$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa File: e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa (raw, json) Hash identifier: ZT/8WziZntRTBHdP4Xd+owaFDvtD0cTs83+R/HKlXW0= Subject key identifier: 28:B7:13:3D:A4:9B:6B:3A:BC:D1:51:C1:37:7B:32:17:E7:2E:C8:47 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BDFB98CFC6E46F49A1F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:df:b9:8c:fc:6e:46:f4:9a:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8756e26a-b435-43ad-905a-c438132f7f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:9a:6a:8e:c1:79:3a:62:7b:22:31:a1:1a: 96:69:1b:6b:23:eb:83:01:88:b9:f1:c0:b1:3d:3a: bf:90:e0:9b:ad:e8:6d:83:9b:be:c9:1c:6e:42:b3: 74:b9:78:34:ad:ca:c7:dc:ab:5f:6e:4c:cc:f2:d5: 10:6b:fe:ea:67:16:1f:89:f1:c2:79:c9:e6:c3:04: c0:c3:d3:da:a2:15:c7:d2:54:95:69:b7:be:83:d3: 2f:85:ac:f9:f8:fc:c0:5f:63:b2:3d:18:f2:f5:db: e9:d5:70:67:71:16:4f:03:e9:46:40:41:01:e8:7a: 30:7b:b6:84:1a:23:ed:a2:f7:02:38:10:19:e9:1a: 50:e4:50:52:44:93:cb:c0:e7:64:de:b2:79:0d:ef: f9:4c:68:37:63:b1:9f:5c:8b:51:0d:c1:04:34:17: c5:bc:0b:44:82:9d:a4:99:72:6b:e9:49:7a:16:b2: 0b:0b:b5:0d:07:54:fc:1b:bb:cd:af:7a:1a:93:cc: ec:2a:36:74:fc:94:11:1f:d1:41:fd:f1:8a:80:68: 55:db:84:2b:f7:f2:2a:bf:6b:06:92:e8:03:8b:15: 54:a3:15:da:27:c6:84:31:35:e4:c3:cc:c9:30:32: f2:9a:d0:9e:b0:83:7d:87:0b:3c:04:51:d5:14:3d: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B7:13:3D:A4:9B:6B:3A:BC:D1:51:C1:37:7B:32:17:E7:2E:C8:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:34:18:22:cc:6f:e1:a8:d9:22:23:36:02:b2:22:77:62:1e: 2f:41:3f:b2:75:9a:02:93:68:5e:6e:2c:26:f2:0e:da:2a:5a: bd:f4:fc:8f:22:5a:3d:37:0b:2e:c3:fe:d0:0e:7e:b3:c1:27: 97:ed:ce:a7:39:09:e5:cf:e1:8f:88:a7:c4:b7:1f:da:e1:a4: f3:45:90:e9:f4:f0:57:ea:13:c9:98:75:cd:5d:c6:14:73:b6: da:a2:26:e1:f4:e1:b6:c5:09:68:ce:9a:4b:d6:e0:c2:88:85: fb:99:3a:18:37:d6:fe:1e:39:74:42:37:7a:a1:52:d3:c9:ee: 52:50:d4:45:d7:b0:25:71:26:63:bc:3e:19:e2:bc:1e:3d:8f: 7a:8d:da:72:56:a6:18:7c:73:94:0d:6c:73:48:8b:c2:e7:7c: 03:4d:e7:c5:10:f8:70:01:e2:b5:81:a0:31:85:f8:77:41:d4: 6d:46:af:6a:cd:9b:6a:c8:b5:02:2b:31:71:b0:6c:a8:64:64: a8:49:0a:97:78:da:45:03:f5:6c:52:c9:47:bc:73:ec:b8:6a: 9d:60:48:a5:6c:f6:d7:0d:44:67:f2:13:4a:4e:b0:7e:8e:7a: 92:3e:45:3d:fe:7b:59:d4:ce:c2:58:7a:77:89:8b:3d:6c:40: 35:73:9a:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm9+5jPxuRvSaH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODc1NmUyNmEtYjQzNS00M2FkLTkwNWEtYzQzODEzMmY3Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Caao7BeTpieyIxoRqWaRtrI+uDAYi58cCx PTq/kOCbrehtg5u+yRxuQrN0uXg0rcrH3KtfbkzM8tUQa/7qZxYfifHCecnmwwTA w9PaohXH0lSVabe+g9Mvhaz5+PzAX2OyPRjy9dvp1XBncRZPA+lGQEEB6Howe7aE GiPtovcCOBAZ6RpQ5FBSRJPLwOdk3rJ5De/5TGg3Y7GfXItRDcEENBfFvAtEgp2k mXJr6Ul6FrILC7UNB1T8G7vNr3oak8zsKjZ0/JQRH9FB/fGKgGhV24Qr9/Iqv2sG kugDixVUoxXaJ8aEMTXkw8zJMDLymtCesIN9hws8BFHVFD14JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi3Ez2km2s6vNFRwTd7MhfnLshHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTNiM2YwN2ItYTc0Mi0z NjAwLWI0YzItYjA5YmE1YzVjNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw0GCLMb+Go2SIjNgKyIndiHi9BP7J1mgKTaF5uLCbyDtoqWr30/I8i Wj03Cy7D/tAOfrPBJ5ftzqc5CeXP4Y+Ip8S3H9rhpPNFkOn08FfqE8mYdc1dxhRz ttqiJuH04bbFCWjOmkvW4MKIhfuZOhg31v4eOXRCN3qhUtPJ7lJQ1EXXsCVxJmO8 PhnivB49j3qN2nJWphh8c5QNbHNIi8LnfANN58UQ+HAB4rWBoDGF+HdB1G1Gr2rN m2rItQIrMXGwbKhkZKhJCpd42kUD9WxSyUe8c+y4ap1gSKVs9tcNRGfyE0pOsH6O epI+RT3+e1nUzsJYeneJiz1sQDVzmvc= -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:24 2026 by rpki-client