$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa File: 343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa (raw, json) Hash identifier: DWJmguTCnKtirrzXL1Xs2P+A+pXK1GCrlINDHMuRVgM= Subject key identifier: B9:38:71:6B:E6:C6:EB:22:11:9D:BF:5D:6A:F9:44:BE:10:DC:25:F1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C0C9E993F544BFBC1A388 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:0c:9e:99:3f:54:4b:fb:c1:a3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3dab2502-585d-48b7-997b-e8810ace0956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:10:be:c3:8d:d8:bf:1f:61:95:26:43:c9:a8: f1:09:48:9c:76:a3:a9:74:ac:29:80:92:92:f7:a6: 76:ff:bd:0d:72:be:ca:2c:e8:cf:41:fa:ea:4e:e2: ca:bd:a6:fb:e1:76:e1:ec:a3:38:22:f8:d1:ab:00: a1:93:4b:08:f6:81:d3:f5:37:5c:da:fa:bb:8a:49: 82:62:d5:45:ae:3f:b7:a4:30:ef:71:ed:c2:d7:fe: be:a4:2e:72:a8:99:fd:1b:9c:d6:36:70:4b:23:10: 76:f5:c1:38:d0:61:df:77:82:63:0f:4f:ad:d5:85: 39:2b:38:58:71:fb:ef:6a:86:3f:b2:f3:ef:08:a3: 4c:a7:e9:04:a2:7b:bc:3d:55:b6:48:90:9f:fb:e7: c6:3c:9f:46:e1:7f:f5:80:f2:e5:d7:55:8b:3d:ca: a8:32:48:03:3a:a3:49:63:cb:48:b6:65:1c:36:88: 76:cf:9b:bb:28:1c:c0:72:38:dc:ff:89:0b:f0:61: 9f:9d:82:fd:8f:ec:d9:80:40:88:d7:0b:27:47:80: ef:5f:76:6b:14:e0:55:dc:bf:0f:b0:06:44:b4:ff: 68:c0:d2:d9:09:81:d4:79:74:9e:39:0f:6d:84:95: f0:41:be:50:d2:f5:6f:2d:75:e7:8b:c7:8c:d9:23: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:38:71:6B:E6:C6:EB:22:11:9D:BF:5D:6A:F9:44:BE:10:DC:25:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:dd:3c:cc:23:85:98:97:95:62:d6:39:8e:da:e1:62:6b:55: 63:34:78:25:7d:76:1f:c5:26:16:3b:3c:88:03:a0:32:ab:59: 0e:f8:37:ef:8b:1d:87:e0:df:71:73:6b:91:69:77:fc:34:42: 1b:ea:e4:ed:34:21:c7:fc:e5:65:8b:e7:b0:1d:34:88:15:f9: e7:28:7e:cf:96:49:12:2b:9f:d5:74:c8:9e:d2:a6:ae:1f:d3: 7e:37:a5:85:25:f9:40:00:39:df:f7:81:82:7b:cc:86:27:22: c2:e1:1d:21:30:2b:d0:d0:09:e9:2a:f6:8d:49:94:fb:10:3c: e2:79:68:08:e4:93:d8:2d:f2:7a:2d:27:13:ac:60:50:6c:dd: 43:53:40:f8:3b:38:63:4c:09:b3:db:dc:1d:2e:8e:6c:c7:7e: 35:b6:ff:91:77:f3:69:3a:f8:e3:06:98:ba:46:96:de:44:12: 94:aa:5f:e5:17:91:da:ca:bf:cb:93:0b:32:d5:fc:58:c5:b2: d2:aa:e0:c6:11:6c:1a:cf:97:8e:7e:67:51:d8:a7:66:05:10: 73:e3:09:fa:35:d7:3c:01:c3:77:50:a0:ae:28:f0:9d:4b:cd: 1b:a2:2b:c7:40:d9:2e:31:9d:a9:79:cf:80:8d:9e:8e:39:66: 9f:29:e6:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnAyemT9US/vBo4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2RhYjI1MDItNTg1ZC00OGI3LTk5N2ItZTg4MTBhY2UwOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBC+w43Yvx9hlSZDyajxCUicdqOpdKwpgJKS 96Z2/70Ncr7KLOjPQfrqTuLKvab74Xbh7KM4IvjRqwChk0sI9oHT9Tdc2vq7ikmC YtVFrj+3pDDvce3C1/6+pC5yqJn9G5zWNnBLIxB29cE40GHfd4JjD0+t1YU5KzhY cfvvaoY/svPvCKNMp+kEonu8PVW2SJCf++fGPJ9G4X/1gPLl11WLPcqoMkgDOqNJ Y8tItmUcNoh2z5u7KBzAcjjc/4kL8GGfnYL9j+zZgECI1wsnR4DvX3ZrFOBV3L8P sAZEtP9owNLZCYHUeXSeOQ9thJXwQb5Q0vVvLXXni8eM2SOCJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk4cWvmxusiEZ2/XWr5RL4Q3CXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzQzYjhhZWItOGY5Yi0z ZjU3LWE0NjItODZiYjdmODNiY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbdPMwjhZiXlWLWOY7a4WJrVWM0eCV9dh/FJhY7PIgDoDKrWQ74N++L HYfg33Fza5Fpd/w0Qhvq5O00Icf85WWL57AdNIgV+ecofs+WSRIrn9V0yJ7Spq4f 0343pYUl+UAAOd/3gYJ7zIYnIsLhHSEwK9DQCekq9o1JlPsQPOJ5aAjkk9gt8not JxOsYFBs3UNTQPg7OGNMCbPb3B0ujmzHfjW2/5F382k6+OMGmLpGlt5EEpSqX+UX kdrKv8uTCzLV/FjFstKq4MYRbBrPl45+Z1HYp2YFEHPjCfo11zwBw3dQoK4o8J1L zRuiK8dA2S4xnal5z4CNno45Zp8p5jE= -----END CERTIFICATE-----Generated at Wed Jul 29 10:09:18 2026 by rpki-client