$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa File: 13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa (raw, json) Hash identifier: rTVi1BezNvq+Cf5wKYwCGemKZjvLWqtRP+kB5kx6diM= Subject key identifier: 23:64:FE:86:77:10:2C:7A:50:02:E6:5A:CB:4D:8E:0F:28:D3:81:0F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C97A1F2604421AAE18600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 65.22.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:97:a1:f2:60:44:21:aa:e1:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ea3fa801-4e15-49c7-9e62-146d6102b5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:f1:17:2e:9d:ca:1f:15:8a:db:63:db:3d: 5a:8f:de:78:5f:97:5f:20:31:22:85:71:e7:fe:c1: 70:92:80:c0:1d:d1:14:78:4a:f8:24:f9:24:3a:75: 72:c4:f4:88:fd:1a:c9:95:0b:fa:5f:5f:ba:67:6b: 05:14:9d:7e:af:a0:9d:80:fc:80:bb:13:bd:ab:54: 88:cb:d2:ff:f0:9e:b0:91:e5:40:c3:f5:35:78:99: 35:3d:a0:bb:bb:29:36:ed:69:68:a4:b8:55:c3:be: 51:73:d0:6b:0b:ab:5d:3c:53:83:15:5f:a9:23:9f: 75:73:6e:59:0f:3e:4a:ba:84:90:01:d9:a5:d2:88: df:54:2f:57:eb:63:04:a7:1a:35:87:7a:aa:af:52: e2:01:49:14:59:c6:9a:a4:8a:94:dc:bb:e0:b6:c7: db:18:72:67:49:d1:82:41:64:05:60:02:18:aa:f2: 54:e9:fd:e0:ae:47:5d:a0:f7:17:d7:79:a9:f0:ec: a0:fc:7d:65:1a:d4:48:61:f6:23:70:16:67:39:22: 2c:56:64:80:18:ce:5d:37:d5:eb:50:09:c5:37:82: 33:7f:aa:14:83:54:7d:c5:20:ba:43:d5:81:6b:4b: c9:54:99:21:59:0d:b8:ec:9d:a0:b5:22:41:58:80: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:64:FE:86:77:10:2C:7A:50:02:E6:5A:CB:4D:8E:0F:28:D3:81:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:18:3e:e8:a0:41:7c:16:f6:91:ac:64:3b:cb:12:e7:59:ad: 0d:ba:f6:79:2e:90:4d:b2:09:78:6b:a3:fd:88:30:71:a7:e6: ff:cb:d1:1f:d3:a6:d5:96:e3:15:b1:ae:3d:9e:0c:ac:51:68: f0:50:ff:ca:49:43:b4:dd:f6:83:d0:55:e6:6a:c5:2f:c0:d3: 83:50:00:fe:44:6d:76:5f:82:3a:65:fd:3b:ce:24:21:fc:a4: 8f:c9:1f:20:81:c6:fe:fc:f4:60:69:e3:9f:99:48:af:fe:d3: 7a:fa:f0:84:08:b1:40:05:e6:e6:52:05:59:94:f0:ce:30:bb: 40:de:4f:f4:dd:cb:4f:24:9c:36:ae:d9:91:3e:57:fa:c8:7a: 34:b8:16:57:e2:b3:c1:b5:be:4e:85:05:3b:be:be:6c:cc:f8: a9:a9:aa:71:90:39:8f:9b:f5:37:57:f9:30:d7:43:11:99:38: 27:95:a8:7d:af:f5:0f:7e:27:56:55:06:ac:73:79:76:ab:23: 7d:e6:71:04:e8:66:38:69:cf:a5:27:a0:83:01:63:c5:a8:05: a1:ce:d7:24:5c:a5:3d:ed:08:38:e5:09:10:13:8c:55:33:78: ea:9a:92:c1:37:83:f8:35:03:de:7d:fc:db:c4:ff:52:c4:ed: 53:5a:3f:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnJeh8mBEIarhhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWEzZmE4MDEtNGUxNS00OWM3LTllNjItMTQ2ZDYxMDJiNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2TxFy6dyh8Vittj2z1aj954X5dfIDEihXHn /sFwkoDAHdEUeEr4JPkkOnVyxPSI/RrJlQv6X1+6Z2sFFJ1+r6CdgPyAuxO9q1SI y9L/8J6wkeVAw/U1eJk1PaC7uyk27WlopLhVw75Rc9BrC6tdPFODFV+pI591c25Z Dz5KuoSQAdml0ojfVC9X62MEpxo1h3qqr1LiAUkUWcaapIqU3LvgtsfbGHJnSdGC QWQFYAIYqvJU6f3grkddoPcX13mp8Oyg/H1lGtRIYfYjcBZnOSIsVmSAGM5dN9Xr UAnFN4Izf6oUg1R9xSC6Q9WBa0vJVJkhWQ247J2gtSJBWIDL3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNk/oZ3ECx6UALmWstNjg8o04EPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTNmZmM4NTMtZDRlYi0z YTkxLWI5ZTEtMmFiZmYyNjdlMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRajMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4YPuigQXwW9pGsZDvLEudZrQ269nkukE2yCXhro/2IMHGn5v/L0R/T ptWW4xWxrj2eDKxRaPBQ/8pJQ7Td9oPQVeZqxS/A04NQAP5EbXZfgjpl/TvOJCH8 pI/JHyCBxv789GBp45+ZSK/+03r68IQIsUAF5uZSBVmU8M4wu0DeT/Tdy08knDau 2ZE+V/rIejS4Flfis8G1vk6FBTu+vmzM+KmpqnGQOY+b9TdX+TDXQxGZOCeVqH2v 9Q9+J1ZVBqxzeXarI33mcQToZjhpz6UnoIMBY8WoBaHO1yRcpT3tCDjlCRATjFUz eOqaksE3g/g1A959/NvE/1LE7VNaP/M= -----END CERTIFICATE-----Generated at Wed Jul 29 09:26:24 2026 by rpki-client