$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa File: 1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa (raw, json) Hash identifier: LXSztRJ8wo8LhA7hzBRVe15gvZCn0rbbeF5hFa0yjck= Subject key identifier: BA:FF:2D:39:70:38:B5:92:81:1F:EA:90:9B:00:F5:5B:32:39:ED:F3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BCFDF6244BF9DF7954880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:cf:df:62:44:bf:9d:f7:95:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3fae9803-4dee-446a-b8c7-072d82ec921d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:1a:b6:7f:ac:16:d8:bf:fd:51:bd:19:ee: 45:44:a8:92:93:0e:49:84:96:21:99:4d:2c:74:f7: 25:56:29:51:8b:05:16:4c:ff:31:be:93:dd:f9:21: 7b:12:af:f2:b7:81:b9:01:5d:45:fd:63:35:8e:a2: db:53:fe:18:08:26:d0:e3:66:10:2f:26:d8:c2:a4: 8c:c4:14:01:81:24:e7:a3:b4:75:fb:b9:76:f5:8b: 8f:ec:10:ce:38:45:cc:c4:2c:05:a8:95:d2:c4:31: db:26:cd:19:c3:1b:73:2f:e2:77:93:fa:81:81:32: ce:1e:a6:04:0f:ae:50:ad:d7:0f:56:65:0f:e5:1a: 4a:9c:64:ba:60:29:33:cc:a7:68:06:cd:78:82:c4: f4:87:00:19:58:3a:8a:df:48:95:d5:7b:d0:ee:70: 6d:a3:e4:75:e1:a5:30:38:84:9b:5d:6d:62:d4:36: 44:c9:5d:c4:3e:3f:f4:d2:98:01:13:e8:18:0a:73: a9:58:91:3c:6b:18:35:46:07:1b:b1:d6:50:ae:9d: 7c:09:ff:72:57:b8:09:3a:79:11:95:d8:59:16:1f: 93:2e:41:06:a0:21:df:77:4a:ec:03:f4:ae:49:37: 00:ed:fb:94:95:98:cb:20:35:e7:6b:c7:f1:e9:cf: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FF:2D:39:70:38:B5:92:81:1F:EA:90:9B:00:F5:5B:32:39:ED:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f5:ac:10:f8:34:44:01:35:c3:34:95:84:b6:1a:69:c2:72: 85:c4:b7:af:75:2e:55:e1:73:dc:e8:ae:72:d8:97:4b:4e:df: 8d:92:e3:c8:e1:5c:f0:99:c9:45:f8:df:29:f9:e8:e8:b6:97: e8:45:60:af:4f:68:2d:84:1c:d4:05:76:24:4e:aa:4a:e7:b9: f1:e6:a9:ca:d1:96:3e:58:9c:0f:b3:9f:54:8e:e0:b7:2c:4a: e8:b2:27:89:4f:dd:37:32:c4:80:27:0d:93:1e:89:78:53:b8: 55:19:cd:50:89:f8:f7:ee:a2:e2:bc:f9:de:2e:56:ec:85:6e: 5d:17:ac:e0:0d:58:30:77:9a:06:b7:ac:ee:a6:00:13:eb:3c: 30:ea:90:ed:46:44:58:93:9b:5f:2e:11:1e:f1:e0:ba:dd:28: c1:b7:54:06:65:86:72:b2:2b:2f:8c:3a:42:85:a7:28:01:8a: 18:f5:d4:40:2b:20:24:43:fd:e8:cd:de:20:ed:f0:b0:9f:20: b4:bb:b3:c8:ca:57:83:4b:00:23:aa:9e:1e:e8:d6:b5:5c:34: 34:66:e7:38:85:94:38:fb:a7:31:aa:61:66:b5:0f:1c:90:18: c5:e1:27:28:e7:77:13:53:14:50:9f:84:7f:f6:82:1b:c6:8c: b0:a8:cb:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm8/fYkS/nfeVSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2ZhZTk4MDMtNGRlZS00NDZhLWI4YzctMDcyZDgyZWM5MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7gatn+sFti//VG9Ge5FRKiSkw5JhJYhmU0s dPclVilRiwUWTP8xvpPd+SF7Eq/yt4G5AV1F/WM1jqLbU/4YCCbQ42YQLybYwqSM xBQBgSTno7R1+7l29YuP7BDOOEXMxCwFqJXSxDHbJs0ZwxtzL+J3k/qBgTLOHqYE D65QrdcPVmUP5RpKnGS6YCkzzKdoBs14gsT0hwAZWDqK30iV1XvQ7nBto+R14aUw OISbXW1i1DZEyV3EPj/00pgBE+gYCnOpWJE8axg1RgcbsdZQrp18Cf9yV7gJOnkR ldhZFh+TLkEGoCHfd0rsA/SuSTcA7fuUlZjLIDXna8fx6c891QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr/LTlwOLWSgR/qkJsA9VsyOe3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWNmMDYyMGQtZjJmMS0z YzVhLTg5N2YtN2FhMTEzZjQ4ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv1rBD4NEQBNcM0lYS2GmnCcoXEt691LlXhc9zornLYl0tO342S48jh XPCZyUX43yn56Oi2l+hFYK9PaC2EHNQFdiROqkrnufHmqcrRlj5YnA+zn1SO4Lcs SuiyJ4lP3TcyxIAnDZMeiXhTuFUZzVCJ+PfuouK8+d4uVuyFbl0XrOANWDB3mga3 rO6mABPrPDDqkO1GRFiTm18uER7x4LrdKMG3VAZlhnKyKy+MOkKFpygBihj11EAr ICRD/ejN3iDt8LCfILS7s8jKV4NLACOqnh7o1rVcNDRm5ziFlDj7pzGqYWa1DxyQ GMXhJyjndxNTFFCfhH/2ghvGjLCoy0k= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:34 2026 by rpki-client