$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa File: dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa (raw, json) Hash identifier: nrKcvZGAxBPDTCDuPzArx7HkC/hjB6u2ccAGuxFnQAg= Subject key identifier: 92:CF:39:A6:BF:4F:10:32:9B:B6:C5:72:73:80:7B:6D:49:17:CB:17 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C86DD0D85AB49ABA56880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:86:dd:0d:85:ab:49:ab:a5:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=29f120ae-2d03-48b1-aaab-47ae641213cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c0:f0:25:50:c5:a7:c5:0a:e3:77:40:6d:33: 61:01:c7:c9:7a:f6:40:29:4b:38:ae:ac:ff:8c:38: 5d:6e:ff:62:5b:7b:77:35:d8:b9:d3:ca:12:1a:76: 35:8e:38:b8:80:b8:cd:98:d0:30:38:1d:01:3b:02: 82:38:cb:33:21:29:47:39:55:7e:48:82:f3:ce:b9: 14:39:77:ad:61:4e:36:31:4d:ca:07:42:4c:87:c3: bf:eb:26:f1:e2:07:e4:bb:67:00:c4:e7:bf:82:31: 26:e2:be:41:f5:26:57:f5:e7:4d:6a:51:c6:74:2b: e3:cc:31:96:26:69:9f:7d:5b:1f:3b:bb:14:50:eb: 21:98:02:ea:f8:b2:97:57:62:f8:85:a0:8b:d8:6a: 0e:54:32:b2:4c:22:ee:91:4e:4c:96:94:0c:6f:e1: 62:02:00:ea:6c:18:4b:bc:56:e6:ab:89:42:83:6d: df:36:a6:de:52:6c:3d:26:44:01:ca:e8:70:ae:57: 54:53:06:b0:e2:4d:93:55:1c:7e:6c:47:26:e3:d3: f2:70:25:31:82:50:0a:57:83:a1:91:1a:bd:12:ce: 74:de:ee:0e:33:13:bd:8c:e7:2a:83:4e:89:8e:df: 40:7c:3a:26:a2:74:ca:8a:f6:b9:71:fa:aa:2f:c2: 7e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CF:39:A6:BF:4F:10:32:9B:B6:C5:72:73:80:7B:6D:49:17:CB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1b:93:8b:68:70:c9:32:d1:80:af:d6:48:51:38:2e:c1:e4: 4c:f6:0a:f8:86:fc:be:29:01:a7:b9:09:21:8b:1d:65:10:26: 61:a4:fd:e0:a0:64:d1:a7:7f:46:a4:d4:18:9d:1a:f5:29:ba: 73:38:06:9b:04:87:10:c1:87:8e:64:dc:91:d7:58:94:87:ae: 13:82:9a:01:2f:50:80:68:36:8c:34:a6:5f:02:33:4d:81:c1: 8c:3b:00:f3:09:cb:46:70:e5:89:f5:3a:78:9c:a5:f7:ed:d5: 5a:a4:07:7a:39:84:22:b1:a5:ea:de:63:74:85:2c:53:c7:7a: 2e:dc:0b:ed:63:41:24:4a:51:7d:26:a0:f2:2d:a7:1a:f6:a6: 55:6d:8c:22:c1:0b:75:6d:6c:3f:64:46:98:f5:db:e6:e9:a0: ae:d5:8e:c7:94:04:a6:7c:d3:b6:c7:30:dd:7e:f7:61:12:07: 45:dc:0b:31:59:66:83:b0:2d:8e:f2:4c:cd:fd:31:6f:12:8a: 00:04:87:66:dd:64:b7:c3:64:ed:44:24:5b:6c:2d:d1:c1:b3: 46:50:8f:47:63:b2:3a:e3:91:4d:c9:e6:30:cd:2d:83:a8:11: d7:27:e6:d9:08:15:b9:3a:4d:79:ea:02:9a:cd:9a:57:05:09: 80:5e:de:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnIbdDYWrSaulaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjlmMTIwYWUtMmQwMy00OGIxLWFhYWItNDdhZTY0MTIxM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMDwJVDFp8UK43dAbTNhAcfJevZAKUs4rqz/ jDhdbv9iW3t3Ndi508oSGnY1jji4gLjNmNAwOB0BOwKCOMszISlHOVV+SILzzrkU OXetYU42MU3KB0JMh8O/6ybx4gfku2cAxOe/gjEm4r5B9SZX9edNalHGdCvjzDGW JmmffVsfO7sUUOshmALq+LKXV2L4haCL2GoOVDKyTCLukU5MlpQMb+FiAgDqbBhL vFbmq4lCg23fNqbeUmw9JkQByuhwrldUUwaw4k2TVRx+bEcm49PycCUxglAKV4Oh kRq9Es503u4OMxO9jOcqg06Jjt9AfDomonTKiva5cfqqL8J+zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLPOaa/TxAym7bFcnOAe21JF8sXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGZmOTliYTgtY2IxZi0z NDI3LWE4NDEtNmExMzYyY2QyNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYbk4tocMky0YCv1khROC7B5Ez2CviG/L4pAae5CSGLHWUQJmGk/eCg ZNGnf0ak1BidGvUpunM4BpsEhxDBh45k3JHXWJSHrhOCmgEvUIBoNow0pl8CM02B wYw7APMJy0Zw5Yn1Onicpfft1VqkB3o5hCKxpereY3SFLFPHei7cC+1jQSRKUX0m oPItpxr2plVtjCLBC3VtbD9kRpj12+bpoK7VjseUBKZ807bHMN1+92ESB0XcCzFZ ZoOwLY7yTM39MW8SigAEh2bdZLfDZO1EJFtsLdHBs0ZQj0djsjrjkU3J5jDNLYOo Edcn5tkIFbk6TXnqAprNmlcFCYBe3qM= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:20 2026 by rpki-client