$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e86931b-7a0d-31da-92ae-ce1cfcf1dd17.roa File: 2e86931b-7a0d-31da-92ae-ce1cfcf1dd17.roa (raw, json) Hash identifier: Fgf5NfufPv3rtwTdFu8cHrt7O4hBBVpuDZfV2y+Div8= Subject key identifier: 10:06:C6:73:45:AB:FF:0A:68:5F:9B:AA:D8:29:57:C0:C2:DC:D0:FB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F66C2C96E2646FAF96CF4D980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e86931b-7a0d-31da-92ae-ce1cfcf1dd17.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 12041 IP address blocks: 65.22.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c9:6e:26:46:fa:f9:6c:f4:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=bb829a90-1197-4ba0-9729-c51f2257d8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:3b:31:be:3b:df:4d:c5:bf:d8:67:25:a3: dc:c1:20:a8:cb:cc:ce:46:c3:86:2c:b4:55:77:e3: 4c:d1:20:6a:30:93:2c:6a:1f:99:c5:d0:b4:f2:8f: 89:a4:fc:8d:63:14:6f:c6:50:9b:fa:65:26:b6:6c: 49:3f:f3:34:92:99:14:93:e8:72:5b:ba:ae:1d:b7: c5:e5:42:43:24:c3:20:a9:ae:bd:47:2b:aa:20:c4: 67:d6:44:c5:d1:8d:21:18:f9:0d:ab:d5:31:ca:ae: 42:72:c1:8b:30:3d:54:d8:ea:9e:36:f0:b8:3e:b3: 4f:d8:97:2f:bf:2b:86:6f:4e:ff:4a:dd:f6:6f:25: 6c:ab:cb:e7:e4:d6:42:39:63:4f:dc:7c:be:b1:72: 65:c0:86:09:03:d8:7e:43:1a:5a:54:f3:95:18:35: c1:6f:87:fd:bf:0a:14:32:33:3d:c5:87:01:bb:f9: 64:cd:92:e7:f3:ab:dd:12:33:c6:12:c0:8c:6a:b6: bc:dd:79:a2:ae:e3:bc:e6:16:21:5b:ac:89:cb:d8: 4f:bd:e5:a6:9f:43:3a:91:11:d3:58:9d:59:27:c3: cb:8d:70:c6:3b:5e:7a:d0:2d:57:b3:5e:ed:ab:ce: 97:67:1e:47:6f:3b:6b:1e:3b:1f:99:d6:f0:20:dc: 74:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:06:C6:73:45:AB:FF:0A:68:5F:9B:AA:D8:29:57:C0:C2:DC:D0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e86931b-7a0d-31da-92ae-ce1cfcf1dd17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e0:c6:d9:a4:f8:ca:50:4e:b2:0e:fd:a2:e8:2e:76:0f:a8: 5b:ff:c7:87:fa:cf:15:e4:55:bb:36:08:d8:1d:e7:f7:0f:de: e5:df:d6:b7:53:cc:a8:88:b1:70:24:69:84:e5:a8:82:d1:4c: b0:b5:3f:5a:63:cd:f9:67:b7:97:cc:56:52:60:a5:62:f2:39: 2e:e5:41:11:78:7a:70:06:20:eb:47:30:bc:10:c4:4c:cb:d8: 95:9c:83:5a:a3:77:6e:a0:fe:72:40:14:02:d7:1c:22:93:60: b3:3c:cd:8d:9f:a1:ed:22:c7:f0:7f:2b:9d:a5:e3:b1:82:59: cb:26:37:53:c1:51:d0:7f:ad:33:07:1a:b2:1c:18:70:88:02: 10:3d:42:e2:78:17:87:e5:f0:4b:3e:b3:dc:5b:40:bd:bd:c0: 5d:95:56:7e:65:6b:62:65:55:1e:70:e3:c6:f2:29:4d:55:f8: ec:54:c4:2d:05:02:ec:53:bb:4b:5c:56:26:4c:81:f3:8c:6d: 18:4a:29:81:8d:e8:05:72:60:ff:b5:ec:ff:dd:0b:19:7b:7a: 3f:8a:38:ed:fe:3b:0e:57:44:89:72:9e:72:a8:b9:91:30:6a: a3:a8:c9:1c:61:a7:93:0f:7a:02:dd:81:b0:1b:c3:04:df:2d: e3:92:29:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsluJkb6+Wz02YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk YmI4MjlhOTAtMTE5Ny00YmEwLTk3MjktYzUxZjIyNTdkOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxic7Mb47303Fv9hnJaPcwSCoy8zORsOGLLRV d+NM0SBqMJMsah+ZxdC08o+JpPyNYxRvxlCb+mUmtmxJP/M0kpkUk+hyW7quHbfF 5UJDJMMgqa69RyuqIMRn1kTF0Y0hGPkNq9Uxyq5CcsGLMD1U2OqeNvC4PrNP2Jcv vyuGb07/St32byVsq8vn5NZCOWNP3Hy+sXJlwIYJA9h+QxpaVPOVGDXBb4f9vwoU MjM9xYcBu/lkzZLn86vdEjPGEsCMara83XmiruO85hYhW6yJy9hPveWmn0M6kRHT WJ1ZJ8PLjXDGO1560C1Xs17tq86XZx5HbztrHjsfmdbwINx0WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAGxnNFq/8KaF+bqtgpV8DC3ND7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmU4NjkzMWItN2EwZC0z MWRhLTkyYWUtY2UxY2ZjZjFkZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHgxtmk+MpQTrIO/aLoLnYPqFv/x4f6zxXkVbs2CNgd5/cP3uXf1rdT zKiIsXAkaYTlqILRTLC1P1pjzflnt5fMVlJgpWLyOS7lQRF4enAGIOtHMLwQxEzL 2JWcg1qjd26g/nJAFALXHCKTYLM8zY2foe0ix/B/K52l47GCWcsmN1PBUdB/rTMH GrIcGHCIAhA9QuJ4F4fl8Es+s9xbQL29wF2VVn5la2JlVR5w48byKU1V+OxUxC0F AuxTu0tcViZMgfOMbRhKKYGN6AVyYP+17P/dCxl7ej+KOO3+Ow5XRIlynnKouZEw aqOoyRxhp5MPegLdgbAbwwTfLeOSKQ4= -----END CERTIFICATE-----Generated at Sun Oct 11 16:53:11 2026 by rpki-client