$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa File: 3f64db9d-d1d8-3530-a912-accd8e8cae42.roa (raw, json) Hash identifier: N/g7SxW92t+TROyPA11llS2/1YiiD6SKlOnRwlRevfE= Subject key identifier: 4E:97:6C:EC:1E:41:74:B5:B9:72:4A:44:62:ED:1D:1C:B2:B4:33:78 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BF45BBFE4A7B63D5F12C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:f4:5b:bf:e4:a7:b6:3d:5f:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b91155dc-883b-4fda-8b23-22710eeb6557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:d9:0d:ff:3b:41:56:14:ff:3c:23:28:30: 82:9f:f7:de:68:a1:4a:74:1d:00:01:07:7b:b7:67: 66:70:82:21:83:f4:dc:f1:75:53:1e:12:6c:84:c0: 63:74:d8:d0:50:12:e2:4b:92:2f:85:56:30:28:73: 28:fb:f0:fb:2d:b4:4e:82:a0:c8:ee:97:40:f9:86: 74:8b:0b:fd:32:76:04:d7:f1:f5:25:ea:42:ad:d0: 1a:f3:c3:84:e8:8e:0a:4d:a2:b6:e8:eb:9e:e2:56: 35:53:53:fd:3c:19:ed:a6:8f:1b:b4:06:05:e9:e8: 75:3c:13:23:ac:6a:1e:a5:49:ad:2e:b7:58:14:00: 65:55:4c:c1:b8:d0:7c:0f:99:01:3c:1b:20:b6:f9: 90:9f:9d:70:84:14:a1:05:82:5a:d0:79:79:1c:86: ef:ab:13:97:2d:5d:51:a3:2c:a0:83:a1:de:52:7d: e9:de:9e:6e:55:83:66:89:da:b5:91:cf:3b:41:2f: 16:17:cd:55:4e:4a:3e:c1:15:65:5a:4e:06:7a:af: 3d:7a:af:67:c9:f7:2d:8b:ec:98:cf:db:34:04:e2: dd:84:e9:d7:03:40:64:19:07:79:c5:90:09:6b:8d: c6:8a:27:ca:02:62:b3:52:96:ae:15:d1:e8:60:33: 2a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:97:6C:EC:1E:41:74:B5:B9:72:4A:44:62:ED:1D:1C:B2:B4:33:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:25:84:5f:b6:78:e9:cf:66:59:e2:16:f7:3c:02:27:50:06: f2:c6:81:6b:f6:73:a7:80:24:48:c4:e3:b9:6d:e6:e0:93:c0: 78:24:61:9c:7a:92:e1:c4:da:31:c9:47:f6:de:6d:fe:92:95: 95:ae:d3:a6:7e:bb:ad:87:6b:b3:52:94:fc:8e:06:1d:d7:30: 7e:9a:15:24:bf:b6:e9:34:00:a6:d7:b1:86:5e:a3:69:a5:e5: b3:bf:87:8e:b7:b4:aa:81:a4:e9:93:5e:4c:c9:70:8a:90:d4: 7d:4a:2d:1f:60:2f:e0:45:2c:0f:5c:f0:cb:f7:39:1b:27:cb: a2:b4:45:04:05:c9:b1:8e:09:5e:09:fb:10:75:e3:97:83:85: dc:e7:cf:f1:98:dc:c6:1b:b3:98:3d:bc:54:e6:00:e4:c2:57: 37:e5:97:c5:98:a8:3d:21:ff:f3:af:9f:19:bb:08:c0:f7:1a: f6:e1:2a:60:59:9b:ba:5c:20:14:b3:5b:98:af:68:ac:42:4b: bc:b6:de:16:b0:da:dd:11:be:03:74:72:64:8d:66:2d:93:eb: 17:b7:3b:bd:fe:39:b8:8e:a8:ea:44:79:65:66:cc:60:b4:67: 72:76:a0:e0:c3:09:f2:0d:43:d0:48:15:25:dd:0f:a6:a5:e0: 0a:f9:24:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm/Rbv+Sntj1fEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjkxMTU1ZGMtODgzYi00ZmRhLThiMjMtMjI3MTBlZWI2NTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyTZDf87QVYU/zwjKDCCn/feaKFKdB0AAQd7 t2dmcIIhg/Tc8XVTHhJshMBjdNjQUBLiS5IvhVYwKHMo+/D7LbROgqDI7pdA+YZ0 iwv9MnYE1/H1JepCrdAa88OE6I4KTaK26Oue4lY1U1P9PBntpo8btAYF6eh1PBMj rGoepUmtLrdYFABlVUzBuNB8D5kBPBsgtvmQn51whBShBYJa0Hl5HIbvqxOXLV1R oyygg6HeUn3p3p5uVYNmidq1kc87QS8WF81VTko+wRVlWk4Geq89eq9nyfcti+yY z9s0BOLdhOnXA0BkGQd5xZAJa43GiifKAmKzUpauFdHoYDMqOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6XbOweQXS1uXJKRGLtHRyytDN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Y2NGRiOWQtZDFkOC0z NTMwLWE5MTItYWNjZDhlOGNhZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4lhF+2eOnPZlniFvc8AidQBvLGgWv2c6eAJEjE47lt5uCTwHgkYZx6 kuHE2jHJR/bebf6SlZWu06Z+u62Ha7NSlPyOBh3XMH6aFSS/tuk0AKbXsYZeo2ml 5bO/h463tKqBpOmTXkzJcIqQ1H1KLR9gL+BFLA9c8Mv3ORsny6K0RQQFybGOCV4J +xB145eDhdznz/GY3MYbs5g9vFTmAOTCVzfll8WYqD0h//Ovnxm7CMD3GvbhKmBZ m7pcIBSzW5ivaKxCS7y23haw2t0RvgN0cmSNZi2T6xe3O73+ObiOqOpEeWVmzGC0 Z3J2oODDCfINQ9BIFSXdD6al4Ar5JEc= -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:19 2026 by rpki-client