$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa File: 28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa (raw, json) Hash identifier: 6l7D/o2Irmvn335alLFfk/GsQHCDZkX5QB3nANDEQvA= Subject key identifier: 3A:39:44:1B:2B:F0:70:D7:7B:C6:9D:C0:F8:DD:D3:2D:C9:6A:BC:12 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BE132DC2B0C9DF6E22100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:e1:32:dc:2b:0c:9d:f6:e2:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8fd96d4d-48ae-412b-bc48-a6438f3b41b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:10:83:cd:42:0f:ca:6e:a5:75:a9:d9:a8: 96:04:45:22:1b:31:86:76:91:02:60:ca:20:a9:dd: fe:fa:8c:28:a8:7c:ab:4c:8e:6d:8b:cd:e6:08:ae: 77:94:bf:27:bc:e3:19:b1:e0:75:20:a3:ad:c9:56: dc:50:1d:14:c6:93:e6:56:71:e0:be:33:03:79:e9: 62:9b:08:3b:0d:1f:16:dc:72:4f:34:2c:43:8d:86: 24:6f:10:2c:3e:f6:ec:54:05:d6:82:94:2c:bb:f5: 47:1f:1f:08:2e:ed:4c:78:5c:e4:fb:0b:83:b2:cc: b2:8f:c2:38:f6:ac:5f:48:8a:7e:5d:3d:2c:d9:08: 7b:b0:23:11:3e:88:bc:57:1b:ad:ce:a3:d3:81:0f: d9:be:11:25:ac:ee:16:94:4e:19:58:7c:de:9e:9c: 72:46:1c:b1:fb:c5:16:f8:b8:55:a5:71:78:c5:a9: f3:6f:63:f5:5c:98:95:a7:b0:6a:85:93:c8:cf:22: 8f:ae:d6:f9:fd:45:fa:e6:7c:3e:05:5a:25:b5:f1: 96:c0:9a:02:89:65:00:d5:8f:14:c3:f9:84:f9:cd: c2:67:4b:ed:13:f9:99:b2:77:99:fb:fa:6b:8a:78: 74:82:16:40:0d:06:cf:5e:b8:cb:ed:e9:b6:7c:3c: 63:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:39:44:1B:2B:F0:70:D7:7B:C6:9D:C0:F8:DD:D3:2D:C9:6A:BC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:74:d6:16:32:09:a3:d8:a3:89:15:67:fb:b1:e7:6c:1d:03: be:59:d3:51:6d:20:52:04:8f:58:84:36:f0:19:86:af:12:b5: 50:82:8b:d9:36:ca:9a:07:5a:7f:78:11:be:de:a7:07:8f:cc: 77:34:ae:9a:aa:58:19:4b:92:98:dd:87:ae:c9:87:f8:64:05: a1:3d:0c:d6:45:fd:4c:11:74:8d:83:25:51:5d:03:ef:f7:b8: 3c:40:f9:6f:2a:bd:90:12:58:4c:97:36:d8:20:a5:81:bc:96: ee:09:f5:4c:0c:5e:1a:bd:75:91:a1:f9:d3:b4:de:2d:2a:a5: 4d:54:d7:c9:79:56:bb:14:c6:be:a6:80:50:9d:60:d5:4d:07: a5:f5:b0:cb:1c:ac:79:d8:3c:28:07:b0:d7:cc:79:09:96:1d: 77:99:91:0f:4d:96:7a:e8:2b:28:84:10:82:50:ad:a8:4e:0e: 27:59:04:e5:2f:64:09:68:c0:98:a9:c7:7e:7a:aa:cc:4c:ea: 60:ff:3c:dc:b4:14:bc:9a:e9:15:64:e1:e8:cc:33:5e:25:cb: 01:a1:85:0a:0d:d4:3d:e7:34:ff:3a:ef:5c:2c:8c:5e:85:8a: 59:0d:96:b8:b0:8f:fe:1a:a4:80:64:70:9a:c1:e5:12:6a:2b: 6a:2d:80:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm+Ey3CsMnfbiIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGZkOTZkNGQtNDhhZS00MTJiLWJjNDgtYTY0MzhmM2I0MWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj0Qg81CD8pupXWp2aiWBEUiGzGGdpECYMog qd3++owoqHyrTI5ti83mCK53lL8nvOMZseB1IKOtyVbcUB0UxpPmVnHgvjMDeeli mwg7DR8W3HJPNCxDjYYkbxAsPvbsVAXWgpQsu/VHHx8ILu1MeFzk+wuDssyyj8I4 9qxfSIp+XT0s2Qh7sCMRPoi8VxutzqPTgQ/ZvhElrO4WlE4ZWHzenpxyRhyx+8UW +LhVpXF4xanzb2P1XJiVp7BqhZPIzyKPrtb5/UX65nw+BVoltfGWwJoCiWUA1Y8U w/mE+c3CZ0vtE/mZsneZ+/prinh0ghZADQbPXrjL7em2fDxjmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo5RBsr8HDXe8adwPjd0y3JarwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjhjYjMyMTgtMmFiYi0z YjVmLTgxNzQtOWJiZjdkZGU3YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKh01hYyCaPYo4kVZ/ux52wdA75Z01FtIFIEj1iENvAZhq8StVCCi9k2 ypoHWn94Eb7epwePzHc0rpqqWBlLkpjdh67Jh/hkBaE9DNZF/UwRdI2DJVFdA+/3 uDxA+W8qvZASWEyXNtggpYG8lu4J9UwMXhq9dZGh+dO03i0qpU1U18l5VrsUxr6m gFCdYNVNB6X1sMscrHnYPCgHsNfMeQmWHXeZkQ9NlnroKyiEEIJQrahODidZBOUv ZAlowJipx356qsxM6mD/PNy0FLya6RVk4ejMM14lywGhhQoN1D3nNP8671wsjF6F ilkNlriwj/4apIBkcJrB5RJqK2otgC8= -----END CERTIFICATE-----Generated at Wed Jul 29 09:05:57 2026 by rpki-client