$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efb8020a-9fad-35e2-ac95-cac44f0e3c65.roa File: efb8020a-9fad-35e2-ac95-cac44f0e3c65.roa (raw, json) Hash identifier: T/6CQtryNfGyySvHNdibLkUnFviSGcgkRXB8SiwoYEY= Subject key identifier: D9:FC:5C:B5:35:72:29:83:10:99:07:6A:3E:3D:81:60:01:EE:17:45 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C8BEF5B001A1AC0B41D80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efb8020a-9fad-35e2-ac95-cac44f0e3c65.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:8b:ef:5b:00:1a:1a:c0:b4:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0e1cfc89-35dd-47b1-8bc6-b38fbbb0717c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:42:e7:bc:8e:3d:03:c2:2e:3c:19:77:8d: 33:e5:92:e4:89:c2:28:df:33:8c:d0:d1:ea:4b:2d: 54:00:8a:37:88:99:8f:4e:4a:0c:fe:cf:29:56:b6: 00:18:0b:28:ab:88:8e:26:56:23:96:56:96:93:b2: b4:83:28:8b:ca:81:b3:f1:47:00:be:c3:95:86:b3: 2d:b8:f4:27:ee:3c:bb:8b:e2:43:a6:4b:66:a4:d9: e7:5c:3f:df:ef:f5:30:07:b8:83:63:cf:9d:52:6b: a2:f1:c4:76:23:52:11:0b:ca:14:d2:d5:e2:fe:85: ef:5c:3b:43:ae:d6:1a:b7:c7:3e:31:21:50:07:50: 37:fa:a9:58:39:ff:9d:72:23:25:13:d3:32:a2:0f: 80:7a:73:59:39:70:97:41:b6:f6:fe:58:e8:73:1a: e5:92:13:1b:c2:66:8b:dd:6f:47:31:e0:8b:44:97: 76:93:99:0d:38:56:2d:b8:2d:a7:5d:5d:9f:ad:3a: 23:98:11:e8:d1:50:b5:20:5a:bd:3e:a6:20:8d:25: 0d:3a:b5:d7:d3:85:ac:d9:2a:6f:e7:e9:91:94:c2: fd:34:c2:2f:8b:dc:11:9a:eb:6d:d1:b5:2d:6d:90: 35:20:f2:a7:b1:46:11:d5:0f:73:05:20:1b:12:54: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:5C:B5:35:72:29:83:10:99:07:6A:3E:3D:81:60:01:EE:17:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efb8020a-9fad-35e2-ac95-cac44f0e3c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b8:55:2a:23:d7:1e:a2:6a:fc:c0:93:5c:2f:2d:33:96:ea: f6:44:9d:7a:e3:3a:fc:df:ed:4f:83:51:20:04:18:d4:e5:ab: 4b:99:1a:d0:b3:0c:36:6b:07:3a:dd:bc:40:3b:f6:32:40:5e: 5b:46:8a:d2:18:07:01:fd:0a:f2:24:8d:c9:eb:df:09:97:24: 29:cd:f1:82:72:68:4b:c8:a8:a2:56:5c:7f:3d:36:77:da:a2: 81:04:71:d2:6a:21:73:80:10:6b:2a:a3:94:07:87:a1:2d:28: 0d:93:bc:29:74:e1:a1:32:e4:ce:07:13:c6:b6:0a:99:03:9b: 84:cf:9d:a0:ed:a8:ab:0b:1d:b2:26:7f:0b:86:e6:5c:19:2e: 89:56:30:5e:ac:42:f6:77:c1:ea:06:7a:b8:e1:e0:fe:a7:19: 09:c5:20:da:0f:48:f4:63:35:bf:9e:ca:57:68:b6:53:6e:59: a7:5f:a5:e0:01:94:81:48:6c:ed:64:2b:93:7d:66:f4:fb:5c: c9:65:80:96:c3:92:bb:6d:32:8e:b0:a4:9b:f0:1a:6e:8c:ca: 7f:88:c6:0d:f5:7d:47:34:96:73:5a:ef:d9:f8:c2:d0:22:db: 08:3c:c3:2f:d4:1b:24:fc:1c:ea:f6:a4:5b:6d:48:9d:0a:f9: 34:27:ce:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnIvvWwAaGsC0HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGUxY2ZjODktMzVkZC00N2IxLThiYzYtYjM4ZmJiYjA3MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j5C57yOPQPCLjwZd40z5ZLkicIo3zOM0NHq Sy1UAIo3iJmPTkoM/s8pVrYAGAsoq4iOJlYjllaWk7K0gyiLyoGz8UcAvsOVhrMt uPQn7jy7i+JDpktmpNnnXD/f7/UwB7iDY8+dUmui8cR2I1IRC8oU0tXi/oXvXDtD rtYat8c+MSFQB1A3+qlYOf+dciMlE9Myog+AenNZOXCXQbb2/ljocxrlkhMbwmaL 3W9HMeCLRJd2k5kNOFYtuC2nXV2frTojmBHo0VC1IFq9PqYgjSUNOrXX04Ws2Spv 5+mRlML9NMIvi9wRmutt0bUtbZA1IPKnsUYR1Q9zBSAbElThLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn8XLU1cimDEJkHaj49gWAB7hdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWZiODAyMGEtOWZhZC0z NWUyLWFjOTUtY2FjNDRmMGUzYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq4VSoj1x6iavzAk1wvLTOW6vZEnXrjOvzf7U+DUSAEGNTlq0uZGtCz DDZrBzrdvEA79jJAXltGitIYBwH9CvIkjcnr3wmXJCnN8YJyaEvIqKJWXH89Nnfa ooEEcdJqIXOAEGsqo5QHh6EtKA2TvCl04aEy5M4HE8a2CpkDm4TPnaDtqKsLHbIm fwuG5lwZLolWMF6sQvZ3weoGerjh4P6nGQnFINoPSPRjNb+eyldotlNuWadfpeAB lIFIbO1kK5N9ZvT7XMllgJbDkrttMo6wpJvwGm6Myn+Ixg31fUc0lnNa79n4wtAi 2wg8wy/UGyT8HOr2pFttSJ0K+TQnzis= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:29 2026 by rpki-client