2d:0f:80: 7a:7c:d0:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiP/QhIBAgbOO14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWY4NTAxODctOWEyMi00NjhlLThmNGYtZGI1ZTlkMzNlN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDON8NDgd9v4q27rXMwI51yyjfgsx4Zjh/ja ecasmYhIMv+e2o1sTmBH3ojO7EsP2CdjEwGx6wgTwtMgzOcoMkWYi5q+AdnA+HPj c0Aa1BjvBAAZydOS6AvycKB5qweDgK2E9q/hnGk4lQtePEtplhHvX4mqlUmI0fFP +0qzSbMFHd7zEgtzqhXYwccZYxs3wpgAmHb1K+F9TUuQarYc7upJXlE+LtgCtDEM vlhV93U8+H7KTuBapqwOjZLgDqU/ODRH/R+TNF2yFH9dtHfwtxqL55NRS102jbiU VFVykRurQVC+ynK+ENCr91+kgmb0yYNOA70hK6qpCb5g4idWgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdL2ItCyB3aZes46b902Ici2x9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDcyNWZjZmUtYjZmNS0z MTg3LWEwMjYtNGU1MzRlMTIxYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvT6xRe1yIW9PsK8pXmBkZzDRFlx+IM95wxccbGSqgl27lFmbbw3MGD TroeTNXbpwfHqpFm4KeZkl/N5zq8CC4CGUV0TsNB5eABT85KzhRsOsfTSyXoPHg3 36TVQFXfIJj5L0FqNnuhng4OFNEslUsOm9EPzTGhQDU0+xjaUZiUsBrscBHBr7Jt 2SxVtQkH7Fu7JeuWmXylsWLvGdDnkcXIKW+NlQlG/yisghf8CkAAsxpQSq0NmYDA KmidT6HKy/Gn7EDwgU2NxRDRKiUxuygcHbU7RmEqN+4RVbS0IMP+a2gzr6h7dC0u lKLDSVlxL7TuXr7Dk0ykKC0PgHp80Bo= -----END CERTIFICATE-----Generated at Sun Sep 27 04:31:56 2026 by rpki-client