$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c20b394-a054-3946-adfb-28bee79b3dc3.roa File: 8c20b394-a054-3946-adfb-28bee79b3dc3.roa (raw, json) Hash identifier: 0EhhQ7Q0xCLtL0VG62Pd1ZuvbTmXtoEMZEuUNol2FIQ= Subject key identifier: F6:00:B3:45:7B:89:54:C4:90:5A:6C:9D:7A:80:82:EA:EB:4F:60:61 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BE90788D86658E666C480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c20b394-a054-3946-adfb-28bee79b3dc3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:e9:07:88:d8:66:58:e6:66:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b9448dfa-d9ed-44d1-a694-cc5380a75725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:14:52:54:2d:80:a1:f9:03:91:8e:c8:54: 98:25:f4:69:f6:01:6e:34:cb:9f:57:29:58:fc:75: c6:25:af:ca:1a:67:8a:0c:fc:34:b5:a3:57:5d:cf: be:27:f7:a8:bb:82:d6:d0:ca:04:30:21:0d:84:19: 26:20:3d:f5:c4:b0:04:e5:4f:dd:97:b6:31:89:26: cf:8d:6e:85:05:41:30:91:58:81:cf:e6:2b:17:b9: a4:b5:27:23:78:6d:fb:6d:b6:30:62:c2:bc:d2:e4: 2c:67:ed:ab:be:5f:07:c5:43:b7:30:f0:5e:f1:2b: 92:58:fb:12:51:d6:cd:20:2b:36:dc:b3:ba:c6:29: d5:05:e4:3e:a9:4a:de:bf:02:ff:3e:89:48:ef:1b: 09:2b:3b:53:2f:d5:e7:ee:85:a8:f4:f5:83:a4:cf: 3b:04:e9:4f:94:84:0f:74:c7:aa:a5:da:b8:5f:a0: ee:52:8b:fe:07:b5:56:7d:19:1f:2c:d6:67:b8:4d: a7:82:31:1a:3d:b5:7f:2d:6d:f9:13:73:b5:dc:5b: 56:3a:52:1f:f0:38:39:c7:92:ac:5d:0c:5f:88:aa: 70:ec:69:b9:e4:6e:b4:e8:ff:fe:e6:e2:d8:48:58: e4:84:34:72:ec:fc:33:bc:78:aa:19:4f:3d:8d:f4: 75:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:00:B3:45:7B:89:54:C4:90:5A:6C:9D:7A:80:82:EA:EB:4F:60:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c20b394-a054-3946-adfb-28bee79b3dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:03:e2:bd:c3:2e:66:ab:21:c7:6b:35:4d:ea:63:c7:4a:78: b0:08:64:85:91:4e:39:3c:8a:fa:fc:3f:18:c0:73:0d:94:a5: 02:65:b4:6a:7f:7a:0d:80:fb:c5:cf:51:60:3e:5a:f3:02:82: 68:5f:fb:1b:74:f3:2b:76:a4:58:34:aa:d3:a2:23:c5:c2:46: d1:1a:10:c6:6d:6b:22:7e:8e:64:c3:c6:42:aa:a7:77:be:eb: d9:e3:4a:56:6d:34:0f:b9:51:64:6a:52:29:aa:93:95:3b:07: 44:4d:c0:d1:c3:bb:0e:d1:0f:35:ae:27:9d:ed:7b:56:e2:c0: e6:fd:a2:21:38:4e:96:66:e5:64:74:b0:2b:8d:81:3d:c5:be: 55:7a:6b:ef:d0:73:5e:ef:c7:88:b6:76:c5:4b:98:89:20:33: 33:87:fd:89:c0:31:36:3c:e1:60:85:35:7e:b1:e1:1a:f5:09: 2f:7c:bf:af:f6:a5:c7:16:18:39:5d:e9:3b:e8:64:c6:bb:f5: 83:38:57:90:7b:7a:94:4a:bb:dd:b1:35:fb:ac:f3:6c:85:32: 56:b5:67:21:81:73:86:97:a0:7e:c8:d8:16:a5:19:f9:f6:31: f3:4f:0b:a2:04:cf:20:25:f8:47:40:71:94:02:35:1b:34:5c: 99:08:6e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm+kHiNhmWOZmxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Yjk0NDhkZmEtZDllZC00NGQxLWE2OTQtY2M1MzgwYTc1NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEQUUlQtgKH5A5GOyFSYJfRp9gFuNMufVylY /HXGJa/KGmeKDPw0taNXXc++J/eou4LW0MoEMCENhBkmID31xLAE5U/dl7YxiSbP jW6FBUEwkViBz+YrF7mktScjeG37bbYwYsK80uQsZ+2rvl8HxUO3MPBe8SuSWPsS UdbNICs23LO6xinVBeQ+qUrevwL/PolI7xsJKztTL9Xn7oWo9PWDpM87BOlPlIQP dMeqpdq4X6DuUov+B7VWfRkfLNZnuE2ngjEaPbV/LW35E3O13FtWOlIf8Dg5x5Ks XQxfiKpw7Gm55G606P/+5uLYSFjkhDRy7PwzvHiqGU89jfR1iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYAs0V7iVTEkFpsnXqAgurrT2BhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGMyMGIzOTQtYTA1NC0z OTQ2LWFkZmItMjhiZWU3OWIzZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQD4r3DLmarIcdrNU3qY8dKeLAIZIWRTjk8ivr8PxjAcw2UpQJltGp/ eg2A+8XPUWA+WvMCgmhf+xt08yt2pFg0qtOiI8XCRtEaEMZtayJ+jmTDxkKqp3e+ 69njSlZtNA+5UWRqUimqk5U7B0RNwNHDuw7RDzWuJ53te1biwOb9oiE4TpZm5WR0 sCuNgT3FvlV6a+/Qc17vx4i2dsVLmIkgMzOH/YnAMTY84WCFNX6x4Rr1CS98v6/2 pccWGDld6TvoZMa79YM4V5B7epRKu92xNfus82yFMla1ZyGBc4aXoH7I2BalGfn2 MfNPC6IEzyAl+EdAcZQCNRs0XJkIbi8= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:19 2026 by rpki-client