$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa File: 85637620-9689-35f2-8e85-75b58e890791.roa (raw, json) Hash identifier: SvSWJAvnoU0i1EK6XFtpDNSv4gJIrkJjyZKGfGIJy1E= Subject key identifier: 3A:05:1B:46:91:85:8E:20:AD:25:9B:51:05:C4:98:D1:CE:71:89:27 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49889896275F8ACF58EAC080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:98:96:27:5f:8a:cf:58:ea:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=65a61a7d-1c4f-4c14-9eb3-aac6d733c8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1e:5d:4d:77:9a:1f:29:af:fc:33:93:c2:ae: 2d:64:a7:18:37:e1:76:fb:97:01:4a:98:11:5e:c4: 94:53:b2:46:0b:45:f5:f4:b2:6f:72:78:10:1a:aa: 02:23:2b:04:71:18:26:23:df:ef:8b:98:51:ee:e0: 33:bf:43:e8:a7:15:46:be:7c:ba:cd:29:f0:ec:9e: 8e:b5:f6:c5:36:4c:3b:cd:29:d5:49:82:35:b2:65: 0b:5e:00:40:fb:8b:77:03:14:15:66:9f:e5:1c:f1: f8:e9:9c:21:db:09:8b:d7:30:91:c1:95:31:45:c4: 7e:96:2b:3c:26:95:04:a3:a9:31:0e:ec:43:f7:4e: 89:22:21:5e:64:85:43:18:3a:7d:10:a9:b0:91:9a: 76:22:85:c8:3d:a6:b2:5c:36:de:e2:74:5f:4b:09: 2e:55:f5:a2:43:9f:4c:fe:72:dc:e3:2d:90:df:83: 58:82:36:96:f6:c8:c3:e1:b4:44:d2:9e:4f:a4:95: 54:f8:99:14:db:97:ea:4e:ac:be:98:c5:6f:b7:d4: 95:82:13:4c:6e:50:5e:45:98:c2:d5:68:b9:c7:d2: f7:b6:07:2a:30:86:00:7c:32:ce:33:9a:48:a6:42: 93:5e:48:da:65:9e:f7:24:cc:90:29:6a:bc:53:79: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:05:1B:46:91:85:8E:20:AD:25:9B:51:05:C4:98:D1:CE:71:89:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c5:00:10:ae:ae:64:97:b9:c6:af:cb:13:ec:c9:b8:3f:bf: 05:bd:7f:5e:00:f6:f5:4e:d5:e9:83:5f:b9:b9:dd:7e:c3:dc: b6:74:7a:dc:3b:91:a4:b0:4a:48:dd:29:db:48:b7:1d:29:d0: b9:81:2f:d5:78:b0:c7:22:fe:cc:1f:78:64:4a:84:36:1b:3b: 59:81:f6:bc:30:a7:70:2a:47:6b:04:39:7f:a8:38:7f:25:f6: bd:23:ac:87:b5:25:9f:c5:cc:23:38:db:d5:48:65:61:61:24: d8:59:7c:2e:5e:bd:6c:90:7d:12:35:31:18:24:d6:fd:93:9e: e8:6d:58:57:dc:ee:6a:ff:89:e2:43:58:87:ef:19:eb:5b:01: a5:12:6c:90:cc:77:6d:7c:c1:22:97:03:f7:3f:71:29:03:c0: 54:45:f1:0d:ef:60:32:19:ec:7b:d2:40:6b:d7:34:3c:b6:51: 1f:42:82:37:e1:68:41:07:5a:34:a3:ef:91:a4:c2:3f:cf:ae: 24:02:b2:cf:95:ac:b7:b9:39:b1:d1:e1:73:d0:06:6b:46:2b: ce:38:9a:c6:b7:18:f1:ac:b0:c6:50:df:49:a5:2d:dd:e5:db: 91:78:86:ff:d7:4a:56:8e:93:b2:a0:c8:07:61:01:7f:6b:d5: 80:00:04:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiJiWJ1+Kz1jqwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjVhNjFhN2QtMWM0Zi00YzE0LTllYjMtYWFjNmQ3MzNjOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR5dTXeaHymv/DOTwq4tZKcYN+F2+5cBSpgR XsSUU7JGC0X19LJvcngQGqoCIysEcRgmI9/vi5hR7uAzv0PopxVGvny6zSnw7J6O tfbFNkw7zSnVSYI1smULXgBA+4t3AxQVZp/lHPH46Zwh2wmL1zCRwZUxRcR+lis8 JpUEo6kxDuxD906JIiFeZIVDGDp9EKmwkZp2IoXIPaayXDbe4nRfSwkuVfWiQ59M /nLc4y2Q34NYgjaW9sjD4bRE0p5PpJVU+JkU25fqTqy+mMVvt9SVghNMblBeRZjC 1Wi5x9L3tgcqMIYAfDLOM5pIpkKTXkjaZZ73JMyQKWq8U3n/FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoFG0aRhY4grSWbUQXEmNHOcYknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODU2Mzc2MjAtOTY4OS0z NWYyLThlODUtNzViNThlODkwNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7FABCurmSXucavyxPsybg/vwW9f14A9vVO1emDX7m53X7D3LZ0etw7 kaSwSkjdKdtItx0p0LmBL9V4sMci/swfeGRKhDYbO1mB9rwwp3AqR2sEOX+oOH8l 9r0jrIe1JZ/FzCM429VIZWFhJNhZfC5evWyQfRI1MRgk1v2TnuhtWFfc7mr/ieJD WIfvGetbAaUSbJDMd218wSKXA/c/cSkDwFRF8Q3vYDIZ7HvSQGvXNDy2UR9Cgjfh aEEHWjSj75Gkwj/PriQCss+VrLe5ObHR4XPQBmtGK844msa3GPGssMZQ30mlLd3l 25F4hv/XSlaOk7KgyAdhAX9r1YAABCA= -----END CERTIFICATE-----Generated at Sat Sep 26 02:16:29 2026 by rpki-client