$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2fdffa0f-7c93-368f-8243-27f29765ab18.roa File: 2fdffa0f-7c93-368f-8243-27f29765ab18.roa (raw, json) Hash identifier: V7GW/eR1UmUMb6sX0mnN4mpVGEAq+6OKTuvQy2v/Tms= Subject key identifier: 19:82:5E:2A:76:7A:7B:60:6B:4A:40:97:4F:1D:B5:9F:F8:01:77:AB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CAAAE26D8CA1B8D3B7F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2fdffa0f-7c93-368f-8243-27f29765ab18.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:aa:ae:26:d8:ca:1b:8d:3b:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4651b5b4-ae9a-4617-bd5e-edc92d385231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f6:8d:d2:57:ad:f0:a2:e6:7e:6d:94:9c:3c: 80:36:4a:95:5d:84:31:03:1e:93:24:36:b8:22:8d: 72:b4:f5:08:33:15:25:fe:87:57:03:a8:0b:08:82: 01:1b:2e:57:22:29:10:42:d9:b0:24:03:5e:4d:2e: dc:98:1e:ee:b6:f8:59:99:3c:8f:a3:17:ab:6a:4e: 1d:3e:ee:18:60:35:1c:64:05:88:0a:61:5a:39:3e: 9f:a0:79:e0:54:f3:47:8b:73:2b:e1:18:4e:04:ff: 6e:74:6c:6c:1b:b4:6a:cf:71:09:4e:f3:ae:70:7e: ab:c8:6d:62:41:9e:f2:c0:9a:7f:70:b1:d7:ca:68: 0f:6b:d7:4e:d0:dc:4a:d1:1a:ab:0c:48:d8:23:90: 88:ba:e3:03:e3:4c:34:b5:24:f8:79:97:a8:ce:41: b0:04:de:b1:b9:ef:05:47:14:81:2f:91:11:ed:e7: 79:db:39:1f:0a:3a:aa:4f:99:f2:f2:46:b5:0b:80: d8:ae:0b:35:80:d7:b4:5e:e3:80:7f:2b:ae:97:aa: 58:1f:ba:68:9a:fb:c8:c7:8b:69:a7:5c:cc:5e:8c: 52:bd:98:cc:62:7f:f7:b6:f3:44:86:33:5a:23:b1: 36:8f:fe:00:21:1c:cd:d0:b6:fb:14:e9:78:b3:5c: 98:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:82:5E:2A:76:7A:7B:60:6B:4A:40:97:4F:1D:B5:9F:F8:01:77:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2fdffa0f-7c93-368f-8243-27f29765ab18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:aa:55:69:c9:e8:78:e5:90:8e:31:6b:71:dc:47:96:5c:e7: 29:a6:b7:ce:4a:ed:01:56:26:1a:98:68:40:6b:61:8d:87:1b: 98:cb:f1:57:a5:bf:fa:54:14:a4:23:75:5f:50:e6:b3:d1:99: 8f:94:51:5f:e6:d2:82:24:e0:fb:ad:c9:b6:d5:f4:4c:c2:b3: 64:87:34:54:a2:15:e5:85:58:59:32:33:57:5a:3e:28:ca:49: e2:92:5f:b3:6b:4b:7d:23:6f:0f:62:e6:f2:0e:74:64:73:4a: ae:72:df:e7:63:63:9d:5f:46:81:97:8a:88:0d:b6:0b:cb:0b: 47:29:fe:e2:e0:f4:f8:be:2b:41:df:0d:dd:2b:77:e6:84:8c: 0b:d6:2d:30:a7:1b:b6:83:f2:c7:09:20:ab:91:b4:f3:c4:a2: 93:ea:a1:00:1f:a8:ef:fb:0f:74:a0:e4:db:d4:22:55:8b:e6: d3:bf:1e:5a:28:90:ae:da:82:18:8f:2f:27:22:fe:3d:6d:09: 95:1c:22:9b:05:96:b4:a9:45:35:6f:70:f0:0f:ff:70:0c:18: d3:eb:8c:da:b7:60:f3:33:23:66:71:f1:bd:0a:85:30:3d:3d: 76:a8:39:e4:03:b5:f8:01:e2:01:1b:3f:a2:00:e9:e0:8d:40: 28:b5:0f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnKquJtjKG407fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDY1MWI1YjQtYWU5YS00NjE3LWJkNWUtZWRjOTJkMzg1MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvaN0let8KLmfm2UnDyANkqVXYQxAx6TJDa4 Io1ytPUIMxUl/odXA6gLCIIBGy5XIikQQtmwJANeTS7cmB7utvhZmTyPoxerak4d Pu4YYDUcZAWICmFaOT6foHngVPNHi3Mr4RhOBP9udGxsG7Rqz3EJTvOucH6ryG1i QZ7ywJp/cLHXymgPa9dO0NxK0RqrDEjYI5CIuuMD40w0tST4eZeozkGwBN6xue8F RxSBL5ER7ed52zkfCjqqT5ny8ka1C4DYrgs1gNe0XuOAfyuul6pYH7pomvvIx4tp p1zMXoxSvZjMYn/3tvNEhjNaI7E2j/4AIRzN0Lb7FOl4s1yY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmCXip2entga0pAl08dtZ/4AXerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmZkZmZhMGYtN2M5My0z NjhmLTgyNDMtMjdmMjk3NjVhYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWqVWnJ6HjlkI4xa3HcR5Zc5ymmt85K7QFWJhqYaEBrYY2HG5jL8Vel v/pUFKQjdV9Q5rPRmY+UUV/m0oIk4PutybbV9EzCs2SHNFSiFeWFWFkyM1daPijK SeKSX7NrS30jbw9i5vIOdGRzSq5y3+djY51fRoGXiogNtgvLC0cp/uLg9Pi+K0Hf Dd0rd+aEjAvWLTCnG7aD8scJIKuRtPPEopPqoQAfqO/7D3Sg5NvUIlWL5tO/Hloo kK7aghiPLyci/j1tCZUcIpsFlrSpRTVvcPAP/3AMGNPrjNq3YPMzI2Zx8b0KhTA9 PXaoOeQDtfgB4gEbP6IA6eCNQCi1D9E= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:47 2026 by rpki-client