$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa File: a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa (raw, json) Hash identifier: BnoE6HWaxX1u8revdBYGs2hPDsYKM/r7vH8Fow0vOjs= Subject key identifier: 26:77:4C:3B:BD:49:49:04:CE:7A:B1:73:4C:A8:E9:71:8F:FC:AE:01 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C92F0A0EB712563787280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:92:f0:a0:eb:71:25:63:78:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0dcb211c-6bcd-47ca-9b85-eafd57ec2641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bf:a7:48:55:12:ef:e1:40:c3:07:d3:5a:ee: e8:22:cb:27:64:cd:4c:f1:67:a1:56:ac:ce:fa:52: f7:6c:9d:56:d8:0b:55:45:2c:06:67:58:da:d4:71: 6c:cd:f7:0b:81:9c:e3:20:7e:09:16:07:7c:a8:68: c1:14:5f:c4:5b:ee:b8:08:4d:1f:4e:91:44:b3:bf: 60:59:c0:53:9a:b0:86:45:ac:84:bb:63:19:cf:73: 15:be:6f:00:48:67:7a:ea:d7:9f:68:9e:8a:08:71: 04:72:51:d5:06:72:2c:bb:1b:9f:fd:23:68:15:6f: 16:72:04:fa:2f:53:ed:47:19:15:d1:fe:e3:70:c5: 56:17:f9:93:bc:7c:89:b0:61:b5:ca:52:ef:85:87: c2:08:54:78:a5:32:49:0b:31:87:1c:a8:50:bd:57: ca:a3:b9:42:18:d3:91:9e:3e:a1:19:04:2a:70:0a: 1b:46:bc:27:09:f5:66:23:39:41:bf:df:ac:b2:99: 8f:f5:7f:e5:b8:58:e3:7d:50:f8:19:56:90:a0:69: c4:5b:0b:03:a6:e5:67:40:84:33:fe:6e:3e:43:7d: 00:b0:c4:58:d4:ce:2d:43:7e:40:6b:9d:74:9a:5f: 0c:f8:05:86:54:92:f2:bd:b3:4e:e5:0b:40:17:03: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:77:4C:3B:BD:49:49:04:CE:7A:B1:73:4C:A8:E9:71:8F:FC:AE:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6ca7c7f-531e-3e7e-8b1e-c91a510be500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2a:da:85:71:43:bf:95:df:ca:c8:02:91:25:3f:8e:5d:b9: eb:74:86:8d:29:84:e5:f3:b8:66:76:34:bc:0e:50:89:de:cd: 9c:3f:b3:2d:85:d2:af:e9:b5:3c:8b:68:32:df:a6:0d:70:34: 85:95:7d:4e:df:bd:0c:85:fc:06:76:16:f1:5e:7b:4f:a7:3a: ba:4d:0c:dd:d0:e7:5f:a6:5d:f3:0f:7f:fd:da:6b:36:f8:e8: 0a:44:6a:33:1d:8c:e4:e8:4f:c9:c1:3c:4b:95:b2:e4:f8:e6: ab:22:e3:36:ba:a7:77:d7:d2:ba:c1:a0:07:04:3c:4b:83:d9: f7:78:54:1f:c8:44:67:cd:1b:86:8e:db:45:3a:1e:49:d9:d3: b3:a9:cd:04:f8:8d:3d:d3:05:c1:37:27:8f:a6:83:2b:50:6d: bd:3e:47:a3:31:3c:bb:5b:11:b1:19:d3:1a:74:82:e7:61:b3: cc:0e:f3:e9:21:29:bb:64:92:ca:f3:e7:af:52:48:63:c6:a1: 7f:20:9d:b8:98:bf:55:a8:60:ac:9f:e0:ef:92:01:3d:63:b0: 4c:b8:0c:e4:71:94:a1:a9:23:84:1a:d7:7e:75:e7:1a:e0:3f: ec:5f:39:99:70:7b:0e:5f:50:40:19:43:83:78:bf:fb:e5:2a: 62:36:8b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnJLwoOtxJWN4coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGRjYjIxMWMtNmJjZC00N2NhLTliODUtZWFmZDU3ZWMyNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b+nSFUS7+FAwwfTWu7oIssnZM1M8WehVqzO +lL3bJ1W2AtVRSwGZ1ja1HFszfcLgZzjIH4JFgd8qGjBFF/EW+64CE0fTpFEs79g WcBTmrCGRayEu2MZz3MVvm8ASGd66tefaJ6KCHEEclHVBnIsuxuf/SNoFW8WcgT6 L1PtRxkV0f7jcMVWF/mTvHyJsGG1ylLvhYfCCFR4pTJJCzGHHKhQvVfKo7lCGNOR nj6hGQQqcAobRrwnCfVmIzlBv9+sspmP9X/luFjjfVD4GVaQoGnEWwsDpuVnQIQz /m4+Q30AsMRY1M4tQ35Aa510ml8M+AWGVJLyvbNO5QtAFwMfeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZ3TDu9SUkEznqxc0yo6XGP/K4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTZjYTdjN2YtNTMxZS0z ZTdlLThiMWUtYzkxYTUxMGJlNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYq2oVxQ7+V38rIApElP45duet0ho0phOXzuGZ2NLwOUInezZw/sy2F 0q/ptTyLaDLfpg1wNIWVfU7fvQyF/AZ2FvFee0+nOrpNDN3Q51+mXfMPf/3aazb4 6ApEajMdjOToT8nBPEuVsuT45qsi4za6p3fX0rrBoAcEPEuD2fd4VB/IRGfNG4aO 20U6HknZ07OpzQT4jT3TBcE3J4+mgytQbb0+R6MxPLtbEbEZ0xp0gudhs8wO8+kh Kbtkksrz569SSGPGoX8gnbiYv1WoYKyf4O+SAT1jsEy4DORxlKGpI4Qa13515xrg P+xfOZlwew5fUEAZQ4N4v/vlKmI2i/A= -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:24 2026 by rpki-client