$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8840286c-6553-39c2-a95a-a6614b2aedf3.roa File: 8840286c-6553-39c2-a95a-a6614b2aedf3.roa (raw, json) Hash identifier: EApzqWoYY0WFxZh3mh+gD6xvDBia+eNsXu/VxBrhnPY= Subject key identifier: 4D:DF:4F:8A:84:24:01:6A:09:32:09:6E:33:97:3E:13:D3:FE:39:D0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4986E18553BB996DDD7DF880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8840286c-6553-39c2-a95a-a6614b2aedf3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:e1:85:53:bb:99:6d:dd:7d:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9731f047-fcf5-4936-9849-bbfbd0736f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:b8:c7:ad:a6:e4:0c:62:b5:bb:22:96:0e: 9a:84:3a:41:40:22:e3:13:f4:23:2c:88:89:7c:06: c0:4f:b6:b2:02:f6:55:38:86:0e:87:eb:f2:cc:90: 2d:30:98:36:ae:50:e8:fd:4e:ed:5a:c8:4e:42:91: 7b:c7:d0:69:5f:a4:e6:db:ce:72:8e:1b:93:f8:bd: 5b:43:83:9c:49:81:35:2b:6e:07:2a:28:a1:ef:28: ff:60:82:0e:1a:bf:58:d1:62:16:57:ee:b4:b0:a8: e5:70:f1:eb:38:fa:1e:46:4c:00:49:b9:e6:64:be: 6e:d1:7c:f7:ac:b5:5a:0b:c4:86:00:0a:3b:0f:8c: a6:a0:de:ae:39:4c:f4:4e:20:8a:c1:d7:ba:87:ea: e0:40:30:41:e4:2a:35:ca:6b:4a:df:aa:b7:3a:fe: e9:29:a3:f0:1c:5f:86:43:e2:77:a3:70:a5:54:0d: fb:86:77:0c:71:5f:69:57:16:00:58:5e:44:63:40: 89:59:d2:06:08:b5:51:d1:f7:72:cf:25:03:3c:79: 65:37:cf:d8:47:ef:b6:68:c9:4c:aa:b5:80:4a:56: f4:61:6c:a7:e9:06:2a:a8:31:ae:b3:be:39:ad:1c: bf:a6:f4:62:ab:e6:41:1a:fc:76:39:b4:ae:04:e5: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DF:4F:8A:84:24:01:6A:09:32:09:6E:33:97:3E:13:D3:FE:39:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8840286c-6553-39c2-a95a-a6614b2aedf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:be:e9:84:47:1d:5e:92:e0:5d:b7:9f:f0:74:4d:4e:aa:fe: 1b:ce:c9:a1:5d:b0:c0:e3:73:3f:0f:4c:17:fc:d2:52:a1:74: 6c:2d:0d:aa:2d:f2:69:1d:36:7d:ea:bd:c0:dd:a9:67:6a:10: 4d:63:6e:8d:6e:4f:c7:84:34:da:b1:2c:a2:69:e0:18:80:6e: 4b:b9:2b:7c:36:a2:d8:82:40:2b:0a:8e:51:b8:20:65:2b:a3: 3e:1c:d0:6f:b6:ea:2c:93:d7:6a:b2:ed:eb:d9:88:5b:00:c8: 31:a2:17:7c:37:f1:ed:16:97:fc:81:4a:2a:f5:4c:a3:50:2c: ba:3d:bf:f1:39:06:8f:8b:93:ff:22:e5:89:08:3d:0f:3b:6d: 2a:21:4e:b4:03:39:9f:5a:ee:94:22:b0:f2:ff:b3:e1:b4:7a: b3:2f:c5:56:6f:84:b4:3c:b2:c5:57:b4:9a:da:c0:db:1b:01: 75:09:47:bf:98:25:73:d9:6b:e6:42:70:60:4b:3f:5c:f9:d1: 66:4b:d0:f9:7b:19:d5:a6:96:02:5c:29:6b:94:61:52:c3:0f: 0c:68:62:8e:49:23:75:2d:1a:d4:28:52:f6:53:3d:2d:fa:fd: e2:d4:dc:e2:ec:a5:c0:a3:69:9f:af:21:07:6f:2d:c0:67:d2: 1d:4f:43:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhuGFU7uZbd19+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTczMWYwNDctZmNmNS00OTM2LTk4NDktYmJmYmQwNzM2ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDm4x62m5Axitbsilg6ahDpBQCLjE/QjLIiJ fAbAT7ayAvZVOIYOh+vyzJAtMJg2rlDo/U7tWshOQpF7x9BpX6Tm285yjhuT+L1b Q4OcSYE1K24HKiih7yj/YIIOGr9Y0WIWV+60sKjlcPHrOPoeRkwASbnmZL5u0Xz3 rLVaC8SGAAo7D4ymoN6uOUz0TiCKwde6h+rgQDBB5Co1ymtK36q3Ov7pKaPwHF+G Q+J3o3ClVA37hncMcV9pVxYAWF5EY0CJWdIGCLVR0fdyzyUDPHllN8/YR++2aMlM qrWASlb0YWyn6QYqqDGus745rRy/pvRiq+ZBGvx2ObSuBOUEHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3fT4qEJAFqCTIJbjOXPhPT/jnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODg0MDI4NmMtNjU1My0z OWMyLWE5NWEtYTY2MTRiMmFlZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRamMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa+6YRHHV6S4F23n/B0TU6q/hvOyaFdsMDjcz8PTBf80lKhdGwtDaot 8mkdNn3qvcDdqWdqEE1jbo1uT8eENNqxLKJp4BiAbku5K3w2otiCQCsKjlG4IGUr oz4c0G+26iyT12qy7evZiFsAyDGiF3w38e0Wl/yBSir1TKNQLLo9v/E5Bo+Lk/8i 5YkIPQ87bSohTrQDOZ9a7pQisPL/s+G0erMvxVZvhLQ8ssVXtJrawNsbAXUJR7+Y JXPZa+ZCcGBLP1z50WZL0Pl7GdWmlgJcKWuUYVLDDwxoYo5JI3UtGtQoUvZTPS36 /eLU3OLspcCjaZ+vIQdvLcBn0h1PQ/E= -----END CERTIFICATE-----Generated at Fri Sep 25 13:10:44 2026 by rpki-client