$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83b3bb5d-f264-3467-8fd2-3c29ae63c751.roa File: 83b3bb5d-f264-3467-8fd2-3c29ae63c751.roa (raw, json) Hash identifier: T5fs53yMkTbhKYMr73x8YpjFF0zo9JJXfOpxjbiy/3Q= Subject key identifier: 38:E7:D7:A4:E4:C7:3F:68:02:5A:26:F9:76:D4:D6:B8:96:FF:6D:C1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498C1674C661E6774C1AF560 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83b3bb5d-f264-3467-8fd2-3c29ae63c751.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:16:74:c6:61:e6:77:4c:1a:f5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3b1bf0d6-dbf8-4bd8-bf42-373340de68e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:48:37:5e:f8:b8:e7:6e:92:54:46:02:c4:72: 07:92:71:c0:38:07:08:70:b7:26:74:2a:c9:5a:a8: 96:a7:4a:c0:92:0d:38:04:c6:63:2d:2d:d1:67:5f: d3:03:93:ac:64:94:cb:68:8d:5f:d4:53:52:52:37: 11:20:58:b8:6b:66:cb:00:98:a6:f4:aa:31:2a:75: c5:c6:bd:37:90:e3:2f:91:f3:62:5f:5c:0e:b9:f9: d5:22:65:a6:73:99:9f:b0:ff:69:ac:fe:bb:c5:fa: 44:87:ca:78:23:be:6a:3b:06:90:c0:49:57:85:95: 78:84:f6:7e:22:17:6e:9b:40:2d:74:eb:54:80:8b: a3:55:08:61:e0:be:e9:85:21:e0:54:10:6a:a2:67: 01:4a:0c:74:13:b4:a2:99:98:90:ed:68:8a:f9:39: a9:66:ff:6b:82:ec:ea:8a:aa:01:2d:ca:9e:64:dc: 18:45:7c:95:0c:67:ae:71:85:ef:4f:25:c2:26:8d: 57:2d:3f:69:5c:a9:bc:ad:d2:15:88:c9:f3:55:56: c3:69:b9:b3:7f:35:e0:a8:3d:d6:aa:e7:46:ed:00: b3:bb:2a:2f:99:77:26:3e:62:ac:7b:ca:7a:ab:27: 65:9a:97:05:99:42:87:52:f6:23:3b:30:4f:38:c0: 67:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E7:D7:A4:E4:C7:3F:68:02:5A:26:F9:76:D4:D6:B8:96:FF:6D:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83b3bb5d-f264-3467-8fd2-3c29ae63c751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:40:dc:31:c8:18:f2:d5:13:f2:53:2f:dd:42:64:39:4b:51: d5:bb:d1:7c:e9:02:e3:8e:ef:32:3b:8e:67:5a:b4:aa:6f:87: ad:f3:47:09:03:73:c6:d3:ac:e5:c6:00:7f:01:75:7c:74:19: 49:88:ba:59:a5:23:4a:9a:2c:2a:6e:e5:fb:9d:e4:1a:fc:2c: 1b:f3:d0:29:e0:ba:0b:3d:84:0a:ed:b8:b9:89:ff:de:2d:4f: 2a:d9:da:96:55:28:23:db:d9:ae:e9:5e:c7:93:90:e4:ec:d3: 64:b1:0a:8b:52:60:a5:3a:77:07:2e:ca:f4:fd:7c:47:4d:07: 07:e9:f3:e6:00:b0:e9:d0:5d:24:d8:6e:d3:ac:ad:33:fe:59: cd:d4:13:c7:2a:0c:fc:4b:9d:0f:49:7a:ff:db:e0:0b:76:2d: b0:c5:63:d3:ec:0a:93:46:a1:e7:5a:da:e2:35:36:49:ba:15: 87:df:d1:a3:72:07:95:35:0c:14:e1:da:96:04:ca:a7:40:b8: 9c:46:17:9f:06:50:f4:91:4f:6d:d3:e1:78:92:e8:9b:b9:d3: 3e:96:6a:de:8b:3a:c5:94:d0:be:47:02:a0:f1:ab:4b:d2:8b: 17:10:35:f7:d5:ae:1c:92:56:43:eb:73:80:de:32:72:c4:4a: f0:da:ef:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjBZ0xmHmd0wa9WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2IxYmYwZDYtZGJmOC00YmQ4LWJmNDItMzczMzQwZGU2OGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUg3Xvi4526SVEYCxHIHknHAOAcIcLcmdCrJ WqiWp0rAkg04BMZjLS3RZ1/TA5OsZJTLaI1f1FNSUjcRIFi4a2bLAJim9KoxKnXF xr03kOMvkfNiX1wOufnVImWmc5mfsP9prP67xfpEh8p4I75qOwaQwElXhZV4hPZ+ Ihdum0AtdOtUgIujVQhh4L7phSHgVBBqomcBSgx0E7SimZiQ7WiK+TmpZv9rguzq iqoBLcqeZNwYRXyVDGeucYXvTyXCJo1XLT9pXKm8rdIViMnzVVbDabmzfzXgqD3W qudG7QCzuyovmXcmPmKse8p6qydlmpcFmUKHUvYjOzBPOMBnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjn16Tkxz9oAlom+XbU1riW/23BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODNiM2JiNWQtZjI2NC0z NDY3LThmZDItM2MyOWFlNjNjNzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhA3DHIGPLVE/JTL91CZDlLUdW70XzpAuOO7zI7jmdatKpvh63zRwkD c8bTrOXGAH8BdXx0GUmIulmlI0qaLCpu5fud5Br8LBvz0Cngugs9hArtuLmJ/94t TyrZ2pZVKCPb2a7pXseTkOTs02SxCotSYKU6dwcuyvT9fEdNBwfp8+YAsOnQXSTY btOsrTP+Wc3UE8cqDPxLnQ9Jev/b4At2LbDFY9PsCpNGoeda2uI1Nkm6FYff0aNy B5U1DBTh2pYEyqdAuJxGF58GUPSRT23T4XiS6Ju50z6Wat6LOsWU0L5HAqDxq0vS ixcQNffVrhySVkPrc4DeMnLESvDa77M= -----END CERTIFICATE-----Generated at Fri Sep 25 17:00:38 2026 by rpki-client