$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa File: 4575c36b-b988-3070-998f-2c18e11901f4.roa (raw, json) Hash identifier: +bPgRByvSPoiMZRYcYfTtiR4U3usa7RtQKssighd3z4= Subject key identifier: A2:50:1E:AA:E3:81:8D:DA:77:E7:E8:D7:19:05:5E:5F:63:5B:67:73 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BC1D881E1DBDCD23A7C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:c1:d8:81:e1:db:dc:d2:3a:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1b8b2c22-b1b4-4a5c-bad7-49e091c99b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:56:cd:2a:a5:82:e9:d9:bd:14:2f:d6:01:97: ba:bb:e2:ec:e4:eb:13:11:c0:35:2c:60:1e:28:a7: c8:1f:27:7c:a8:9c:8c:18:93:d0:6b:67:bb:94:51: d7:e8:83:55:e8:1a:33:1b:8b:9a:87:96:1f:15:34: 27:bf:6c:92:d0:43:02:e7:c4:c0:84:cb:d6:97:86: 9a:a0:49:41:af:ab:67:db:9e:15:c5:96:be:4e:5c: 23:b5:fe:93:97:4e:e9:27:d4:a5:81:50:85:55:8c: 9d:5d:58:c3:cf:f5:e0:bb:86:c8:17:34:f1:7f:87: 1f:ca:da:de:33:c7:3c:dc:8f:4a:ef:fa:a3:d7:32: 7b:14:b2:16:20:60:6a:0a:dd:3a:5d:98:15:2b:9a: 18:d0:7e:e0:d3:25:2b:40:3f:d8:34:91:3b:a8:e0: e1:b7:20:39:b2:a8:08:f8:46:01:3b:13:5d:2e:bc: 42:63:3e:dc:b4:a6:9a:a4:3b:02:76:70:ca:ec:53: 41:d9:4f:15:dc:b5:59:e9:cb:5b:5c:22:eb:b3:52: 6c:5f:a6:ea:af:1d:31:6b:be:01:a2:a8:af:f4:2b: 22:2d:62:6c:61:d3:64:12:1f:04:31:07:0c:79:ae: 6f:af:87:d3:bd:07:f0:06:12:fd:88:f0:ea:35:03: fd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:50:1E:AA:E3:81:8D:DA:77:E7:E8:D7:19:05:5E:5F:63:5B:67:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7e:0c:31:74:cf:98:0c:b7:a1:6c:56:b1:32:4f:5b:cd:82: 63:c6:92:2a:73:65:b9:61:b1:26:ea:01:fe:74:f8:11:28:c6: 8d:43:e4:23:27:e8:42:f0:d9:92:72:4e:4c:d4:db:e0:25:b3: d3:c7:0f:43:7f:1f:6c:88:d7:26:ff:1a:70:e8:c1:76:9e:5b: 4b:6a:26:97:91:0a:6f:76:81:20:c1:63:a5:9a:c7:21:41:19: f4:fd:68:fb:9f:5f:9a:02:c6:00:3b:c6:6a:f0:2a:d2:92:57: 2a:50:fc:2f:69:9c:41:b5:81:b5:ed:5a:68:3d:8d:24:04:6b: 0c:db:09:70:2c:40:ed:70:c3:6e:4a:b2:ee:5c:55:e3:27:0c: aa:42:39:92:83:30:9d:8a:87:f9:93:7a:82:d4:d5:45:fc:7e: f4:76:a5:19:9b:b2:c4:b2:75:6b:35:eb:11:04:a0:89:96:4a: dc:11:47:be:8f:77:9e:ac:0e:05:f3:69:04:f9:1c:4a:55:4e: 81:8a:87:8f:1e:ee:26:54:d6:64:de:0d:c2:4f:fc:58:76:e8: f2:e4:30:e3:8a:6e:82:54:0b:95:cd:d7:6f:e2:2a:d1:50:b8: 79:0b:e5:39:8a:10:1c:d1:b6:66:1e:4d:a0:2a:3c:d4:59:1a: 08:51:93:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm8HYgeHb3NI6fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWI4YjJjMjItYjFiNC00YTVjLWJhZDctNDllMDkxYzk5YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FbNKqWC6dm9FC/WAZe6u+Ls5OsTEcA1LGAe KKfIHyd8qJyMGJPQa2e7lFHX6INV6BozG4uah5YfFTQnv2yS0EMC58TAhMvWl4aa oElBr6tn254VxZa+Tlwjtf6Tl07pJ9SlgVCFVYydXVjDz/Xgu4bIFzTxf4cfytre M8c83I9K7/qj1zJ7FLIWIGBqCt06XZgVK5oY0H7g0yUrQD/YNJE7qODhtyA5sqgI +EYBOxNdLrxCYz7ctKaapDsCdnDK7FNB2U8V3LVZ6ctbXCLrs1JsX6bqrx0xa74B oqiv9CsiLWJsYdNkEh8EMQcMea5vr4fTvQfwBhL9iPDqNQP9SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJQHqrjgY3ad+fo1xkFXl9jW2dzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDU3NWMzNmItYjk4OC0z MDcwLTk5OGYtMmMxOGUxMTkwMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF+DDF0z5gMt6FsVrEyT1vNgmPGkipzZblhsSbqAf50+BEoxo1D5CMn 6ELw2ZJyTkzU2+Als9PHD0N/H2yI1yb/GnDowXaeW0tqJpeRCm92gSDBY6WaxyFB GfT9aPufX5oCxgA7xmrwKtKSVypQ/C9pnEG1gbXtWmg9jSQEawzbCXAsQO1ww25K su5cVeMnDKpCOZKDMJ2Kh/mTeoLU1UX8fvR2pRmbssSydWs16xEEoImWStwRR76P d56sDgXzaQT5HEpVToGKh48e7iZU1mTeDcJP/Fh26PLkMOOKboJUC5XN12/iKtFQ uHkL5TmKEBzRtmYeTaAqPNRZGghRk44= -----END CERTIFICATE-----Generated at Wed Jul 29 08:12:13 2026 by rpki-client