$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa File: dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa (raw, json) Hash identifier: 20mW1FGylqHrYWDcp5uIc8fcoEUYFoOs2fWeo1YQ0A0= Subject key identifier: 3F:EC:BA:8B:68:00:A5:AD:DF:50:D9:EB:54:75:74:F5:8C:D6:EC:37 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49889ABE0166DF7BC08DE3E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:9a:be:01:66:df:7b:c0:8d:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7cf57a18-ad27-46ab-b936-c26d4d75b3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:db:64:b7:d2:32:7c:30:28:2e:5f:74:55: 8d:eb:72:88:3f:bc:0d:f2:ca:70:cc:b2:af:27:0e: aa:ea:30:d6:33:f5:58:5a:d2:a1:c6:b7:7c:c0:26: a0:43:1a:c7:e9:69:46:f3:0f:24:f2:a8:c4:3a:33: d5:a2:35:f1:7a:81:90:f6:63:c2:01:fe:a3:90:be: e4:84:38:9e:a2:42:e8:15:d4:ff:33:c8:67:84:c2: ec:8f:84:58:ed:32:43:8d:29:85:b8:1e:39:cc:fb: c4:e2:fc:d0:28:ca:a0:13:d3:34:2b:37:6a:2e:27: 98:d1:92:34:78:26:69:5c:90:e5:d4:e3:4d:42:32: 05:f5:3b:35:b7:26:42:16:2d:8d:52:2b:f3:77:e3: 6e:21:05:6f:92:8d:17:e8:70:5a:a6:14:12:93:73: 7e:12:65:18:61:7e:4c:ee:83:35:7d:94:02:01:ee: 0a:a0:ff:92:f6:12:cd:45:a5:eb:02:51:79:0f:9d: 14:30:4e:a2:18:4b:bf:c2:34:a7:5b:cb:28:17:5b: d4:b9:fd:1b:0a:f0:15:06:3a:0b:0d:fa:01:63:86: b8:07:2f:07:ac:3c:c8:58:69:a5:59:cc:6c:22:72: e1:a8:2a:d2:21:39:a0:1b:7c:0a:2b:a0:d6:e9:62: 5e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EC:BA:8B:68:00:A5:AD:DF:50:D9:EB:54:75:74:F5:8C:D6:EC:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8e:5d:30:3d:32:53:bf:88:e1:3a:3d:87:ba:b7:29:33:40: bc:0f:4c:03:3d:1a:b9:62:fc:85:3a:34:c0:0d:aa:98:d3:77: e8:a3:b2:0d:72:f4:e8:7d:09:5b:9a:28:63:f3:1d:8b:c2:c1: ab:9b:ea:aa:b8:c5:9c:3b:cf:d3:1b:5c:6c:ca:0c:1a:36:12: 22:08:bd:88:2e:44:f3:bd:c1:f8:ac:b9:94:5b:75:ea:35:39: 89:69:e8:e5:03:a3:49:cb:d6:13:95:ed:5e:ad:2b:fb:ed:4b: eb:3d:d5:34:dd:4a:f8:f2:37:d3:e7:d7:bd:5d:62:c6:0b:4a: 09:5f:76:c7:5c:ae:70:d4:bf:86:62:54:52:e8:ea:f6:b9:a4: 31:35:5c:83:2f:a1:82:72:1a:42:17:e4:48:e7:22:0a:21:df: 0c:a4:af:5c:fc:b8:3f:3e:21:18:f6:50:2d:44:f1:fe:07:a7: e9:fb:c3:54:2c:fc:22:22:b0:34:e0:01:3d:a0:c2:33:35:19: ab:7b:d1:b2:b5:93:d0:8d:e3:be:cd:91:c5:6e:d2:1d:23:5f: bb:6d:86:80:ca:65:14:76:5a:aa:54:7d:57:ef:e7:dd:a1:d4: 90:95:e1:75:ff:60:76:2d:10:4f:35:3f:fb:a7:21:ac:76:fb: 3a:d2:c7:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiJq+AWbfe8CN4+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2NmNTdhMTgtYWQyNy00NmFiLWI5MzYtYzI2ZDRkNzViM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgLbZLfSMnwwKC5fdFWN63KIP7wN8spwzLKv Jw6q6jDWM/VYWtKhxrd8wCagQxrH6WlG8w8k8qjEOjPVojXxeoGQ9mPCAf6jkL7k hDieokLoFdT/M8hnhMLsj4RY7TJDjSmFuB45zPvE4vzQKMqgE9M0KzdqLieY0ZI0 eCZpXJDl1ONNQjIF9Ts1tyZCFi2NUivzd+NuIQVvko0X6HBaphQSk3N+EmUYYX5M 7oM1fZQCAe4KoP+S9hLNRaXrAlF5D50UME6iGEu/wjSnW8soF1vUuf0bCvAVBjoL DfoBY4a4By8HrDzIWGmlWcxsInLhqCrSITmgG3wKK6DW6WJeRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/suotoAKWt31DZ61R1dPWM1uw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGZmOTliYTgtY2IxZi0z NDI3LWE4NDEtNmExMzYyY2QyNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyOXTA9MlO/iOE6PYe6tykzQLwPTAM9Grli/IU6NMANqpjTd+ijsg1y 9Oh9CVuaKGPzHYvCwaub6qq4xZw7z9MbXGzKDBo2EiIIvYguRPO9wfisuZRbdeo1 OYlp6OUDo0nL1hOV7V6tK/vtS+s91TTdSvjyN9Pn171dYsYLSglfdsdcrnDUv4Zi VFLo6va5pDE1XIMvoYJyGkIX5EjnIgoh3wykr1z8uD8+IRj2UC1E8f4Hp+n7w1Qs /CIisDTgAT2gwjM1Gat70bK1k9CN477NkcVu0h0jX7tthoDKZRR2WqpUfVfv592h 1JCV4XX/YHYtEE81P/unIax2+zrSx9E= -----END CERTIFICATE-----Generated at Fri Sep 25 13:11:33 2026 by rpki-client