$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa File: 2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa (raw, json) Hash identifier: wdp+OUxfLv46kY9QAk0E2dMoUFyBN0cZO6LqiBY78UI= Subject key identifier: 9F:3D:E0:AB:B4:2E:0A:A3:FE:26:37:19:EF:82:EF:8F:AA:5A:A6:D2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C8CE8BC19798C9D320200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:8c:e8:bc:19:79:8c:9d:32:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=21251dc0-eea4-49f1-9430-02e48db66196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:54:7e:70:99:16:b3:b4:ac:d8:40:79:66:4f: da:38:76:79:95:5a:2d:34:4c:c2:ac:a0:95:82:54: 7c:37:05:57:23:71:e6:99:2d:1f:22:68:47:df:cc: 57:92:18:c2:87:c8:86:2a:29:cf:d3:69:8c:72:d8: 6d:bd:bf:08:2e:df:17:21:73:4f:57:d3:83:0f:92: 2a:f0:bc:5d:4d:12:f6:d3:09:b5:df:2e:db:2b:bd: 87:b0:32:d4:d9:be:8e:75:13:ce:28:dc:11:22:d0: 62:13:13:96:9c:0a:2f:0d:37:8d:5d:54:2b:0a:e7: be:67:3d:18:c3:6e:06:2b:20:3f:d4:2d:eb:6a:50: d6:17:0f:9f:59:f4:f4:28:b4:b9:03:0d:d4:bc:74: b5:43:d7:5b:f6:fc:f2:ec:72:3b:32:37:ce:11:b9: 64:3b:ca:96:ca:a0:8d:79:f4:8c:9d:d0:0d:ec:8a: 48:0e:80:41:5b:a0:1d:fb:ba:38:93:23:d4:c2:8c: 6c:62:ca:d1:60:e6:91:46:33:19:c1:42:af:ed:62: ce:7e:93:81:50:cc:83:95:6d:d9:51:a6:93:46:d3: 3f:fc:2b:01:7c:ef:23:ee:c1:12:5a:47:9a:66:8e: 00:f4:7b:75:57:fc:5a:ad:12:67:a2:0c:93:ba:5e: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3D:E0:AB:B4:2E:0A:A3:FE:26:37:19:EF:82:EF:8F:AA:5A:A6:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a042cf3-7bb6-3dd3-afb6-4577a1ed2a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:0a:01:cd:03:db:4c:a0:0f:83:d5:b7:35:f2:86:db:b7:eb: b9:dd:44:5e:0a:df:ca:3d:c3:42:e0:c1:0d:27:02:41:b1:90: ed:8c:6e:a7:34:00:c4:2a:16:9c:7d:43:a2:3a:35:f3:1e:ed: 90:05:9c:cb:0a:f7:b9:87:e5:16:42:f5:2e:fa:96:87:47:70: 0d:29:07:70:7c:3a:fa:7a:c9:93:f2:a7:64:dd:32:8b:9a:7a: bd:cb:4f:40:43:19:4c:38:fc:6a:69:51:8e:85:c5:dd:f2:3a: a0:93:e4:71:8c:f9:e4:43:02:29:1d:92:c8:90:70:48:a6:00: c9:eb:0a:6e:d2:74:63:71:88:50:bc:e7:fe:5c:4f:b4:fe:29: f9:4e:3e:71:3b:f1:13:d0:c7:b4:05:f6:94:98:11:54:45:9c: 6b:ed:28:ac:dc:3d:a0:31:f9:2d:a9:1e:58:9f:c2:f6:fc:5a: 64:b6:3b:3f:6f:eb:78:27:e6:68:71:f3:30:19:b7:6f:dc:6a: 7f:ba:0d:72:4f:eb:85:89:8c:c3:4f:ba:f5:33:b3:5c:9a:3e: fb:26:2a:98:81:28:7f:11:22:4b:ec:dd:03:0f:42:94:41:49: 73:aa:26:c6:75:e0:f9:d9:75:2d:75:9b:2e:c7:3b:02:d1:e6: 61:f6:c0:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnIzovBl5jJ0yAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjEyNTFkYzAtZWVhNC00OWYxLTk0MzAtMDJlNDhkYjY2MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglR+cJkWs7Ss2EB5Zk/aOHZ5lVotNEzCrKCV glR8NwVXI3HmmS0fImhH38xXkhjCh8iGKinP02mMcthtvb8ILt8XIXNPV9ODD5Iq 8LxdTRL20wm13y7bK72HsDLU2b6OdRPOKNwRItBiExOWnAovDTeNXVQrCue+Zz0Y w24GKyA/1C3ralDWFw+fWfT0KLS5Aw3UvHS1Q9db9vzy7HI7MjfOEblkO8qWyqCN efSMndAN7IpIDoBBW6Ad+7o4kyPUwoxsYsrRYOaRRjMZwUKv7WLOfpOBUMyDlW3Z UaaTRtM//CsBfO8j7sESWkeaZo4A9Ht1V/xarRJnogyTul49OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ894Ku0Lgqj/iY3Ge+C74+qWqbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmEwNDJjZjMtN2JiNi0z ZGQzLWFmYjYtNDU3N2ExZWQyYTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQKAc0D20ygD4PVtzXyhtu367ndRF4K38o9w0LgwQ0nAkGxkO2Mbqc0 AMQqFpx9Q6I6NfMe7ZAFnMsK97mH5RZC9S76lodHcA0pB3B8Ovp6yZPyp2TdMoua er3LT0BDGUw4/GppUY6Fxd3yOqCT5HGM+eRDAikdksiQcEimAMnrCm7SdGNxiFC8 5/5cT7T+KflOPnE78RPQx7QF9pSYEVRFnGvtKKzcPaAx+S2pHlifwvb8WmS2Oz9v 63gn5mhx8zAZt2/can+6DXJP64WJjMNPuvUzs1yaPvsmKpiBKH8RIkvs3QMPQpRB SXOqJsZ14PnZdS11my7HOwLR5mH2wCc= -----END CERTIFICATE-----Generated at Wed Jul 29 09:05:56 2026 by rpki-client