$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa File: 5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa (raw, json) Hash identifier: bkLPpakJkwDQ/71umxrQGCSQbj6GiEJ4WVJuTHZS/rM= Subject key identifier: 81:42:15:DB:92:73:1E:E8:02:B3:42:4D:A9:75:58:C0:68:93:54:C1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F71ED7D7F06D74F4D98AAFA40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 13657 IP address blocks: 65.22.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:7d:7f:06:d7:4f:4d:98:aa:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=25cdcdd7-736d-40b9-a0f8-20a4b83cce89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b0:c4:6d:98:e6:bc:84:55:89:0b:74:9e:3b: b7:9f:6a:d3:ba:7e:7c:e0:d0:3c:f8:b7:85:a9:59: 6d:23:73:23:77:fa:71:b4:a7:dd:5f:0b:5f:cc:43: ea:4c:39:8c:a6:c1:ea:3c:c9:dc:d3:9c:8d:be:2d: d7:13:e5:e8:39:82:a5:d3:bf:bd:eb:cd:a3:74:9c: 89:eb:e4:ad:29:72:21:55:44:3f:d4:2c:70:e2:60: d8:0f:00:46:26:28:7e:45:cc:9d:f5:ea:80:96:8e: 9e:21:6c:83:ef:7e:76:06:02:91:c7:47:eb:fb:4c: 0c:67:b2:ca:0b:1c:4f:c4:2d:b0:7a:bd:87:08:de: 89:af:df:6a:c7:6d:5b:70:ff:52:2e:01:06:83:b7: d3:e6:22:c6:93:26:4a:42:dc:db:88:bd:ab:2b:29: d5:73:57:f2:d2:12:89:85:27:6e:8d:63:13:b9:43: 32:af:77:6a:47:05:25:16:07:92:12:7d:31:98:75: c0:c5:34:04:9c:e8:78:9c:ac:94:c5:8b:20:a2:3c: 8b:7c:5d:d0:d8:96:16:e5:aa:a0:3e:0f:19:23:e2: 35:8e:50:cb:af:42:62:02:e7:3c:a9:8f:c5:41:f4: d3:ba:1a:40:e6:ed:35:b1:c7:0f:43:1c:95:10:4b: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:42:15:DB:92:73:1E:E8:02:B3:42:4D:A9:75:58:C0:68:93:54:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5aa2bb0b-2ca2-3678-ada1-28b948fabde0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8c:35:f2:52:6c:33:46:8b:cd:16:31:a6:fc:13:62:0a:1a: 7f:80:6f:cf:89:df:1d:8d:44:2e:fe:4a:63:22:55:ea:ff:69: 92:c4:93:69:e2:d7:81:96:56:0a:0b:29:01:b1:dd:41:94:3f: 3f:94:7d:6d:74:6a:ad:0c:6a:5c:8a:bb:63:e5:bb:a7:d6:d7: fa:e3:70:5f:90:19:00:51:5f:9e:42:ba:02:70:2f:cb:43:80: c1:56:29:55:2a:23:f0:8f:0d:94:d1:2d:1b:7d:a0:af:77:4c: db:ee:ba:98:2f:75:9f:f9:e5:ca:66:7a:1f:1a:b7:4f:70:80: 6b:13:37:3b:3b:bd:12:a1:76:7b:b7:fc:0f:62:c1:fd:e7:b2: 2a:d2:08:f3:be:4b:5c:30:76:69:2e:37:34:56:98:37:1f:af: b0:85:1b:38:e2:4a:e1:c4:7f:20:53:6b:ae:cc:aa:1c:5c:71: d1:48:e2:dc:35:02:17:36:48:93:25:7f:f8:e6:e9:67:a7:c9: b9:b5:ed:dd:88:9d:36:0c:07:df:99:1b:6c:cb:41:3d:5f:3d: 1b:73:50:61:6c:51:aa:5c:ec:10:ac:4b:b3:28:59:75:c9:46: 62:0c:d0:e8:da:1c:63:b6:ed:00:c5:1d:1c:5b:c6:03:4d:0c: e6:58:4f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7X1/BtdPTZiq+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MjVjZGNkZDctNzM2ZC00MGI5LWEwZjgtMjBhNGI4M2NjZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLDEbZjmvIRViQt0nju3n2rTun584NA8+LeF qVltI3Mjd/pxtKfdXwtfzEPqTDmMpsHqPMnc05yNvi3XE+XoOYKl07+9682jdJyJ 6+StKXIhVUQ/1Cxw4mDYDwBGJih+Rcyd9eqAlo6eIWyD7352BgKRx0fr+0wMZ7LK CxxPxC2wer2HCN6Jr99qx21bcP9SLgEGg7fT5iLGkyZKQtzbiL2rKynVc1fy0hKJ hSdujWMTuUMyr3dqRwUlFgeSEn0xmHXAxTQEnOh4nKyUxYsgojyLfF3Q2JYW5aqg Pg8ZI+I1jlDLr0JiAuc8qY/FQfTTuhpA5u01sccPQxyVEEvX/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFCFduScx7oArNCTal1WMBok1TBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWFhMmJiMGItMmNhMi0z Njc4LWFkYTEtMjhiOTQ4ZmFiZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmMNfJSbDNGi80WMab8E2IKGn+Ab8+J3x2NRC7+SmMiVer/aZLEk2ni 14GWVgoLKQGx3UGUPz+UfW10aq0MalyKu2Plu6fW1/rjcF+QGQBRX55CugJwL8tD gMFWKVUqI/CPDZTRLRt9oK93TNvuupgvdZ/55cpmeh8at09wgGsTNzs7vRKhdnu3 /A9iwf3nsirSCPO+S1wwdmkuNzRWmDcfr7CFGzjiSuHEfyBTa67MqhxccdFI4tw1 Ahc2SJMlf/jm6Wenybm17d2InTYMB9+ZG2zLQT1fPRtzUGFsUapc7BCsS7MoWXXJ RmIM0OjaHGO27QDFHRxbxgNNDOZYT+Y= -----END CERTIFICATE-----Generated at Sun Oct 11 09:24:53 2026 by rpki-client