$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa File: bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa (raw, json) Hash identifier: 4wvpCQy+5fZ/FnjgPcU94AGWTqgg4gFx0K1iStSdwtU= Subject key identifier: 3A:E4:04:8A:4F:36:24:A0:B9:41:9A:D6:46:94:C5:F0:2E:48:8D:90 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BD56754E01BEF94DCB8C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:d5:67:54:e0:1b:ef:94:dc:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8fa3714d-afc0-4b4c-8ba8-08a7418526af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a7:af:0e:40:d5:4b:7b:3e:3a:92:82:dd:a6: 79:48:13:8b:89:0a:d6:e5:32:db:5f:81:fb:d1:ed: c9:8d:1d:01:22:1b:44:6b:78:53:1a:51:d1:5b:62: 2e:10:59:63:97:1d:0e:41:80:5e:f4:4d:a8:bb:29: 5d:9e:f2:e4:19:2f:c0:e0:8f:e9:c2:4a:e4:90:76: 8b:11:54:69:12:6d:e2:c5:32:e6:ab:87:26:3c:a3: db:30:58:d7:f3:27:d1:cb:a2:24:ef:ed:31:93:cf: 60:e8:e4:65:a4:41:65:48:45:23:dc:d3:fa:38:af: b0:64:0f:7d:28:0f:b2:dc:b4:e8:a9:73:fe:08:14: 4b:89:ad:62:2c:02:be:48:41:43:40:d0:22:a6:c3: d4:fd:f0:55:d1:da:1e:12:98:62:1b:01:fd:05:bd: a8:0e:a3:1f:9d:8d:6b:46:e7:58:5f:57:55:a0:91: f0:53:4f:91:69:05:92:75:6f:f9:98:cb:94:d0:5e: 08:a3:e4:9b:17:bd:39:8f:38:1d:15:37:2e:db:bf: 0f:ea:cd:65:84:ae:01:a0:8b:35:2b:ad:e1:fb:a6: 7b:d5:a6:09:e8:76:e3:c4:fd:3d:42:62:91:f1:55: e8:34:79:32:93:59:23:e9:4b:20:91:ba:f1:35:62: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E4:04:8A:4F:36:24:A0:B9:41:9A:D6:46:94:C5:F0:2E:48:8D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b6:33:d4:34:3d:21:bd:59:9c:df:f3:b4:af:7a:79:6d:83: f8:dd:a5:fc:0b:08:58:42:e0:0f:f3:77:7b:0e:d0:a9:7f:13: 96:25:31:ad:8e:4d:d8:e1:78:01:4b:76:8e:49:d1:e5:53:e6: 30:de:d4:61:14:32:47:1b:1c:1a:ba:2f:9f:53:0c:4c:a0:47: 4f:21:19:d5:ae:da:0f:30:bd:33:51:d7:d9:27:5b:3f:50:81: 4a:10:97:c8:62:83:86:24:f0:fa:26:af:10:0e:bb:2c:07:f8: 3a:a1:75:c1:2d:22:22:e4:a3:17:6d:ad:86:5f:c1:65:f6:fd: a2:a9:00:d2:cf:b8:dc:f3:93:3c:ce:bd:d0:51:ab:fd:54:22: 86:83:7a:ef:8a:0e:7a:35:58:86:fe:2e:4f:f8:b6:e4:27:f9: 16:4b:e5:0a:d4:1a:5c:85:ac:41:82:1a:fc:70:3d:50:3b:79: 41:db:8a:8b:8f:e1:22:41:c4:eb:7c:1b:f4:86:e9:6f:0a:00: 0c:c3:59:a0:d0:a6:c6:ba:3f:5c:e9:53:e5:4b:09:2b:81:45: 07:0d:f7:cd:01:1b:09:3e:c0:c2:c4:85:22:a0:f6:ac:d9:68: c8:71:54:ea:88:8b:bd:4c:3d:7c:a1:d5:9e:b1:55:ec:be:83: e9:f2:a6:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm9VnVOAb75TcuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGZhMzcxNGQtYWZjMC00YjRjLThiYTgtMDhhNzQxODUyNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKevDkDVS3s+OpKC3aZ5SBOLiQrW5TLbX4H7 0e3JjR0BIhtEa3hTGlHRW2IuEFljlx0OQYBe9E2ouyldnvLkGS/A4I/pwkrkkHaL EVRpEm3ixTLmq4cmPKPbMFjX8yfRy6Ik7+0xk89g6ORlpEFlSEUj3NP6OK+wZA99 KA+y3LToqXP+CBRLia1iLAK+SEFDQNAipsPU/fBV0doeEphiGwH9Bb2oDqMfnY1r RudYX1dVoJHwU0+RaQWSdW/5mMuU0F4Io+SbF705jzgdFTcu278P6s1lhK4BoIs1 K63h+6Z71aYJ6HbjxP09QmKR8VXoNHkyk1kj6UsgkbrxNWKXXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrkBIpPNiSguUGa1kaUxfAuSI2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmVjOTBiYjktZWE5OS0z ZmE2LWIzMzAtNGIzNjZhYTBhMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRabMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy2M9Q0PSG9WZzf87Svenltg/jdpfwLCFhC4A/zd3sO0Kl/E5YlMa2O TdjheAFLdo5J0eVT5jDe1GEUMkcbHBq6L59TDEygR08hGdWu2g8wvTNR19knWz9Q gUoQl8hig4Yk8PomrxAOuywH+DqhdcEtIiLkoxdtrYZfwWX2/aKpANLPuNzzkzzO vdBRq/1UIoaDeu+KDno1WIb+Lk/4tuQn+RZL5QrUGlyFrEGCGvxwPVA7eUHbiouP 4SJBxOt8G/SG6W8KAAzDWaDQpsa6P1zpU+VLCSuBRQcN980BGwk+wMLEhSKg9qzZ aMhxVOqIi71MPXyh1Z6xVey+g+nypvI= -----END CERTIFICATE-----Generated at Wed Jul 29 09:05:54 2026 by rpki-client