$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f12a24fd-60f7-3b8a-82df-5605ba11d28c.roa File: f12a24fd-60f7-3b8a-82df-5605ba11d28c.roa (raw, json) Hash identifier: vAh/TVQpi5kl25IUI4BxZZ4aNswHs6Mv8lRsmIF1Sig= Subject key identifier: A6:20:3F:04:09:05:3B:53:D6:37:1B:6E:F8:B7:7F:C9:D1:72:4F:87 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C8B07572A3B3BCBA71480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f12a24fd-60f7-3b8a-82df-5605ba11d28c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:8b:07:57:2a:3b:3b:cb:a7:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ac36856d-122f-4fb1-836b-1fcf10656062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:22:ad:68:4a:59:73:6a:5b:38:cb:e9:6e: f7:6e:f4:3c:b6:ce:55:78:39:31:be:62:96:cb:7a: 03:1a:cc:72:b1:ba:41:49:27:a2:53:25:e2:12:98: 61:fc:a6:07:eb:01:61:ce:16:dc:d5:9b:bd:be:1e: 1a:58:2d:45:65:7f:e0:a9:3b:f7:25:18:8c:2a:bb: 4c:8f:e6:cf:35:90:9c:91:3a:88:fd:4b:16:1e:3d: 69:6f:b3:d9:45:21:2a:e6:40:f0:50:4a:50:33:5b: 6f:6e:2a:fd:b8:5e:8d:a2:38:eb:45:5e:3e:54:e5: 77:9d:14:5f:3d:5f:d4:cb:2a:cc:35:8f:b1:d8:f6: 31:90:1b:ef:aa:0d:ba:13:03:0d:10:58:12:83:03: b3:1d:19:b4:08:4a:a6:4a:53:39:c1:e0:96:69:d2: 74:06:52:f9:f8:00:da:d5:5d:8d:04:45:a2:49:8d: b5:ce:c7:87:bc:23:4e:b1:b4:0d:b1:da:ed:65:b4: c5:8c:95:ab:1c:19:42:61:60:ed:23:a1:5e:ac:0c: bb:c8:b5:b7:5f:91:bb:1d:91:bc:73:5c:67:b2:26: 20:4f:59:59:3a:af:8e:39:7f:8d:00:58:a8:8b:b8: 83:5e:0d:1e:02:3f:0d:4e:c7:d5:71:10:03:c6:49: e9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:20:3F:04:09:05:3B:53:D6:37:1B:6E:F8:B7:7F:C9:D1:72:4F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f12a24fd-60f7-3b8a-82df-5605ba11d28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:bf:99:6f:e1:a3:4a:bf:60:97:ae:38:ff:47:d0:5d:48:7c: 42:8c:91:59:77:8a:9d:7f:a4:bc:f2:b4:37:f5:94:61:a2:90: 0d:1f:25:3e:15:9a:e0:37:ea:0c:b7:f8:7b:5c:86:67:de:b6: d2:55:7d:a8:d9:8c:37:e8:86:5f:f8:c0:dc:86:99:be:82:8a: b6:b8:f2:3a:77:02:de:a5:b9:f4:33:42:9a:f9:b1:88:df:f8: 92:98:09:65:11:78:33:86:29:df:c7:7b:76:8f:03:e6:20:aa: df:1f:52:88:bc:89:a5:92:f2:e9:f8:51:ec:53:27:e2:96:e2: 10:9a:a7:3b:ec:5d:6c:81:40:d4:e6:09:e1:18:67:91:42:a1: ed:82:43:12:81:5f:6e:f1:92:dd:d8:b0:af:1f:44:67:30:db: e5:8d:13:93:38:85:46:43:bb:4a:56:1b:61:81:11:9d:97:d1: 5a:6e:20:3b:77:5e:05:10:cb:4b:35:3f:5e:0d:c4:89:2f:e4: e6:f8:fd:6d:91:62:aa:be:c0:59:32:30:1c:56:a7:4a:90:ac: 8c:c1:47:25:ab:0a:50:f8:e0:02:16:b8:ee:3b:ca:46:91:2d: 36:9a:ca:ec:7b:71:a1:9a:36:2b:e0:56:69:9c:63:0d:bd:5a: ff:d2:53:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnIsHVyo7O8unFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWMzNjg1NmQtMTIyZi00ZmIxLTgzNmItMWZjZjEwNjU2MDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwEirWhKWXNqWzjL6W73bvQ8ts5VeDkxvmKW y3oDGsxysbpBSSeiUyXiEphh/KYH6wFhzhbc1Zu9vh4aWC1FZX/gqTv3JRiMKrtM j+bPNZCckTqI/UsWHj1pb7PZRSEq5kDwUEpQM1tvbir9uF6NojjrRV4+VOV3nRRf PV/UyyrMNY+x2PYxkBvvqg26EwMNEFgSgwOzHRm0CEqmSlM5weCWadJ0BlL5+ADa 1V2NBEWiSY21zseHvCNOsbQNsdrtZbTFjJWrHBlCYWDtI6FerAy7yLW3X5G7HZG8 c1xnsiYgT1lZOq+OOX+NAFioi7iDXg0eAj8NTsfVcRADxknp/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYgPwQJBTtT1jcbbvi3f8nRck+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjEyYTI0ZmQtNjBmNy0z YjhhLTgyZGYtNTYwNWJhMTFkMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMO/mW/ho0q/YJeuOP9H0F1IfEKMkVl3ip1/pLzytDf1lGGikA0fJT4V muA36gy3+HtchmfettJVfajZjDfohl/4wNyGmb6Cira48jp3At6lufQzQpr5sYjf +JKYCWUReDOGKd/He3aPA+Ygqt8fUoi8iaWS8un4UexTJ+KW4hCapzvsXWyBQNTm CeEYZ5FCoe2CQxKBX27xkt3YsK8fRGcw2+WNE5M4hUZDu0pWG2GBEZ2X0VpuIDt3 XgUQy0s1P14NxIkv5Ob4/W2RYqq+wFkyMBxWp0qQrIzBRyWrClD44AIWuO47ykaR LTaayux7caGaNivgVmmcYw29Wv/SU0A= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:24 2026 by rpki-client