$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa File: 3952f2df-c9da-34fd-b192-2e69549fdba1.roa (raw, json) Hash identifier: nzXo3ITeU2HLbO0ErPcF3Zz+Bv3GJB8/9IbO/ImxHcs= Subject key identifier: 97:50:E3:0C:82:E5:C2:56:64:B8:D9:A7:D3:86:7F:76:E6:0C:12:23 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CACB57655CEA9914DA500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:ac:b5:76:55:ce:a9:91:4d:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cfd48ac3-9f85-46b7-83a3-b5322c1e2d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e2:d1:5e:0a:65:5d:78:39:72:5c:d1:7f:54: 5c:63:ca:2e:eb:91:75:ce:8d:ed:ea:f6:3c:38:0c: e4:01:4a:3c:1d:f8:24:cc:3d:0f:4f:52:f1:80:e3: 01:0f:f4:40:48:78:08:6f:d2:0b:64:06:96:25:5b: f9:e1:41:4f:5e:8a:9a:6b:81:60:52:10:96:5a:d1: 00:29:b2:f5:9f:9e:26:df:7b:ec:ee:18:ba:df:5e: 33:e6:cc:0f:1c:f9:94:6d:db:a3:36:c8:8c:62:30: af:7b:06:c9:30:99:be:98:64:d0:27:98:90:a4:e6: 4c:69:7d:eb:5e:05:b8:cf:54:ac:c0:f1:be:dd:02: 62:8f:cf:92:f1:fc:74:a2:c7:bb:32:36:bd:f7:75: 95:8a:f0:64:f3:10:1f:1c:1a:4e:88:c3:a6:c6:68: 9a:2f:d0:f4:db:b3:2c:11:d9:2c:73:64:90:a9:49: 10:57:37:e6:86:e5:73:e6:04:77:ac:a5:fb:f0:d5: 13:62:43:86:74:31:40:16:3e:c4:71:9f:6e:a6:b3: ae:70:78:b8:96:97:71:b0:1a:7d:14:4b:87:21:00: b3:0c:e6:aa:b2:4f:47:90:32:ce:17:42:b8:91:73: 3c:35:3c:72:26:e1:07:a8:a4:7c:5a:3e:98:4f:96: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:50:E3:0C:82:E5:C2:56:64:B8:D9:A7:D3:86:7F:76:E6:0C:12:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:05:91:a2:46:1d:ff:35:c4:4b:19:f6:ab:d9:0d:25:4e:12: 92:87:be:1c:ba:3c:cf:a5:70:b3:39:c0:e3:0b:c1:06:ac:74: fe:3b:72:1e:ec:19:4f:d9:f7:55:d2:48:f5:a0:ee:ed:a0:af: 95:6e:89:a2:de:41:34:7e:57:c6:ab:d3:94:18:8e:f1:da:77: b3:21:fb:26:58:fe:08:54:58:5a:c6:af:87:33:2d:37:35:43: 5d:33:81:8c:1f:09:40:c8:2f:41:bd:f1:d9:15:1a:d0:f8:79: 7b:ba:89:86:ac:77:c7:e4:fe:9e:bc:a3:2e:7b:a1:29:a8:76: b5:12:f7:13:40:f8:fe:f0:7d:b4:33:f8:47:d7:0a:3b:08:64: fe:25:9e:cc:3c:56:e4:bb:50:10:61:86:56:d7:9c:f7:cd:de: 09:e8:c4:1e:a4:2f:df:51:51:15:9e:fb:bb:66:c1:ad:86:24: 30:bd:e7:ab:4c:7c:7b:a0:c8:95:ae:be:ee:0c:b3:9e:70:73: 69:e0:bd:a1:e1:31:ca:63:8d:54:da:0f:87:af:a3:d8:af:88: 1f:ba:c3:3a:20:83:d6:fb:e5:d8:9e:ef:c7:c3:9a:a1:9d:ec: 79:43:93:46:07:98:d9:0f:69:37:8d:e5:8b:17:b6:12:97:7a: 26:27:9a:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnKy1dlXOqZFNpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2ZkNDhhYzMtOWY4NS00NmI3LTgzYTMtYjUzMjJjMWUyZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleLRXgplXXg5clzRf1RcY8ou65F1zo3t6vY8 OAzkAUo8HfgkzD0PT1LxgOMBD/RASHgIb9ILZAaWJVv54UFPXoqaa4FgUhCWWtEA KbL1n54m33vs7hi6314z5swPHPmUbdujNsiMYjCvewbJMJm+mGTQJ5iQpOZMaX3r XgW4z1SswPG+3QJij8+S8fx0ose7Mja993WVivBk8xAfHBpOiMOmxmiaL9D027Ms Edksc2SQqUkQVzfmhuVz5gR3rKX78NUTYkOGdDFAFj7EcZ9uprOucHi4lpdxsBp9 FEuHIQCzDOaqsk9HkDLOF0K4kXM8NTxyJuEHqKR8Wj6YT5bWiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdQ4wyC5cJWZLjZp9OGf3bmDBIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzk1MmYyZGYtYzlkYS0z NGZkLWIxOTItMmU2OTU0OWZkYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUFkaJGHf81xEsZ9qvZDSVOEpKHvhy6PM+lcLM5wOMLwQasdP47ch7s GU/Z91XSSPWg7u2gr5VuiaLeQTR+V8ar05QYjvHad7Mh+yZY/ghUWFrGr4czLTc1 Q10zgYwfCUDIL0G98dkVGtD4eXu6iYasd8fk/p68oy57oSmodrUS9xNA+P7wfbQz +EfXCjsIZP4lnsw8VuS7UBBhhlbXnPfN3gnoxB6kL99RURWe+7tmwa2GJDC956tM fHugyJWuvu4Ms55wc2ngvaHhMcpjjVTaD4evo9iviB+6wzogg9b75die78fDmqGd 7HlDk0YHmNkPaTeN5YsXthKXeiYnmto= -----END CERTIFICATE-----Generated at Wed Jul 29 09:05:51 2026 by rpki-client