$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0050cfd8-f980-32ec-8954-b2d0be224a87.roa File: 0050cfd8-f980-32ec-8954-b2d0be224a87.roa (raw, json) Hash identifier: u+8U8lk7iA6yMjFx/QInAwqWk+v7d/9jqauTVOwMQ8k= Subject key identifier: 5D:82:1D:FE:DF:02:EE:B7:DD:04:3C:CA:D9:49:AD:48:04:1B:42:D3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BF47F019F9CFE6FFA7400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0050cfd8-f980-32ec-8954-b2d0be224a87.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 65.22.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:f4:7f:01:9f:9c:fe:6f:fa:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=77b71d60-aecd-4c01-80de-91ee0afec589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:e0:95:36:16:bc:9f:55:7e:d9:82:01:97: ef:a6:82:3e:ff:b8:b1:82:b9:46:26:8e:07:33:ab: b9:c9:e5:66:32:80:19:db:fb:0d:f2:d1:4b:8f:8a: 58:0f:96:fe:84:43:f9:ec:63:cc:be:8b:8f:bb:b7: 72:7c:fb:d1:4f:1a:b0:1e:e2:03:3f:ad:28:83:fc: 79:42:58:02:96:ba:68:4f:f4:13:47:ae:e3:b4:76: 15:c8:4f:bf:08:5a:ea:70:c9:69:99:78:54:03:57: 46:1a:46:37:d5:a1:ac:67:64:05:3b:6d:4e:80:17: e4:2b:01:47:bb:ee:00:1d:dc:da:ca:14:6a:72:17: d7:02:9d:62:2d:ef:e2:74:83:6c:f8:ed:f1:c9:91: 1a:25:f2:be:cd:d5:c2:84:19:4e:a5:43:91:f4:ef: a9:41:b5:e7:1c:f4:a7:ca:20:f4:8f:3e:a5:e3:ea: cb:12:c7:da:51:07:51:73:1f:57:c3:31:a2:6c:e5: d9:9c:b3:e2:c4:fa:c4:c5:82:47:e5:8e:8f:52:e3: 3d:ec:4f:4e:b8:af:e3:24:62:0d:d9:8a:be:b2:34: ca:33:99:be:c6:7a:23:09:b8:21:46:e0:cb:3b:67: f7:ee:45:9f:07:b3:88:b3:41:aa:8a:50:29:0c:33: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:82:1D:FE:DF:02:EE:B7:DD:04:3C:CA:D9:49:AD:48:04:1B:42:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0050cfd8-f980-32ec-8954-b2d0be224a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:cc:65:85:bc:6e:45:b5:75:4e:30:7b:9e:10:9b:a4:82:26: 1f:e1:0d:53:ea:77:79:cb:1e:42:30:9d:80:50:94:66:da:64: 69:a7:3b:6b:4f:9a:ef:92:e5:25:ec:78:2e:9f:48:24:0d:0a: d9:ad:fc:40:59:66:b0:4d:08:33:62:bf:1d:dd:78:ce:01:e2: 78:d0:7d:cb:a9:78:e2:7e:94:b2:f7:89:ea:9d:07:47:a0:3c: b2:b6:d0:d8:85:a6:e0:06:e9:0e:24:03:57:0f:09:7e:4c:d8: a5:b7:cb:b3:bb:ba:ba:10:d4:b0:db:29:94:d4:10:81:b7:e2: b8:9e:61:25:8e:ee:a5:36:ec:fe:f2:3b:5d:a3:3e:e1:b2:08: 8e:32:4a:7d:13:25:af:d9:67:d4:75:96:f8:38:55:2c:44:ab: cd:11:cf:8b:6e:fb:b2:f8:08:2e:11:58:6a:47:f0:03:f3:c4: 2d:17:33:1c:f4:2a:df:23:f3:53:39:04:8e:15:eb:ed:ed:32: ee:b4:b0:44:a1:e9:eb:cc:de:16:b2:19:9c:2e:22:74:f9:18: 47:b4:12:29:78:51:77:44:9d:d8:ed:d5:57:df:e3:f0:56:ce: d1:b4:5b:bf:ab:f6:8c:49:01:2c:bf:f9:b3:95:e7:af:bf:bd: 45:dd:26:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm/R/AZ+c/m/6dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzdiNzFkNjAtYWVjZC00YzAxLTgwZGUtOTFlZTBhZmVjNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApprglTYWvJ9VftmCAZfvpoI+/7ixgrlGJo4H M6u5yeVmMoAZ2/sN8tFLj4pYD5b+hEP57GPMvouPu7dyfPvRTxqwHuIDP60og/x5 QlgClrpoT/QTR67jtHYVyE+/CFrqcMlpmXhUA1dGGkY31aGsZ2QFO21OgBfkKwFH u+4AHdzayhRqchfXAp1iLe/idINs+O3xyZEaJfK+zdXChBlOpUOR9O+pQbXnHPSn yiD0jz6l4+rLEsfaUQdRcx9XwzGibOXZnLPixPrExYJH5Y6PUuM97E9OuK/jJGIN 2Yq+sjTKM5m+xnojCbghRuDLO2f37kWfB7OIs0GqilApDDPi9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2CHf7fAu633QQ8ytlJrUgEG0LTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDA1MGNmZDgtZjk4MC0z MmVjLTg5NTQtYjJkMGJlMjI0YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrMZYW8bkW1dU4we54Qm6SCJh/hDVPqd3nLHkIwnYBQlGbaZGmnO2tP mu+S5SXseC6fSCQNCtmt/EBZZrBNCDNivx3deM4B4njQfcupeOJ+lLL3ieqdB0eg PLK20NiFpuAG6Q4kA1cPCX5M2KW3y7O7uroQ1LDbKZTUEIG34rieYSWO7qU27P7y O12jPuGyCI4ySn0TJa/ZZ9R1lvg4VSxEq80Rz4tu+7L4CC4RWGpH8APzxC0XMxz0 Kt8j81M5BI4V6+3tMu60sESh6evM3hayGZwuInT5GEe0Eil4UXdEndjt1Vff4/BW ztG0W7+r9oxJASy/+bOV56+/vUXdJqM= -----END CERTIFICATE-----Generated at Wed Jul 29 09:28:10 2026 by rpki-client