$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa File: a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa (raw, json) Hash identifier: OgnZ8NHZUrWaNIue38qP2pSzV+fNX4lPGBfXn+RtCAI= Subject key identifier: 20:16:11:B8:27:95:D7:43:11:E2:5D:73:02:57:60:4C:FE:90:DE:B8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C26E2D6D2F19AF9A13680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:26:e2:d6:d2:f1:9a:f9:a1:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8a7a8a09-4588-4a14-9ff6-cba03ba499d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:e4:ac:7e:b9:b3:ed:d7:82:75:7c:39:05: a9:65:f7:64:02:03:77:41:c7:4d:f6:70:20:9b:60: 1b:a6:73:c2:77:be:08:0f:15:ef:e9:0b:f3:95:a7: 86:18:bc:0d:d5:7a:a5:40:9a:a1:65:69:cc:87:b6: 53:4c:ba:2b:c5:4a:68:35:bb:72:5b:59:71:39:ad: 9f:72:47:19:3d:64:a5:32:1e:91:87:fb:b7:da:97: 81:84:75:e3:75:f5:6b:6d:3b:d2:be:39:ce:1e:7c: dc:3a:aa:4a:1a:e6:98:46:36:ff:eb:0e:52:2c:2c: 77:f0:85:22:87:db:c4:f3:8a:da:2f:0a:1a:bd:85: d8:98:24:e3:b8:06:89:17:5a:2d:92:76:d1:c8:fa: ec:d2:83:84:4a:1e:90:cc:e1:74:d0:b2:f9:b2:16: f0:83:42:84:02:cb:8c:ac:ac:e0:73:1a:88:70:5c: 24:dd:ac:86:76:22:02:7e:ce:cf:2f:b2:10:b1:7e: 5b:c1:68:91:38:47:b4:d0:aa:9a:e0:dd:2e:08:5a: 7e:33:5f:63:1c:e0:10:94:4a:2b:6e:77:65:3e:d1: 11:eb:e4:6a:e9:ac:2e:d2:86:75:e8:20:a3:9b:18: 0c:7b:24:95:f5:6b:56:77:50:6b:02:31:8a:e6:b0: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:16:11:B8:27:95:D7:43:11:E2:5D:73:02:57:60:4C:FE:90:DE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a84d04b6-c7f1-3f3a-97e5-8992c6de3921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1e:02:17:8c:84:1c:d2:f4:70:9a:99:81:8c:f0:4a:f7:25: 93:55:1e:07:0c:ea:7e:e0:8d:d2:85:fd:e2:b4:de:d8:70:1c: 08:70:f9:a3:5a:c2:21:40:63:09:0c:85:cb:a0:f4:83:d0:03: 92:5f:78:be:8e:18:be:b8:4a:c9:94:ee:60:32:58:db:52:bd: e4:b6:b9:d3:bb:d9:28:0a:f2:fa:7f:a8:8a:eb:34:66:71:f7: cc:7e:05:80:bc:28:7e:80:e2:33:f4:25:5f:5b:cf:f6:1f:e4: 2c:96:ec:ca:88:74:63:03:04:b6:f0:27:cd:26:c4:a4:ce:e8: fc:43:a5:b4:ff:4f:3e:ce:72:44:ad:35:39:6f:22:7d:4a:94: 0a:33:de:bf:26:f3:57:dc:7d:ff:c5:8e:0d:26:2d:e1:3d:87: 56:30:26:6b:b7:e9:7a:7c:37:2b:80:ef:c0:a7:56:47:18:16: 63:d2:b9:13:22:1a:82:b2:a8:19:6d:fe:00:69:4d:9c:ff:6f: d6:7c:4d:e6:1f:91:76:6f:bf:90:b9:19:da:33:0c:6f:f0:8d: 2a:8d:d3:15:12:ba:e1:9a:52:0d:0c:2d:49:26:5d:80:e0:5b: 3d:2c:cb:15:70:b8:6d:c1:a6:26:42:38:9d:50:ab:26:8b:c1: 53:15:47:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnCbi1tLxmvmhNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGE3YThhMDktNDU4OC00YTE0LTlmZjYtY2JhMDNiYTQ5OWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI3krH65s+3XgnV8OQWpZfdkAgN3QcdN9nAg m2AbpnPCd74IDxXv6QvzlaeGGLwN1XqlQJqhZWnMh7ZTTLorxUpoNbtyW1lxOa2f ckcZPWSlMh6Rh/u32peBhHXjdfVrbTvSvjnOHnzcOqpKGuaYRjb/6w5SLCx38IUi h9vE84raLwoavYXYmCTjuAaJF1otknbRyPrs0oOESh6QzOF00LL5shbwg0KEAsuM rKzgcxqIcFwk3ayGdiICfs7PL7IQsX5bwWiROEe00Kqa4N0uCFp+M19jHOAQlEor bndlPtER6+Rq6awu0oZ16CCjmxgMeySV9WtWd1BrAjGK5rATRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAWEbgnlddDEeJdcwJXYEz+kN64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTg0ZDA0YjYtYzdmMS0z ZjNhLTk3ZTUtODk5MmM2ZGUzOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkeAheMhBzS9HCamYGM8Er3JZNVHgcM6n7gjdKF/eK03thwHAhw+aNa wiFAYwkMhcug9IPQA5JfeL6OGL64SsmU7mAyWNtSveS2udO72SgK8vp/qIrrNGZx 98x+BYC8KH6A4jP0JV9bz/Yf5CyW7MqIdGMDBLbwJ80mxKTO6PxDpbT/Tz7OckSt NTlvIn1KlAoz3r8m81fcff/Fjg0mLeE9h1YwJmu36Xp8NyuA78CnVkcYFmPSuRMi GoKyqBlt/gBpTZz/b9Z8TeYfkXZvv5C5GdozDG/wjSqN0xUSuuGaUg0MLUkmXYDg Wz0syxVwuG3BpiZCOJ1QqyaLwVMVRyU= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:21 2026 by rpki-client