$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa File: 58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa (raw, json) Hash identifier: 3xFz76Q784IqVCygAp9M4OPI0tGM+gh9culwKC/IUrw= Subject key identifier: AB:2B:F4:98:5E:67:81:46:E8:B4:7C:01:0A:22:7C:4C:AA:FC:46:C3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C6F89CA49E40069293080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:6f:89:ca:49:e4:00:69:29:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=43cb94d0-946c-4152-a81f-3c5955f32ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c5:e7:07:fa:92:14:4c:40:41:a8:bc:50:2b: 77:ff:39:53:a2:09:d0:a9:35:7f:36:df:76:20:c8: 56:d8:b8:eb:d6:65:d2:be:34:d8:e1:25:0e:8e:61: 96:1d:57:22:a4:8a:90:29:a2:60:4e:98:e5:f8:5f: bd:44:62:9f:75:b1:13:60:47:7c:0c:c2:a0:c6:ca: a6:ee:b1:9e:f7:cc:bb:61:5f:80:d6:de:ca:d7:79: 28:61:66:88:44:ba:c2:6b:da:19:0e:ba:09:5b:ea: 5e:d2:2f:67:92:5d:be:03:9d:a6:b0:be:a5:51:6f: da:a5:c4:ed:a3:9e:8d:dd:9b:0f:bd:15:1d:f7:d8: 7f:67:b3:ac:08:5b:0a:fa:c9:ce:9c:8d:90:02:9e: 93:3a:7f:ae:0e:37:26:f2:26:3c:b9:96:72:d0:5e: ed:e0:ad:24:4a:85:d7:09:d6:80:98:e2:de:53:65: 06:82:68:d5:2d:2e:32:76:e2:3b:96:c9:15:d4:50: f0:a4:b5:d3:08:9a:65:91:24:4c:4d:f7:33:3e:46: b9:d4:37:64:c3:29:85:3f:a3:0b:b6:1c:a7:1c:74: ee:26:4e:4a:47:75:a6:b8:98:82:fa:62:13:08:e5: 11:e1:e5:f9:d2:67:31:78:82:19:eb:75:be:55:4b: fa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2B:F4:98:5E:67:81:46:E8:B4:7C:01:0A:22:7C:4C:AA:FC:46:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b8:81:b4:50:ab:3d:5e:da:8c:a9:a9:a0:b5:99:d4:6f:95: c0:be:2a:96:35:24:cb:df:05:17:75:f3:ce:27:12:85:e0:8f: 50:f2:cc:27:36:95:1f:a6:5f:ae:e6:3a:b5:df:14:c5:e3:ab: 4c:b7:0e:33:aa:c8:60:62:61:3e:f9:8d:24:9e:13:f5:da:b3: 9c:ac:a4:47:b3:c3:0b:2c:fa:d2:95:cf:10:2d:26:3f:0a:e3: f4:7a:e6:f9:f4:cd:13:ac:96:3c:66:16:bf:41:56:6d:2e:12: fc:bf:a9:28:ad:9e:08:fd:79:10:28:9d:34:93:a7:a5:96:d4: 13:21:4d:d4:03:ff:04:b2:16:20:d6:a8:e8:35:86:cb:90:8f: 46:1c:18:40:53:60:f5:a9:80:af:9a:3e:9c:60:e0:57:f3:3d: de:64:88:75:d5:80:41:73:e0:ab:5a:28:e0:a2:50:eb:58:fd: 3a:51:aa:35:31:a6:65:6a:a0:9a:e7:ba:62:47:1a:06:5b:7d: 7c:3f:a5:98:c3:33:74:8e:54:f2:aa:e0:7c:97:c9:fa:80:23: 2b:42:10:85:00:f3:64:0d:0d:f7:39:b1:c9:ff:03:db:7e:e9: 81:0a:3a:f8:e2:bb:0a:04:ad:ba:7d:71:77:ef:a3:6e:57:08: 6b:98:c7:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnG+JyknkAGkpMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDNjYjk0ZDAtOTQ2Yy00MTUyLWE4MWYtM2M1OTU1ZjMyZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMXnB/qSFExAQai8UCt3/zlTognQqTV/Nt92 IMhW2Ljr1mXSvjTY4SUOjmGWHVcipIqQKaJgTpjl+F+9RGKfdbETYEd8DMKgxsqm 7rGe98y7YV+A1t7K13koYWaIRLrCa9oZDroJW+pe0i9nkl2+A52msL6lUW/apcTt o56N3ZsPvRUd99h/Z7OsCFsK+snOnI2QAp6TOn+uDjcm8iY8uZZy0F7t4K0kSoXX CdaAmOLeU2UGgmjVLS4yduI7lskV1FDwpLXTCJplkSRMTfczPka51DdkwymFP6ML thynHHTuJk5KR3WmuJiC+mITCOUR4eX50mcxeIIZ63W+VUv6DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsr9JheZ4FG6LR8AQoifEyq/EbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNThkZTFiMGUtZjNiNC0z N2QzLTk4MzItYzM5NmU3OWIxYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu4gbRQqz1e2oypqaC1mdRvlcC+KpY1JMvfBRd1884nEoXgj1DyzCc2 lR+mX67mOrXfFMXjq0y3DjOqyGBiYT75jSSeE/Xas5yspEezwwss+tKVzxAtJj8K 4/R65vn0zROsljxmFr9BVm0uEvy/qSitngj9eRAonTSTp6WW1BMhTdQD/wSyFiDW qOg1hsuQj0YcGEBTYPWpgK+aPpxg4FfzPd5kiHXVgEFz4KtaKOCiUOtY/TpRqjUx pmVqoJrnumJHGgZbfXw/pZjDM3SOVPKq4HyXyfqAIytCEIUA82QNDfc5scn/A9t+ 6YEKOvjiuwoErbp9cXfvo25XCGuYx8o= -----END CERTIFICATE-----Generated at Wed Jul 29 08:15:34 2026 by rpki-client