$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1f1e99e-dc8e-32f4-a8ce-7a4be9467bb5.roa File: e1f1e99e-dc8e-32f4-a8ce-7a4be9467bb5.roa (raw, json) Hash identifier: HGiBgfw0wHtfa5HKrsuLOtE6jz6k62kcdL5Df2QvvOI= Subject key identifier: 96:43:B9:6E:0E:43:E3:07:D5:77:41:94:AD:60:D6:EA:02:8A:6C:E2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F71ED7CA7D28B5D3132DED400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1f1e99e-dc8e-32f4-a8ce-7a4be9467bb5.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 33280 IP address blocks: 65.22.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:7c:a7:d2:8b:5d:31:32:de:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=c3518bc6-c001-4bd9-9b0b-e18b3609f7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:33:6c:ed:07:94:eb:9a:f0:47:99:00:a6: a5:53:16:72:60:33:d0:8a:de:18:04:5d:c5:e9:9b: 00:41:dc:a2:6b:b4:a8:a0:87:64:a6:c2:40:c1:3d: 09:10:53:91:84:f9:1f:f4:10:38:df:1f:17:d3:0c: 5e:35:20:13:49:a8:fb:39:d9:d3:06:5f:ba:66:fb: 25:46:0d:76:1d:79:75:6f:78:58:b8:5f:a3:1b:11: ea:b9:d0:08:3f:f7:f6:99:2f:84:34:88:a2:e3:91: 4d:09:3a:3c:cc:3f:6b:7c:19:24:94:99:93:70:f8: ab:32:f8:b5:de:c5:44:15:fe:bc:cc:fd:e1:f9:cb: 92:48:46:d2:cf:26:da:1d:57:e1:41:b5:50:57:a7: 07:b7:81:a2:57:ff:f0:75:c9:dc:c6:8f:60:fd:6e: 24:ee:29:1b:a0:b5:22:5c:5f:6a:14:3a:94:e1:7e: d7:93:7e:f4:77:fe:7a:b1:73:46:4b:94:e3:e8:4a: 2c:7b:27:42:64:f8:11:c8:c3:b9:b1:ab:93:0f:9c: c5:cc:19:7f:cf:39:c5:67:7c:8f:ce:9c:42:2d:33: c8:db:02:31:9e:bc:15:c1:46:6b:74:b1:95:7e:ef: bb:04:b0:8d:fb:fb:99:d1:7d:3f:20:89:14:02:2c: ce:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:43:B9:6E:0E:43:E3:07:D5:77:41:94:AD:60:D6:EA:02:8A:6C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e1f1e99e-dc8e-32f4-a8ce-7a4be9467bb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d2:0e:ef:f6:4a:a7:60:00:1f:26:59:3c:fb:17:db:89:ab: 82:a7:4f:d3:c5:d7:9c:8b:e3:ec:56:13:13:b1:12:0f:56:ec: 40:49:90:dd:07:7e:f1:0e:c9:9c:1d:1f:37:27:05:ae:cb:70: 7d:7e:7d:31:82:76:1c:eb:b3:f3:aa:1b:a5:4b:6c:a9:a0:da: 7c:f9:90:3c:a1:a7:b2:f9:3e:12:c9:f0:76:1f:b1:b1:23:aa: 09:d3:af:f9:6f:7a:38:96:f9:01:d5:4f:91:d2:1d:37:4e:c3: 50:84:af:c0:42:be:7a:5f:da:98:cd:1b:40:1e:ea:51:a8:37: 20:e4:59:69:0f:c1:3d:22:40:19:52:0e:5e:43:f1:14:ea:47: 79:e6:95:45:62:5d:f8:f0:70:68:0e:1b:07:00:2d:86:9e:6d: bf:cc:94:63:f7:eb:84:ff:cc:af:62:85:2f:83:2d:9c:96:2a: ea:21:1b:2c:20:70:3c:ab:1c:4d:b4:50:64:49:97:fd:6b:09: 72:d5:fc:9c:2d:04:d0:1a:db:d9:67:ca:79:2c:22:08:b3:aa: 16:ea:da:59:d4:26:8d:0f:aa:3a:4c:b0:64:c9:06:87:96:7b: e8:32:56:0d:4c:21:2c:9c:11:c3:aa:53:71:32:32:a8:51:be: 3d:09:25:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Xyn0otdMTLe1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YzM1MThiYzYtYzAwMS00YmQ5LTliMGItZTE4YjM2MDlmN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/QzbO0HlOua8EeZAKalUxZyYDPQit4YBF3F 6ZsAQdyia7SooIdkpsJAwT0JEFORhPkf9BA43x8X0wxeNSATSaj7OdnTBl+6Zvsl Rg12HXl1b3hYuF+jGxHqudAIP/f2mS+ENIii45FNCTo8zD9rfBkklJmTcPirMvi1 3sVEFf68zP3h+cuSSEbSzybaHVfhQbVQV6cHt4GiV//wdcncxo9g/W4k7ikboLUi XF9qFDqU4X7Xk370d/56sXNGS5Tj6EoseydCZPgRyMO5sauTD5zFzBl/zznFZ3yP zpxCLTPI2wIxnrwVwUZrdLGVfu+7BLCN+/uZ0X0/IIkUAizOlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZDuW4OQ+MH1XdBlK1g1uoCimziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTFmMWU5OWUtZGM4ZS0z MmY0LWE4Y2UtN2E0YmU5NDY3YmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITSDu/2SqdgAB8mWTz7F9uJq4KnT9PF15yL4+xWExOxEg9W7EBJkN0H fvEOyZwdHzcnBa7LcH1+fTGCdhzrs/OqG6VLbKmg2nz5kDyhp7L5PhLJ8HYfsbEj qgnTr/lvejiW+QHVT5HSHTdOw1CEr8BCvnpf2pjNG0Ae6lGoNyDkWWkPwT0iQBlS Dl5D8RTqR3nmlUViXfjwcGgOGwcALYaebb/MlGP364T/zK9ihS+DLZyWKuohGywg cDyrHE20UGRJl/1rCXLV/JwtBNAa29lnynksIgizqhbq2lnUJo0PqjpMsGTJBoeW e+gyVg1MISycEcOqU3EyMqhRvj0JJY8= -----END CERTIFICATE-----Generated at Sun Oct 11 06:12:47 2026 by rpki-client