$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa File: ddc8d858-035c-3840-a15e-407ffbe6818e.roa (raw, json) Hash identifier: vKRAhSyoXZpkzQFu6siv+PF8WD2rsT8pLXIN92xRO5c= Subject key identifier: A0:12:4F:37:52:2F:E0:31:71:CB:3E:1A:D9:0A:78:B7:EF:10:C3:75 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C90D7F3C9248F0FC22580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:90:d7:f3:c9:24:8f:0f:c2:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c4c1b659-fa77-42f2-b15e-fc29fd79c8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:da:00:b7:d5:a1:a8:e9:ea:4f:40:41:73: 0c:cb:e8:2a:1a:08:12:6c:99:67:aa:5f:bc:db:73: 5c:d4:4f:01:4f:32:35:9e:a8:93:f5:9a:2c:ef:44: a6:15:c9:ef:e7:c8:26:94:ce:a4:22:90:4e:23:58: c8:d5:00:c1:cd:e8:13:48:23:0f:08:2c:b9:86:98: 82:20:0a:d1:0e:63:bf:23:ff:e1:af:92:e9:27:f6: 58:a5:1c:41:16:7c:27:21:5b:05:03:4e:0a:ad:dd: dd:58:80:74:d7:15:76:ca:7b:b8:4d:d2:2d:63:cc: 54:bc:d2:3b:5b:5f:f8:25:b7:d6:f7:c8:83:61:e3: fe:06:27:42:6f:b0:91:67:3a:ca:f4:49:86:9a:4b: 83:5e:2e:62:7d:11:c3:b0:c4:3e:2f:29:15:79:d8: 60:0e:49:ba:98:5e:ac:e7:42:a9:7c:63:ac:02:2f: 22:ab:3d:b9:ee:3b:6c:f9:0a:5a:ad:59:13:1b:ad: 21:65:f8:55:77:fc:df:d9:3f:95:9c:4b:6e:75:02: 72:67:cc:cb:88:6e:3a:c9:f2:ab:04:f3:48:f1:6c: ed:1d:7f:55:86:54:d3:f9:77:e8:0c:90:4c:b2:7f: ec:12:58:cc:3d:f1:2b:1c:a8:42:bf:a6:2c:51:9f: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:12:4F:37:52:2F:E0:31:71:CB:3E:1A:D9:0A:78:B7:EF:10:C3:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:73:7f:0e:f0:d9:0e:97:ea:78:24:76:f2:bf:49:51:65:1a: 32:d3:2a:2c:d8:60:24:c3:24:d6:f7:47:8a:71:bd:5b:93:87: a4:68:11:79:54:b1:b2:6f:2e:32:14:5c:70:ff:90:3b:31:8c: 34:da:19:ea:9a:1c:f3:b2:01:d1:ee:8a:69:56:fe:e0:22:a1: f8:43:0c:c4:9a:5e:f1:16:8e:72:06:f3:55:08:0a:61:af:20: aa:a4:ba:0c:9e:a7:e0:d4:b6:6f:38:6d:e5:a1:55:11:69:89: 98:5b:f5:20:13:d3:38:be:b0:22:d7:54:5e:de:b4:56:56:f5: 52:49:fb:03:02:85:a7:5f:a5:a1:72:2d:dc:da:e2:b8:27:42: 2e:ce:e8:0d:ec:3f:b1:39:4b:69:84:c1:5e:9d:4d:0d:34:e0: 05:47:67:d8:29:ca:ff:e4:57:64:77:cc:28:db:ad:d3:aa:c8: b7:d7:9c:87:19:2a:2b:77:31:f9:de:69:85:cb:19:77:0f:ba: 92:68:2c:03:12:74:e7:2f:79:34:29:e0:f7:b7:31:06:ab:12: d6:38:bd:8c:4a:4a:35:8b:b0:b4:9f:c0:be:fc:1c:9e:94:34: e9:7a:78:b6:26:4f:46:2a:da:16:1f:25:d2:96:28:bf:15:25: cc:ed:35:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnJDX88kkjw/CJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzRjMWI2NTktZmE3Ny00MmYyLWIxNWUtZmMyOWZkNzljOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYfaALfVoajp6k9AQXMMy+gqGggSbJlnql+8 23Nc1E8BTzI1nqiT9Zos70SmFcnv58gmlM6kIpBOI1jI1QDBzegTSCMPCCy5hpiC IArRDmO/I//hr5LpJ/ZYpRxBFnwnIVsFA04Krd3dWIB01xV2ynu4TdItY8xUvNI7 W1/4JbfW98iDYeP+BidCb7CRZzrK9EmGmkuDXi5ifRHDsMQ+LykVedhgDkm6mF6s 50KpfGOsAi8iqz257jts+QparVkTG60hZfhVd/zf2T+VnEtudQJyZ8zLiG46yfKr BPNI8WztHX9VhlTT+XfoDJBMsn/sEljMPfErHKhCv6YsUZ9qFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKASTzdSL+Axccs+GtkKeLfvEMN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGRjOGQ4NTgtMDM1Yy0z ODQwLWExNWUtNDA3ZmZiZTY4MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxzfw7w2Q6X6ngkdvK/SVFlGjLTKizYYCTDJNb3R4pxvVuTh6RoEXlU sbJvLjIUXHD/kDsxjDTaGeqaHPOyAdHuimlW/uAiofhDDMSaXvEWjnIG81UICmGv IKqkugyep+DUtm84beWhVRFpiZhb9SAT0zi+sCLXVF7etFZW9VJJ+wMChadfpaFy Ldza4rgnQi7O6A3sP7E5S2mEwV6dTQ004AVHZ9gpyv/kV2R3zCjbrdOqyLfXnIcZ Kit3MfneaYXLGXcPupJoLAMSdOcveTQp4Pe3MQarEtY4vYxKSjWLsLSfwL78HJ6U NOl6eLYmT0Yq2hYfJdKWKL8VJcztNY4= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:56 2026 by rpki-client