$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0cdf7b57-cac1-345c-987d-0539f13e2592.roa File: 0cdf7b57-cac1-345c-987d-0539f13e2592.roa (raw, json) Hash identifier: l9GAsEKgR6kLv8epALahV8wa1AM9Qa58UBzm9tCech0= Subject key identifier: 4F:25:DC:25:BE:1D:32:86:B8:A8:32:8E:0C:23:07:B6:1D:B4:52:73 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C0B5F4F3B8565FA4BDEA0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0cdf7b57-cac1-345c-987d-0539f13e2592.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:0b:5f:4f:3b:85:65:fa:4b:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=63d897cf-b620-44df-b826-5fc45d4101a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:74:75:cb:b1:36:7c:5f:cb:48:0d:3c:29:7c: 19:9c:66:c1:d0:35:64:76:63:ed:c3:86:d8:23:3b: 7b:4a:a4:cf:53:d5:d9:85:76:7b:9c:15:cf:ec:b1: 3e:f3:3d:f5:87:d2:c9:cb:89:a2:06:80:17:b1:d0: e4:2a:39:d0:21:91:e9:5c:59:93:6b:8d:f2:93:3a: 08:b1:aa:01:59:8d:19:09:d8:7e:22:7d:00:69:5a: dc:ed:8a:4b:f2:1f:92:a5:74:db:18:64:59:04:56: 5b:1d:b2:95:d6:13:07:94:a1:cd:a4:f8:67:df:1b: b5:f2:6c:dd:ea:61:6f:7a:5c:15:de:bf:f1:94:ac: ca:2e:5a:32:65:22:aa:41:ba:2e:7a:76:6c:1e:21: f4:43:4a:ac:36:4d:28:d6:d4:14:b9:ca:89:fc:b6: 3a:d9:95:37:bb:9f:24:e9:33:25:7d:0c:72:14:59: 7d:05:05:8f:72:d9:65:3d:92:ee:d6:de:3a:b0:2b: b1:d0:d7:3d:58:e6:0a:49:5d:ae:ae:db:63:66:f2: fe:1f:58:71:da:f7:a4:7a:43:31:9c:70:27:d6:fd: bd:1a:6f:27:5f:3e:b7:4a:f9:c6:6b:3a:a6:c0:62: be:67:db:b1:13:7e:db:01:12:8a:01:16:eb:43:0b: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:25:DC:25:BE:1D:32:86:B8:A8:32:8E:0C:23:07:B6:1D:B4:52:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0cdf7b57-cac1-345c-987d-0539f13e2592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:4a:1f:2e:f7:f3:8f:b1:71:69:c8:f9:76:d8:ae:c8:21:22: 85:0c:ed:4a:c6:3d:be:d5:11:5f:40:3f:6d:36:f1:cb:73:7f: c9:42:64:fd:1c:38:0d:52:a7:a6:d2:f6:55:0f:37:e9:34:d5: 68:42:1a:93:68:d0:bf:67:a4:9c:d1:94:c0:07:9e:41:c0:a5: 80:bb:64:31:23:df:ee:7d:57:9a:20:fa:14:6d:aa:4d:1d:11: 98:56:01:eb:2a:06:fc:28:90:00:d7:7c:99:8a:71:88:83:5e: cd:48:a0:c2:43:bd:88:ae:5e:ee:1a:b6:62:25:07:3b:42:68: 90:bc:eb:e7:f8:0d:2c:64:09:79:d9:22:d4:4f:d5:e8:26:9d: 64:71:f8:b6:bf:2f:ff:a7:93:e5:e4:59:be:01:82:4f:1d:16: 7b:e5:d5:56:76:5a:f7:99:a7:21:86:17:bc:b7:0f:d8:e2:88: c3:b4:4d:01:d5:d4:a1:e7:7c:e0:6b:52:0d:ae:7b:90:b7:01: a8:95:86:d4:39:f6:90:ef:a3:8a:f6:d8:fc:d1:ed:27:79:27: 13:9a:94:71:9e:9d:e7:0c:77:bb:f5:56:b5:9d:11:a2:c4:5c: be:f2:8f:48:9f:11:90:7c:2f:e3:4a:6a:8a:1a:aa:aa:06:45: ef:ba:de:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnAtfTzuFZfpL3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjNkODk3Y2YtYjYyMC00NGRmLWI4MjYtNWZjNDVkNDEwMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnR1y7E2fF/LSA08KXwZnGbB0DVkdmPtw4bY Izt7SqTPU9XZhXZ7nBXP7LE+8z31h9LJy4miBoAXsdDkKjnQIZHpXFmTa43ykzoI saoBWY0ZCdh+In0AaVrc7YpL8h+SpXTbGGRZBFZbHbKV1hMHlKHNpPhn3xu18mzd 6mFvelwV3r/xlKzKLloyZSKqQbouenZsHiH0Q0qsNk0o1tQUucqJ/LY62ZU3u58k 6TMlfQxyFFl9BQWPctllPZLu1t46sCux0Nc9WOYKSV2urttjZvL+H1hx2vekekMx nHAn1v29Gm8nXz63SvnGazqmwGK+Z9uxE37bARKKARbrQwvjjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8l3CW+HTKGuKgyjgwjB7YdtFJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGNkZjdiNTctY2FjMS0z NDVjLTk4N2QtMDUzOWYxM2UyNTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlKHy7384+xcWnI+XbYrsghIoUM7UrGPb7VEV9AP2028ctzf8lCZP0c OA1Sp6bS9lUPN+k01WhCGpNo0L9npJzRlMAHnkHApYC7ZDEj3+59V5og+hRtqk0d EZhWAesqBvwokADXfJmKcYiDXs1IoMJDvYiuXu4atmIlBztCaJC86+f4DSxkCXnZ ItRP1egmnWRx+La/L/+nk+XkWb4Bgk8dFnvl1VZ2WveZpyGGF7y3D9jiiMO0TQHV 1KHnfOBrUg2ue5C3AaiVhtQ59pDvo4r22PzR7Sd5JxOalHGenecMd7v1VrWdEaLE XL7yj0ifEZB8L+NKaooaqqoGRe+63to= -----END CERTIFICATE-----Generated at Wed Jul 29 06:56:23 2026 by rpki-client