$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa File: a32b982b-80c0-30f4-9738-db8d8a2a0644.roa (raw, json) Hash identifier: rfyULREh/oJxtY/mQP2zzrGEjrx7/3+KmwkwA2xSM/s= Subject key identifier: C8:47:D4:EA:27:DD:C8:DE:FB:FA:B9:27:3D:83:01:C5:6F:6A:B8:29 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974C9F5131383C85D870600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c9:f5:13:13:83:c8:5d:87:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d0a2046e-5dfc-4a89-810a-3b3c364bbb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:49:c9:d7:8a:6b:43:9a:11:77:85:d3:37:d6: 22:fc:7d:06:1a:8a:b9:17:9a:77:4d:8f:00:93:2e: 3d:74:f3:65:88:f8:a7:45:21:dd:9d:c0:95:c8:bb: 70:85:64:40:5c:03:cc:34:a3:ea:38:6d:28:56:c9: 01:76:2d:d6:c4:c1:23:7d:2d:9b:10:af:04:42:4e: 7c:a8:eb:69:df:88:da:1b:62:8c:17:47:3c:aa:9f: 82:dc:55:ff:b8:20:57:82:c7:e3:b2:60:f8:07:2e: 5f:3e:f2:33:90:2f:36:8f:ca:86:de:20:08:e1:e1: 59:25:85:14:4a:2b:65:f3:28:3b:af:e0:66:02:fb: 08:ea:14:e4:e5:80:5c:74:b6:28:23:3c:e0:95:f1: 53:61:3b:ac:19:90:1a:4c:db:9f:9d:f1:65:22:d3: c3:65:d7:57:96:97:fe:a6:1b:e3:ad:8a:27:df:8c: 1e:a9:6c:d7:d1:c8:a9:cf:32:e3:3b:69:61:12:06: 3d:ea:5b:16:95:90:f4:aa:f9:5e:35:45:b7:a0:6c: 80:94:b6:98:42:10:54:7e:51:ff:39:06:2c:10:12: 19:28:6f:c2:12:71:16:c7:c1:af:fd:89:4f:5c:58: de:8f:86:1a:5c:5e:1f:65:f8:03:cc:29:9a:0b:8d: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:47:D4:EA:27:DD:C8:DE:FB:FA:B9:27:3D:83:01:C5:6F:6A:B8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c6:09:c0:bf:73:8d:27:6f:f5:c0:99:dd:3e:8d:8d:2b:2c: f3:34:5f:df:be:44:f3:97:d4:3b:14:56:4d:9a:7d:b8:5a:d3: da:ca:d0:d4:1f:4e:49:0d:0e:66:e6:d7:d6:57:de:51:3a:ed: de:42:27:a2:66:c9:e4:42:b7:ee:02:8b:1e:da:80:92:d8:75: c6:08:7f:9b:96:28:fd:cd:6e:78:9f:79:8a:42:4c:0f:a2:03: 24:54:cd:6a:80:4a:28:db:bc:ca:80:00:68:48:dc:84:36:fc: 30:76:c6:4b:80:1b:3f:2d:15:54:51:86:90:ab:8b:fc:c4:bf: 08:c1:ea:fe:51:da:c1:9c:61:59:25:a7:de:48:f7:14:c1:72: 2e:47:0d:d5:74:d4:39:44:5a:ee:da:fa:8f:13:f4:28:63:24: f2:43:c7:66:31:36:a8:58:7f:a3:02:21:b7:97:61:da:5e:64: 6e:d7:e4:c6:5b:c0:c2:ac:2b:57:e7:9b:3a:76:39:38:f0:31: f2:3b:41:1d:77:d2:f9:d4:bc:17:33:e1:61:48:77:80:47:29: c6:c5:7c:b3:46:cc:1f:4b:5b:0c:69:57:28:6a:7a:fa:a6:d9: 4a:91:42:69:19:a7:18:3c:b1:d1:0e:92:05:d6:71:17:78:95: 04:e7:6c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMn1ExODyF2HBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDBhMjA0NmUtNWRmYy00YTg5LTgxMGEtM2IzYzM2NGJiYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0nJ14prQ5oRd4XTN9Yi/H0GGoq5F5p3TY8A ky49dPNliPinRSHdncCVyLtwhWRAXAPMNKPqOG0oVskBdi3WxMEjfS2bEK8EQk58 qOtp34jaG2KMF0c8qp+C3FX/uCBXgsfjsmD4By5fPvIzkC82j8qG3iAI4eFZJYUU Sitl8yg7r+BmAvsI6hTk5YBcdLYoIzzglfFTYTusGZAaTNufnfFlItPDZddXlpf+ phvjrYon34weqWzX0cipzzLjO2lhEgY96lsWlZD0qvleNUW3oGyAlLaYQhBUflH/ OQYsEBIZKG/CEnEWx8Gv/YlPXFjej4YaXF4fZfgDzCmaC43bewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhH1Oon3cje+/q5Jz2DAcVvargpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTMyYjk4MmItODBjMC0z MGY0LTk3MzgtZGI4ZDhhMmEwNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjGCcC/c40nb/XAmd0+jY0rLPM0X9++RPOX1DsUVk2afbha09rK0NQf TkkNDmbm19ZX3lE67d5CJ6JmyeRCt+4Cix7agJLYdcYIf5uWKP3NbnifeYpCTA+i AyRUzWqASijbvMqAAGhI3IQ2/DB2xkuAGz8tFVRRhpCri/zEvwjB6v5R2sGcYVkl p95I9xTBci5HDdV01DlEWu7a+o8T9ChjJPJDx2YxNqhYf6MCIbeXYdpeZG7X5MZb wMKsK1fnmzp2OTjwMfI7QR130vnUvBcz4WFId4BHKcbFfLNGzB9LWwxpVyhqevqm 2UqRQmkZpxg8sdEOkgXWcRd4lQTnbJw= -----END CERTIFICATE-----Generated at Fri Sep 25 12:57:29 2026 by rpki-client