$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa File: d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa (raw, json) Hash identifier: lvkZYwdF50k+oSwdmB32wNzrmgTwUX1ZDeLuM9xzQ4w= Subject key identifier: DD:D3:07:0D:53:F6:E7:90:E9:A4:B5:4D:58:03:2C:4C:8E:03:3F:48 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C17A9ABC4371E87C6ED40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:17:a9:ab:c4:37:1e:87:c6:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d7a32073-d793-4f0d-b685-217911760b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:d3:1b:a6:e6:19:f6:af:3d:cf:ca:cb:6c: 3d:25:88:bb:a5:9e:14:7e:45:56:11:74:b4:78:99: a6:0f:35:78:aa:16:18:74:01:e9:29:dc:40:6e:9c: 81:9c:60:1a:a5:88:4c:e3:4a:9d:98:13:be:ba:cb: 28:3b:8c:14:7d:2e:19:04:b5:67:b7:bc:06:b5:fc: f6:0c:09:a5:c7:68:0c:4d:2b:c3:5d:3e:65:1c:ee: f0:88:9c:9f:88:23:10:f6:4c:b8:6d:ac:5d:66:1e: 24:4d:ed:d9:a1:24:4e:f2:ac:8d:61:52:15:aa:45: 14:18:1d:41:c0:c3:74:26:14:34:8b:d8:21:75:94: ba:b1:25:b7:78:07:d1:3c:7a:64:d4:5d:72:2c:1b: ce:88:5a:11:b0:db:5e:23:04:5c:7a:d7:39:c9:53: b3:06:1d:ab:a0:5e:58:35:06:fa:89:c6:05:7e:45: 0d:a5:3a:2e:dd:73:ba:94:57:3d:3a:0e:9d:cf:8a: 54:6a:6c:6b:b9:ff:3e:cb:4f:e5:04:a0:d1:3a:45: 2b:fc:46:cb:2f:eb:d8:4d:db:46:f9:65:cd:dc:d9: e8:e8:04:c5:18:7f:7c:e7:b2:54:d4:84:3b:5f:1e: 44:1f:76:a6:1d:1d:df:b8:c3:1b:7f:d2:8c:95:15: aa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D3:07:0D:53:F6:E7:90:E9:A4:B5:4D:58:03:2C:4C:8E:03:3F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c8:dc:cb:0e:70:23:96:c8:28:f9:db:a6:69:9b:0f:7a:aa: 58:90:ae:d0:b8:35:a4:63:e9:e9:bc:40:26:4c:3a:19:a2:71: e8:5f:05:bc:29:00:25:3f:3d:56:fa:a9:b6:a1:4a:13:b9:01: 07:50:1b:03:98:3c:b8:64:eb:e3:a0:4d:1b:d5:d5:82:50:c7: 3c:ef:62:3d:12:d2:72:87:11:04:15:e9:42:86:12:58:ee:61: ac:b0:88:02:8b:e5:47:07:59:28:55:a4:a4:ba:41:21:85:dc: 5e:a1:db:f3:43:87:fa:ab:ad:54:cc:0e:d2:6a:79:4a:02:0f: b7:64:de:0e:67:89:58:a7:81:56:82:ef:cd:78:89:49:d3:08: 3e:32:32:b1:9e:85:fc:16:24:56:85:ea:ef:c3:b0:6a:80:cc: 0f:04:54:40:10:7b:2b:5d:32:cf:53:7f:d4:48:6a:c9:59:bf: 85:2f:a9:7c:3d:4e:89:9d:dc:da:71:00:fa:e2:09:a7:38:c2: 31:35:d2:b7:0c:78:ba:69:e7:01:b8:41:cf:2e:4c:e0:3d:72: 04:f0:c8:5a:e5:eb:cd:b8:7b:6a:b4:99:73:8a:fe:66:9f:1c: 81:60:13:eb:e0:4e:5f:1b:49:aa:c2:5c:29:b4:e7:00:06:a0: 76:b9:a6:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnBepq8Q3HofG7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDdhMzIwNzMtZDc5My00ZjBkLWI2ODUtMjE3OTExNzYwYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUDTG6bmGfavPc/Ky2w9JYi7pZ4UfkVWEXS0 eJmmDzV4qhYYdAHpKdxAbpyBnGAapYhM40qdmBO+ussoO4wUfS4ZBLVnt7wGtfz2 DAmlx2gMTSvDXT5lHO7wiJyfiCMQ9ky4baxdZh4kTe3ZoSRO8qyNYVIVqkUUGB1B wMN0JhQ0i9ghdZS6sSW3eAfRPHpk1F1yLBvOiFoRsNteIwRcetc5yVOzBh2roF5Y NQb6icYFfkUNpTou3XO6lFc9Og6dz4pUamxruf8+y0/lBKDROkUr/EbLL+vYTdtG +WXN3Nno6ATFGH9857JU1IQ7Xx5EH3amHR3fuMMbf9KMlRWqYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3TBw1T9ueQ6aS1TVgDLEyOAz9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDc3NmZhMGEtOGYxMS0z MmY1LWE2ZjUtNjYzOWMxOWYwODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArI3MsOcCOWyCj526Zpmw96qliQrtC4NaRj6em8QCZMOhmicehfBbwp ACU/PVb6qbahShO5AQdQGwOYPLhk6+OgTRvV1YJQxzzvYj0S0nKHEQQV6UKGElju YaywiAKL5UcHWShVpKS6QSGF3F6h2/NDh/qrrVTMDtJqeUoCD7dk3g5niVingVaC 7814iUnTCD4yMrGehfwWJFaF6u/DsGqAzA8EVEAQeytdMs9Tf9RIaslZv4UvqXw9 Tomd3NpxAPriCac4wjE10rcMeLpp5wG4Qc8uTOA9cgTwyFrl6824e2q0mXOK/maf HIFgE+vgTl8bSarCXCm05wAGoHa5ptY= -----END CERTIFICATE-----Generated at Wed Jul 29 09:05:51 2026 by rpki-client