$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/423b1791-30f2-3145-9fcd-ee9730cf9596.roa File: 423b1791-30f2-3145-9fcd-ee9730cf9596.roa (raw, json) Hash identifier: uVxjcg6tbig+UrbgnryE0NnfT7VTJR0fSdU4cx2ZGt4= Subject key identifier: 7C:4A:ED:04:E7:A8:43:76:3D:E4:8C:AC:C7:88:C8:20:0E:6B:1C:A1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BBD43F15E1ADC9ABB2F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/423b1791-30f2-3145-9fcd-ee9730cf9596.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:bd:43:f1:5e:1a:dc:9a:bb:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=08c9b242-4154-46f1-9922-5b1eb5801efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:8c:bf:38:72:4f:b8:cc:7b:b3:fc:50:fa: 74:e7:de:d8:1c:da:30:a7:fa:9a:83:1d:16:58:2f: 90:9a:8b:5f:eb:8d:59:b0:8d:68:73:91:45:42:a1: 91:b2:67:82:01:7b:53:04:b1:a0:4d:20:d4:96:25: 5a:89:02:8b:a9:83:db:65:03:7f:4c:bb:5b:50:9b: df:02:4d:ac:9c:81:98:53:d9:a7:06:14:b0:cf:8b: 03:e0:e0:92:eb:74:3a:da:4b:dd:2d:4f:a5:75:ec: 3c:5e:10:93:7d:61:04:90:a3:57:b6:de:77:6c:11: ee:c3:82:50:e3:07:7e:68:ac:4e:8d:b4:5d:7d:35: 60:f1:02:73:55:23:30:c3:8a:59:64:64:70:dd:f7: 7e:c5:ef:6c:43:4f:9c:97:19:e9:fe:79:74:da:33: 4d:a2:ef:13:15:c0:53:61:00:9a:c4:f7:2c:09:6a: bd:43:fd:0c:47:92:7b:23:af:20:da:3c:9b:f5:9d: 0e:25:07:a6:56:fc:78:c8:41:7f:74:15:4d:04:02: 4a:ea:68:a6:3f:c4:e5:0c:f7:1f:79:d7:a3:0b:23: 48:1b:ae:d2:c6:fd:15:14:e7:92:94:b2:db:09:13: d0:33:b6:41:58:53:42:90:f1:50:f5:f4:cb:a9:38: 2e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4A:ED:04:E7:A8:43:76:3D:E4:8C:AC:C7:88:C8:20:0E:6B:1C:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/423b1791-30f2-3145-9fcd-ee9730cf9596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:65:36:ec:40:b4:52:e7:55:19:2a:89:9d:a2:9f:5d:8a:e8: 73:5b:b4:48:a6:79:79:c1:cf:dc:5b:21:c3:4c:38:47:dc:37: d1:de:b2:9c:54:a0:60:93:31:5d:12:f1:f6:70:e3:2d:d9:2e: 17:a6:09:3f:f4:d0:b4:8a:cb:01:75:92:13:2c:25:7b:18:69: 50:68:d6:cc:a5:65:94:9b:5c:4b:e6:6b:48:ef:63:00:64:c4: 0d:86:1a:ad:88:2b:4b:1f:4b:15:d6:c4:41:e0:19:29:cf:33: 0f:69:7f:4b:6f:cd:45:0e:e3:cb:8d:42:a9:7e:5c:93:c6:6f: 48:1c:f8:8b:c9:0b:ce:7a:3f:68:a6:7f:97:62:e4:86:1b:72: 57:07:4b:0c:1f:53:cb:fc:09:c2:1c:f0:c8:36:a7:7c:fa:90: c3:8e:4b:da:9d:a6:45:b6:69:1b:85:ff:7f:65:70:8b:be:a7: 32:3d:57:6f:ae:28:2e:4f:99:89:67:eb:27:3a:e3:ee:7e:58: fb:2a:e3:7a:9a:8e:2a:6f:cd:46:81:28:b8:8f:23:20:a4:d4: 22:43:d4:97:9c:77:f8:97:6b:09:db:ed:dc:29:cf:ad:8b:53: 85:b9:38:58:e6:df:5a:0e:27:68:65:20:db:40:93:7a:4b:04: 07:b3:3d:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm71D8V4a3Jq7LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDhjOWIyNDItNDE1NC00NmYxLTk5MjItNWIxZWI1ODAxZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvuMvzhyT7jMe7P8UPp0597YHNowp/qagx0W WC+Qmotf641ZsI1oc5FFQqGRsmeCAXtTBLGgTSDUliVaiQKLqYPbZQN/TLtbUJvf Ak2snIGYU9mnBhSwz4sD4OCS63Q62kvdLU+ldew8XhCTfWEEkKNXtt53bBHuw4JQ 4wd+aKxOjbRdfTVg8QJzVSMww4pZZGRw3fd+xe9sQ0+clxnp/nl02jNNou8TFcBT YQCaxPcsCWq9Q/0MR5J7I68g2jyb9Z0OJQemVvx4yEF/dBVNBAJK6mimP8TlDPcf edejCyNIG67Sxv0VFOeSlLLbCRPQM7ZBWFNCkPFQ9fTLqTguBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxK7QTnqEN2PeSMrMeIyCAOaxyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDIzYjE3OTEtMzBmMi0z MTQ1LTlmY2QtZWU5NzMwY2Y5NTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9lNuxAtFLnVRkqiZ2in12K6HNbtEimeXnBz9xbIcNMOEfcN9HespxU oGCTMV0S8fZw4y3ZLhemCT/00LSKywF1khMsJXsYaVBo1sylZZSbXEvma0jvYwBk xA2GGq2IK0sfSxXWxEHgGSnPMw9pf0tvzUUO48uNQql+XJPGb0gc+IvJC856P2im f5di5IYbclcHSwwfU8v8CcIc8Mg2p3z6kMOOS9qdpkW2aRuF/39lcIu+pzI9V2+u KC5PmYln6yc64+5+WPsq43qajipvzUaBKLiPIyCk1CJD1Jecd/iXawnb7dwpz62L U4W5OFjm31oOJ2hlINtAk3pLBAezPUQ= -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:22 2026 by rpki-client