$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa File: d1ac60c5-9597-3dc6-96f9-a339051715df.roa (raw, json) Hash identifier: 2st9NXIpXsuWNIOT3DianOOFdPuALmdRe95XXERxMJc= Subject key identifier: F9:11:B6:2A:44:42:96:6C:51:99:2E:EF:5B:C7:63:E5:FE:59:D0:C5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C8AFC7C7322D8C5464F20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:8a:fc:7c:73:22:d8:c5:46:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9675ec29-04b4-4c9a-a4d7-a3a415028b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:1a:19:54:99:cd:19:46:12:fc:79:d8:5b: a9:9c:8b:fc:e0:f3:43:92:42:0c:a5:3b:93:98:53: ad:9c:58:9a:6d:6e:ff:73:80:2c:7f:1c:af:c2:53: 4b:82:80:d3:9b:75:64:58:c5:d3:1b:41:67:f4:f6: fe:5a:f8:d9:bc:ad:13:83:a1:ff:c9:d0:74:8c:11: 61:c6:27:8a:40:e2:17:7e:e7:f7:bb:0f:60:09:81: 24:16:32:f0:cd:fe:84:45:33:6e:66:6a:be:95:df: a3:bc:88:60:e6:7f:18:69:3b:f9:3f:57:a1:54:7c: 7b:6b:9f:f7:dc:25:01:47:b5:cb:76:fd:0f:c1:0b: da:fc:79:7e:86:ae:6f:b2:0b:5d:b9:e6:a8:5f:90: ba:ed:0b:1b:37:e5:07:be:0c:0e:d4:a4:1e:bc:70: 38:b4:b5:e2:6b:17:a3:a0:23:39:44:e2:1c:26:e0: 29:c5:2f:24:ec:e6:75:d8:fc:5d:95:04:0c:c6:38: db:0f:62:29:2e:d1:71:1f:20:39:bf:86:c9:fe:00: 3d:4a:13:c1:4a:85:f4:29:b5:0a:ad:a7:31:8e:ad: fd:bd:85:22:dd:6d:53:43:12:1d:7e:52:cc:9f:a6: 1e:a2:90:d3:a4:75:db:79:0b:bd:dd:c5:d8:73:1c: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:B6:2A:44:42:96:6C:51:99:2E:EF:5B:C7:63:E5:FE:59:D0:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d1ac60c5-9597-3dc6-96f9-a339051715df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:35:b9:f9:48:b8:03:4e:99:2d:0d:31:6b:a3:b2:68:dd:a4: 6c:a1:4e:54:a7:72:ca:ff:40:5a:09:af:85:a3:10:a2:ca:d6: 74:63:5b:58:69:0d:20:3f:25:e2:c1:91:99:9b:62:3d:37:07: 4f:a2:57:cb:ea:2f:20:c1:47:56:b4:89:7f:9f:45:0e:f2:73: 7f:29:cb:c0:53:8c:71:13:1f:f9:b4:57:1f:8c:b3:c8:9b:41: 3e:65:77:15:c5:02:e6:b2:55:39:3c:90:26:50:76:bd:cf:ba: a7:2b:23:31:49:ca:b0:02:94:07:0e:ea:9b:66:21:3e:6b:74: 36:6b:ea:ea:f5:e5:f7:da:12:fa:63:34:9c:9e:3d:35:7a:ce: 3c:b2:6e:12:8a:97:93:ec:f0:77:aa:66:ef:63:5c:ef:2f:b7: 1a:22:42:ae:11:c1:3b:b6:5b:2a:50:ce:1e:dc:42:42:e6:33: 50:47:70:25:fb:d0:36:84:fa:2d:99:68:75:7d:0e:59:12:00: 2d:5d:58:cc:2c:bc:9d:7c:6d:36:66:a7:80:86:fa:06:93:8d: 56:f9:c4:26:8a:74:2a:e7:f8:64:33:3c:aa:79:76:d5:e5:8b: ec:92:22:75:f3:ba:ff:97:99:6e:5d:66:17:99:71:1c:8e:33: c2:05:93:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnIr8fHMi2MVGTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTY3NWVjMjktMDRiNC00YzlhLWE0ZDctYTNhNDE1MDI4Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQsaGVSZzRlGEvx52FupnIv84PNDkkIMpTuT mFOtnFiabW7/c4AsfxyvwlNLgoDTm3VkWMXTG0Fn9Pb+WvjZvK0Tg6H/ydB0jBFh xieKQOIXfuf3uw9gCYEkFjLwzf6ERTNuZmq+ld+jvIhg5n8YaTv5P1ehVHx7a5/3 3CUBR7XLdv0PwQva/Hl+hq5vsgtdueaoX5C67QsbN+UHvgwO1KQevHA4tLXiaxej oCM5ROIcJuApxS8k7OZ12PxdlQQMxjjbD2IpLtFxHyA5v4bJ/gA9ShPBSoX0KbUK racxjq39vYUi3W1TQxIdflLMn6YeopDTpHXbeQu93cXYcxyoHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkRtipEQpZsUZku71vHY+X+WdDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDFhYzYwYzUtOTU5Ny0z ZGM2LTk2ZjktYTMzOTA1MTcxNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH01uflIuANOmS0NMWujsmjdpGyhTlSncsr/QFoJr4WjEKLK1nRjW1hp DSA/JeLBkZmbYj03B0+iV8vqLyDBR1a0iX+fRQ7yc38py8BTjHETH/m0Vx+Ms8ib QT5ldxXFAuayVTk8kCZQdr3PuqcrIzFJyrAClAcO6ptmIT5rdDZr6ur15ffaEvpj NJyePTV6zjyybhKKl5Ps8HeqZu9jXO8vtxoiQq4RwTu2WypQzh7cQkLmM1BHcCX7 0DaE+i2ZaHV9DlkSAC1dWMwsvJ18bTZmp4CG+gaTjVb5xCaKdCrn+GQzPKp5dtXl i+ySInXzuv+XmW5dZheZcRyOM8IFk1U= -----END CERTIFICATE-----Generated at Wed Jul 29 09:12:34 2026 by rpki-client