$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa File: aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa (raw, json) Hash identifier: w6pQb53fGtO79OvruFcrgM75CB1swTQrVUEHjiHGH6A= Subject key identifier: 8F:EE:5F:87:F9:63:5F:56:22:23:31:9C:D5:D1:3C:A1:51:EE:2E:DE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BF168152665E35F9A7F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:f1:68:15:26:65:e3:5f:9a:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=87e18856-fc71-41ce-8cc7-25e121957b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:48:75:8c:80:be:68:dc:38:e5:84:05:0d:18: bd:6b:b2:b5:82:64:e2:10:9e:0d:d2:b9:cb:68:c4: c2:39:11:a1:6f:c2:21:92:d5:64:64:81:4e:26:c1: 4e:8d:af:e0:c9:00:18:88:d5:76:24:f0:d8:11:29: 52:42:6c:fa:64:40:aa:1c:0f:a5:80:c6:dd:07:08: 03:3d:6f:52:b9:fc:69:de:6b:80:fc:9a:57:5f:b1: 09:55:ef:1e:c8:0e:c2:57:fb:e8:85:50:9c:3c:23: 6e:85:e5:81:a2:8a:d9:dc:c5:7e:f7:e0:55:a5:70: b5:e6:d6:1e:c7:9b:78:45:a3:9d:8e:1a:ef:ef:a4: 84:10:97:a7:b3:f6:59:1d:d7:21:51:da:9c:37:6b: db:99:c2:07:b4:e0:59:00:ba:8e:05:5f:c9:3d:8b: 4a:33:12:79:d4:fb:17:0d:7d:67:98:d0:b6:f2:6e: 9c:f9:93:d5:8f:e8:97:06:fa:be:21:bb:13:98:db: 35:93:b1:ee:a4:05:b7:09:58:5d:02:9c:f5:79:2b: 80:d0:af:5d:fc:93:c5:76:08:45:12:52:3e:18:ad: 94:3a:4d:c4:66:d7:c1:44:e0:16:28:86:d1:45:c1: 78:88:87:56:dd:85:1e:ac:18:c3:ac:bc:fb:38:8e: c0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EE:5F:87:F9:63:5F:56:22:23:31:9C:D5:D1:3C:A1:51:EE:2E:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:59:32:b1:0c:bb:45:a2:97:72:5f:5a:e3:2f:e7:09:25:44: 77:ed:9e:54:3b:be:47:dd:b4:3c:c3:ed:e6:2b:3a:56:a5:19: 90:a6:15:0d:e2:25:53:b5:89:e2:b2:68:e2:70:b5:90:c8:19: 0e:54:8e:40:33:19:68:c8:40:94:79:9f:ea:50:13:79:a5:4b: 5c:1f:85:87:59:aa:39:d2:86:23:c3:d9:ff:9e:ba:02:fb:19: 65:56:ca:8d:a8:1f:40:b0:3b:de:a4:d7:6d:da:51:69:8b:9a: eb:22:d7:07:7e:7f:fc:9f:57:a3:58:3d:ea:b2:55:07:b0:be: 14:3e:5b:30:f9:54:65:36:a3:a3:59:b8:c7:11:ba:a8:66:e2: e5:35:7f:6b:21:9f:8b:0a:19:c6:5d:f4:13:53:67:8a:fb:f4: 7c:7d:7c:3b:ca:3d:ef:1f:c0:d2:c1:b0:64:ac:89:a6:ba:20: 99:dd:24:5a:be:f2:37:a2:f5:a2:45:53:41:de:f5:79:94:fc: 55:d0:a2:c2:01:b3:7b:b6:4c:0c:11:91:d4:c9:4c:ab:52:85: d2:b1:bd:e1:f0:e0:6c:e6:95:f7:5c:1b:55:ef:57:cd:b6:ad: e1:48:c9:d3:19:76:64:8c:16:fb:31:69:23:ce:c7:a8:ce:49: 1f:d2:99:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm/FoFSZl41+af4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODdlMTg4NTYtZmM3MS00MWNlLThjYzctMjVlMTIxOTU3YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Eh1jIC+aNw45YQFDRi9a7K1gmTiEJ4N0rnL aMTCORGhb8IhktVkZIFOJsFOja/gyQAYiNV2JPDYESlSQmz6ZECqHA+lgMbdBwgD PW9Sufxp3muA/JpXX7EJVe8eyA7CV/vohVCcPCNuheWBoorZ3MV+9+BVpXC15tYe x5t4RaOdjhrv76SEEJens/ZZHdchUdqcN2vbmcIHtOBZALqOBV/JPYtKMxJ51PsX DX1nmNC28m6c+ZPVj+iXBvq+IbsTmNs1k7HupAW3CVhdApz1eSuA0K9d/JPFdghF ElI+GK2UOk3EZtfBROAWKIbRRcF4iIdW3YUerBjDrLz7OI7AzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/uX4f5Y19WIiMxnNXRPKFR7i7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWFhODkwYzQtMDNmYS0z MjNiLWI0YjYtZjM5Y2Y5ODk4N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1ZMrEMu0Wil3JfWuMv5wklRHftnlQ7vkfdtDzD7eYrOlalGZCmFQ3i JVO1ieKyaOJwtZDIGQ5UjkAzGWjIQJR5n+pQE3mlS1wfhYdZqjnShiPD2f+eugL7 GWVWyo2oH0CwO96k123aUWmLmusi1wd+f/yfV6NYPeqyVQewvhQ+WzD5VGU2o6NZ uMcRuqhm4uU1f2shn4sKGcZd9BNTZ4r79Hx9fDvKPe8fwNLBsGSsiaa6IJndJFq+ 8jei9aJFU0He9XmU/FXQosIBs3u2TAwRkdTJTKtShdKxveHw4GzmlfdcG1XvV822 reFIydMZdmSMFvsxaSPOx6jOSR/SmXc= -----END CERTIFICATE-----Generated at Wed Jul 29 09:19:19 2026 by rpki-client