$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/471606c7-f219-30d8-9100-e54465ab3e96.roa File: 471606c7-f219-30d8-9100-e54465ab3e96.roa (raw, json) Hash identifier: cSoHSQDSsNWz36eWqnLD4eGXoIrlmk1WNbfP55SdEHs= Subject key identifier: 3D:EB:B5:25:64:58:E5:22:B9:2A:9F:6C:C1:9B:10:76:C6:03:E3:0F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BEECF7B5155F6C97F1A80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/471606c7-f219-30d8-9100-e54465ab3e96.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:ee:cf:7b:51:55:f6:c9:7f:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d0038f6b-c76d-4c81-a0b3-27e476e465e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:6a:df:8f:b3:a1:73:fd:68:23:bd:be:63: 70:9d:f4:d0:ab:39:76:26:d7:4b:41:ba:97:2c:29: 5d:39:13:87:8a:81:1b:24:75:ea:d2:3a:43:80:28: 3c:4d:eb:86:46:30:45:7f:72:5f:ff:5c:f3:24:df: 30:78:b2:cb:6d:bd:ae:b9:9e:86:98:fc:0c:c8:89: 7d:f7:c6:ae:16:a8:4b:77:76:00:aa:0a:b5:93:f7: bb:f9:0a:04:9b:9f:08:96:e3:fc:ff:f9:b8:22:d4: 35:eb:f5:d2:73:f0:ab:3e:30:7d:7d:e5:9d:57:1b: a3:8d:01:e8:b9:25:39:e9:4d:04:11:ab:de:ff:6c: 7c:23:92:f0:7d:bb:6b:14:2f:9a:3e:d9:04:d0:84: 3c:23:10:60:10:19:d0:05:d0:ee:f3:b1:79:56:3f: e5:61:3c:18:9a:58:c8:54:2e:22:3d:37:3b:11:d6: 98:ae:f1:0c:3d:25:c0:f9:84:82:a0:53:09:67:ab: 56:60:7f:e3:25:2f:c9:0d:65:01:7b:2f:6a:8b:44: fa:ff:1d:20:d5:45:d6:87:82:5e:dd:6c:64:b2:2d: df:10:86:44:f4:2d:23:b5:ae:2e:52:aa:1b:98:bf: 21:5f:5f:6c:a2:e5:fc:3a:2a:34:a5:cc:75:2f:8c: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EB:B5:25:64:58:E5:22:B9:2A:9F:6C:C1:9B:10:76:C6:03:E3:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/471606c7-f219-30d8-9100-e54465ab3e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ad:b7:a5:22:9d:03:7e:e8:1d:07:5b:e4:f1:eb:d1:5b:5a: 65:65:e9:12:65:b6:7f:28:f2:6e:36:00:e4:1e:94:f1:23:ce: 86:61:99:4d:f5:18:ff:d8:24:9b:43:2a:44:ed:37:59:9b:e2: 58:f4:7d:3c:57:dc:7c:bc:98:2d:8d:56:bb:04:92:bb:68:12: 93:9b:86:ec:36:92:f1:f1:6b:22:0d:12:d7:62:53:65:65:d0: 15:b1:bb:7b:12:1a:41:73:d6:57:d8:7b:b1:72:d5:35:22:4d: 7a:b3:42:2c:6e:34:1b:df:0a:c4:96:cd:1e:0a:a3:c0:20:e2: 3a:e4:d9:86:0c:a2:60:b0:a3:b9:a5:24:36:1a:6a:ce:d2:c8: 59:38:c3:8a:ec:f5:40:6a:a9:60:2f:ba:ae:3d:b4:93:6a:33: 52:6c:a2:73:f8:e3:a7:1b:1c:a8:0d:aa:c4:1b:bb:f3:a9:f4: b7:78:ed:e0:f7:28:e7:47:dd:e6:db:5f:e1:a7:52:d5:4e:22: fe:c0:90:f1:d2:bf:bf:05:26:87:89:f9:3e:ba:fb:b0:cf:9f: 8f:35:82:84:0d:b8:06:7e:e4:e6:04:3b:01:ed:28:03:af:3b: 15:14:ad:db:9f:e3:56:ba:1f:bc:fa:b3:d0:9e:5e:e6:09:3e: 25:78:d0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm+7Pe1FV9sl/GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDAwMzhmNmItYzc2ZC00YzgxLWEwYjMtMjdlNDc2ZTQ2NWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYFq34+zoXP9aCO9vmNwnfTQqzl2JtdLQbqX LCldOROHioEbJHXq0jpDgCg8TeuGRjBFf3Jf/1zzJN8weLLLbb2uuZ6GmPwMyIl9 98auFqhLd3YAqgq1k/e7+QoEm58IluP8//m4ItQ16/XSc/CrPjB9feWdVxujjQHo uSU56U0EEave/2x8I5LwfbtrFC+aPtkE0IQ8IxBgEBnQBdDu87F5Vj/lYTwYmljI VC4iPTc7EdaYrvEMPSXA+YSCoFMJZ6tWYH/jJS/JDWUBey9qi0T6/x0g1UXWh4Je 3Wxksi3fEIZE9C0jta4uUqobmL8hX19souX8Oio0pcx1L4wxuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3rtSVkWOUiuSqfbMGbEHbGA+MPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDcxNjA2YzctZjIxOS0z MGQ4LTkxMDAtZTU0NDY1YWIzZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOtt6UinQN+6B0HW+Tx69FbWmVl6RJltn8o8m42AOQelPEjzoZhmU31 GP/YJJtDKkTtN1mb4lj0fTxX3Hy8mC2NVrsEkrtoEpObhuw2kvHxayINEtdiU2Vl 0BWxu3sSGkFz1lfYe7Fy1TUiTXqzQixuNBvfCsSWzR4Ko8Ag4jrk2YYMomCwo7ml JDYaas7SyFk4w4rs9UBqqWAvuq49tJNqM1JsonP446cbHKgNqsQbu/Op9Ld47eD3 KOdH3ebbX+GnUtVOIv7AkPHSv78FJoeJ+T66+7DPn481goQNuAZ+5OYEOwHtKAOv OxUUrduf41a6H7z6s9CeXuYJPiV40N8= -----END CERTIFICATE-----Generated at Wed Jul 29 06:56:28 2026 by rpki-client