$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa File: f814eaa4-d9f2-3117-939f-565eea6ef078.roa (raw, json) Hash identifier: 5uOrHgNemKzwsWnHfa8RXjqde0D1jet7r8XETTUo3jI= Subject key identifier: B0:FB:BC:54:10:01:42:73:EA:06:3C:CD:D9:4D:E4:5A:3B:D0:01:E6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C89A18ED760A0677DAAC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:89:a1:8e:d7:60:a0:67:7d:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2c1d1b49-1251-4c19-9c3d-0bb7f41cf8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:22:60:2f:74:4b:72:4e:04:eb:63:58:dc:c4: 42:f1:31:54:28:f7:b5:d2:7d:4d:d3:06:54:26:09: ac:b8:fd:3e:6e:16:45:95:c0:45:3e:a0:18:43:6e: 90:d8:c1:31:d1:0a:2a:40:bf:79:28:a4:16:f5:dc: 5a:fc:97:68:7b:38:32:1e:8e:78:fd:2e:8d:cb:1f: 8b:22:a5:1c:d0:62:0c:14:cf:a5:7d:07:39:67:68: 38:72:f3:b3:36:92:f3:ba:68:14:03:68:fb:68:0e: 75:bd:98:5c:4b:0d:cc:0e:a6:1a:39:5a:a1:89:87: 62:00:2f:a1:e3:a3:61:2b:21:e0:26:d2:3b:f8:4e: ff:91:22:e9:04:ac:81:20:c0:03:7f:f6:fb:e4:88: 7d:c0:37:7d:0d:2c:cc:1c:e8:4f:6b:72:14:91:c2: 37:0d:fc:6f:c6:36:ba:11:5b:fd:42:0c:5e:e0:2d: ae:3d:13:34:07:ed:1c:6e:e0:31:7d:fc:ad:6f:51: 64:ef:b1:e5:92:90:31:94:76:01:1d:86:37:95:a3: ac:4b:42:c3:fe:be:de:f7:fb:20:7b:12:58:a0:eb: db:5a:db:af:68:b4:af:98:42:99:64:72:c2:16:cd: d4:a3:78:70:24:17:01:22:2f:18:11:6c:54:78:d4: 54:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FB:BC:54:10:01:42:73:EA:06:3C:CD:D9:4D:E4:5A:3B:D0:01:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b6:e4:dc:ca:99:bb:f9:0b:94:2a:f8:71:9e:00:15:69:28: 5e:ee:43:62:f9:fe:d1:db:e7:39:5c:3d:cc:8a:54:f0:1f:ed: 2a:f2:d5:d5:7d:47:9b:ac:d6:70:a0:7c:4b:8d:29:95:b7:16: a8:da:89:70:47:47:d8:50:63:39:ca:d9:67:41:0d:65:46:b7: a8:d1:73:16:05:d9:dc:d9:0d:b9:3e:0c:80:a0:90:dd:8b:bf: 17:f8:31:3c:10:e0:5b:36:cc:0f:b7:82:86:44:1c:6d:85:78: 91:cc:0b:e8:50:75:55:58:a0:7d:a7:10:b9:a3:f3:aa:f5:7d: 6d:de:ca:0a:cf:bb:7b:94:3a:98:f7:41:90:10:d3:95:09:2c: ee:83:c4:b1:83:2c:0c:93:23:2c:78:7d:c8:14:e6:43:64:23: 15:2f:70:cc:cc:b4:b6:fe:3d:e9:1a:01:b4:d3:8b:4f:c1:7e: be:69:0c:b0:32:fb:b2:be:1a:44:e5:a7:79:15:85:ee:a0:2b: 8f:4d:34:fe:17:e8:b2:5b:c9:67:2b:03:07:28:90:ff:32:1c: d6:24:49:6d:87:7d:40:0c:48:bd:e3:e0:1d:42:36:92:7b:1d: c1:1b:13:a6:cd:82:b7:ec:75:4e:6a:52:ad:da:c0:b9:26:69: 25:37:5d:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnImhjtdgoGd9qsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmMxZDFiNDktMTI1MS00YzE5LTljM2QtMGJiN2Y0MWNmOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyJgL3RLck4E62NY3MRC8TFUKPe10n1N0wZU JgmsuP0+bhZFlcBFPqAYQ26Q2MEx0QoqQL95KKQW9dxa/JdoezgyHo54/S6Nyx+L IqUc0GIMFM+lfQc5Z2g4cvOzNpLzumgUA2j7aA51vZhcSw3MDqYaOVqhiYdiAC+h 46NhKyHgJtI7+E7/kSLpBKyBIMADf/b75Ih9wDd9DSzMHOhPa3IUkcI3Dfxvxja6 EVv9Qgxe4C2uPRM0B+0cbuAxffytb1Fk77HlkpAxlHYBHYY3laOsS0LD/r7e9/sg exJYoOvbWtuvaLSvmEKZZHLCFs3Uo3hwJBcBIi8YEWxUeNRUSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD7vFQQAUJz6gY8zdlN5Fo70AHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjgxNGVhYTQtZDlmMi0z MTE3LTkzOWYtNTY1ZWVhNmVmMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS25NzKmbv5C5Qq+HGeABVpKF7uQ2L5/tHb5zlcPcyKVPAf7Sry1dV9 R5us1nCgfEuNKZW3FqjaiXBHR9hQYznK2WdBDWVGt6jRcxYF2dzZDbk+DICgkN2L vxf4MTwQ4Fs2zA+3goZEHG2FeJHMC+hQdVVYoH2nELmj86r1fW3eygrPu3uUOpj3 QZAQ05UJLO6DxLGDLAyTIyx4fcgU5kNkIxUvcMzMtLb+PekaAbTTi0/Bfr5pDLAy +7K+GkTlp3kVhe6gK49NNP4X6LJbyWcrAwcokP8yHNYkSW2HfUAMSL3j4B1CNpJ7 HcEbE6bNgrfsdU5qUq3awLkmaSU3XS4= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:51 2026 by rpki-client