$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa File: c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa (raw, json) Hash identifier: b3tmiWFxvxUmtiVAQdpQGbECwwsGYaFOArH5LKoKMFM= Subject key identifier: A4:D2:7B:CC:7C:6E:B8:39:9B:CE:03:23:50:CD:A4:3A:F3:C2:FC:46 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BF450EA22FAC7629CEE60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:f4:50:ea:22:fa:c7:62:9c:ee:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6b972e37-d942-4be2-9ed0-a1cdf1f280f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d4:ab:54:b7:b5:16:1a:77:3a:86:ab:fb:82: 04:fc:7b:45:4e:72:be:65:0e:cd:87:57:a5:12:46: be:d7:51:28:09:aa:97:8a:24:70:39:0e:e8:1d:11: ac:85:bd:6c:d3:cf:e6:cd:4c:f6:9d:cd:ab:cf:c3: 86:d1:3a:bd:52:58:9e:59:2f:41:e9:0c:6a:47:79: 83:68:0c:ec:bb:99:20:de:a7:50:3b:a6:e9:7f:5a: a9:50:e5:96:bc:71:ca:a1:74:48:30:2a:bd:9e:ba: c5:9f:a1:26:79:c5:28:1e:c6:6b:e5:3c:c8:30:bd: d2:18:fc:be:00:f5:8a:7d:0c:ed:f1:4c:07:06:f3: da:a3:a2:e4:8f:99:12:6c:ab:ec:7d:92:44:06:e2: 87:2d:70:ac:e9:b6:33:60:e0:be:d5:0e:1e:1b:db: 63:ec:fd:6f:d2:36:1c:ee:fb:d7:43:29:b4:a9:82: 7f:fc:e4:42:d7:ec:c1:14:3d:40:72:3c:11:6c:f0: 5a:a5:88:cf:01:1b:62:52:ab:1a:0e:e3:19:e5:3a: 36:f9:42:74:84:a4:00:a0:70:18:5e:da:19:04:8e: e8:07:15:af:97:f3:b4:9b:fd:ac:d8:31:c9:c2:44: a6:15:ee:e9:c3:b1:20:1b:d9:53:f4:0a:86:00:25: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D2:7B:CC:7C:6E:B8:39:9B:CE:03:23:50:CD:A4:3A:F3:C2:FC:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c49a7abb-c72c-39db-8e15-c2a6f7c34c31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:31:be:4d:04:b0:fb:e4:92:23:81:c9:d1:5c:1b:9e:0a:86: 47:ec:e2:86:de:64:9c:79:bc:81:3b:66:3d:11:2f:25:7c:50: 94:6d:58:73:f3:31:33:8a:61:00:82:53:86:d7:bc:04:c1:16: 9b:28:70:ad:5f:0c:ac:00:32:fd:c7:bd:df:bc:2e:ad:b7:f2: 80:ff:60:64:3d:71:f9:24:1d:4a:7c:45:8d:e0:2e:80:66:e0: f1:45:af:22:4c:15:2e:a9:1f:74:c1:dd:a5:75:6c:34:d9:b7: 01:b7:54:55:bd:81:df:ca:4d:90:db:3f:f1:ce:e6:2a:6b:5f: cf:cc:ef:8e:78:92:6d:1e:1c:52:7a:37:89:ee:13:0c:f9:5c: 60:44:f5:e6:a1:83:70:c0:b1:c2:b4:72:e8:64:f2:8c:84:8f: ab:63:d4:73:dc:ef:38:aa:80:5c:63:a6:f1:db:b6:69:b2:f3: 1a:d1:d1:43:7f:a4:72:07:3e:ee:61:75:96:04:a5:9a:ca:05: 44:48:dc:36:68:6d:19:1d:29:66:35:99:b4:52:dd:6d:58:9f: cc:50:db:cc:ce:cb:38:18:16:0d:f2:81:54:0d:cf:bb:29:d4: 34:81:36:0f:da:c3:49:54:c8:85:f2:7b:53:88:1d:f3:23:f3: ca:c0:59:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm/RQ6iL6x2Kc7mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmI5NzJlMzctZDk0Mi00YmUyLTllZDAtYTFjZGYxZjI4MGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dSrVLe1Fhp3Ooar+4IE/HtFTnK+ZQ7Nh1el Eka+11EoCaqXiiRwOQ7oHRGshb1s08/mzUz2nc2rz8OG0Tq9UlieWS9B6QxqR3mD aAzsu5kg3qdQO6bpf1qpUOWWvHHKoXRIMCq9nrrFn6EmecUoHsZr5TzIML3SGPy+ APWKfQzt8UwHBvPao6Lkj5kSbKvsfZJEBuKHLXCs6bYzYOC+1Q4eG9tj7P1v0jYc 7vvXQym0qYJ//ORC1+zBFD1AcjwRbPBapYjPARtiUqsaDuMZ5To2+UJ0hKQAoHAY XtoZBI7oBxWvl/O0m/2s2DHJwkSmFe7pw7EgG9lT9AqGACWGxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTSe8x8brg5m84DI1DNpDrzwvxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzQ5YTdhYmItYzcyYy0z OWRiLThlMTUtYzJhNmY3YzM0YzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcxvk0EsPvkkiOBydFcG54Khkfs4obeZJx5vIE7Zj0RLyV8UJRtWHPz MTOKYQCCU4bXvATBFpsocK1fDKwAMv3Hvd+8Lq238oD/YGQ9cfkkHUp8RY3gLoBm 4PFFryJMFS6pH3TB3aV1bDTZtwG3VFW9gd/KTZDbP/HO5iprX8/M7454km0eHFJ6 N4nuEwz5XGBE9eahg3DAscK0cuhk8oyEj6tj1HPc7ziqgFxjpvHbtmmy8xrR0UN/ pHIHPu5hdZYEpZrKBURI3DZobRkdKWY1mbRS3W1Yn8xQ28zOyzgYFg3ygVQNz7sp 1DSBNg/aw0lUyIXye1OIHfMj88rAWdM= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:22 2026 by rpki-client