$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8385893-75f0-3723-b7a0-d599df26431d.roa File: f8385893-75f0-3723-b7a0-d599df26431d.roa (raw, json) Hash identifier: 9rlXZPn9kzzgVIgDhe1465zz+hM6inP4sFwEpeydQss= Subject key identifier: AD:A8:46:34:66:B6:D0:78:91:53:64:D4:20:EB:E7:C2:3F:6C:DB:9D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CAE7CD0E740769A38DB40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8385893-75f0-3723-b7a0-d599df26431d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:ae:7c:d0:e7:40:76:9a:38:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=13a74c49-11e6-42b5-ba93-6ea78d84f5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:87:cd:39:fc:df:6c:67:30:5a:6b:1c:88: ca:73:5a:1e:76:a1:ee:3f:3f:db:12:3e:92:a3:0a: 14:50:70:fa:82:42:2c:26:ef:59:6f:5f:dd:f4:df: 8f:91:7c:b6:c4:01:b6:83:3c:05:43:b4:23:68:ca: 3e:c5:a8:90:16:f1:ef:ca:4b:dc:45:62:d6:3b:1f: 94:a3:1a:9d:ec:59:34:32:c5:a2:39:9f:7a:f9:af: 62:53:c8:5b:e9:4c:d2:a1:39:2b:a3:7f:e1:6d:60: a3:04:fd:42:b8:b4:c8:b5:1f:d8:80:a4:95:65:24: f0:35:c8:9d:a7:e3:3d:95:46:34:74:f9:9b:e8:b5: ba:1a:7d:9c:0e:53:68:41:84:8e:bd:69:7f:32:a7: 50:27:2b:e5:c8:b6:a5:95:cc:ef:5c:3d:fe:63:aa: 88:39:95:7d:70:4d:e6:d0:e1:db:b1:48:19:bb:e1: 13:23:51:c9:dc:64:3c:91:ea:d1:a7:0f:1f:52:7c: f2:f5:96:16:7b:5d:a7:e9:1b:a9:01:89:52:64:80: f0:d5:30:90:c6:5c:b2:e9:e3:f3:bc:41:0e:c0:48: f9:a9:a9:9d:8b:69:5d:f4:cc:00:6e:2a:19:ea:b7: f6:b0:10:20:64:fd:2c:5c:ad:48:45:4a:ad:be:28: bf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A8:46:34:66:B6:D0:78:91:53:64:D4:20:EB:E7:C2:3F:6C:DB:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8385893-75f0-3723-b7a0-d599df26431d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:0a:b2:26:12:66:75:41:93:39:00:14:eb:52:82:5a:01:b3: a7:25:61:a2:29:1a:ed:cd:dd:10:ef:6d:b3:a3:50:90:5c:b5: 15:49:f5:d1:33:d6:6c:4d:7f:a8:41:d3:40:de:5b:30:be:2b: c8:7f:b2:40:f1:be:95:9d:0d:05:dd:48:85:e9:21:16:a7:75: 26:77:af:cf:cb:2d:d5:13:64:50:bd:c2:95:c1:52:87:74:17: de:8b:83:73:5b:03:1e:7e:02:5d:7e:4c:f8:be:b6:af:8d:a2: 0d:1e:4a:fd:ca:ee:ca:1e:07:e6:19:36:12:f2:af:6f:3b:c8: 0c:eb:d9:e0:10:c5:0d:23:cc:c5:99:a7:c7:d1:29:21:03:91: cc:21:33:9c:32:a7:a4:e7:54:f4:2b:33:fc:8a:a8:e3:c0:6a: d7:a9:fe:80:19:5a:9e:c1:45:2c:7d:95:40:d3:c2:59:a8:ca: c8:94:36:fb:22:99:5f:25:11:16:3f:80:43:b5:0a:6f:22:46: 2c:3e:4e:b9:e9:f8:97:fb:75:f6:31:0f:d5:2e:e1:a9:2e:ca: 1b:60:59:22:3e:ec:96:62:fe:d0:e3:7c:08:ce:35:45:77:c7: df:aa:f7:1c:c2:6a:6a:eb:5e:b2:ba:c2:d4:b6:df:ab:b0:3a: d7:ed:45:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnK580OdAdpo420AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTNhNzRjNDktMTFlNi00MmI1LWJhOTMtNmVhNzhkODRmNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8mHzTn832xnMFprHIjKc1oedqHuPz/bEj6S owoUUHD6gkIsJu9Zb1/d9N+PkXy2xAG2gzwFQ7QjaMo+xaiQFvHvykvcRWLWOx+U oxqd7Fk0MsWiOZ96+a9iU8hb6UzSoTkro3/hbWCjBP1CuLTItR/YgKSVZSTwNcid p+M9lUY0dPmb6LW6Gn2cDlNoQYSOvWl/MqdQJyvlyLallczvXD3+Y6qIOZV9cE3m 0OHbsUgZu+ETI1HJ3GQ8kerRpw8fUnzy9ZYWe12n6RupAYlSZIDw1TCQxlyy6ePz vEEOwEj5qamdi2ld9MwAbioZ6rf2sBAgZP0sXK1IRUqtvii/QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2oRjRmttB4kVNk1CDr58I/bNudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjgzODU4OTMtNzVmMC0z NzIzLWI3YTAtZDU5OWRmMjY0MzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4KsiYSZnVBkzkAFOtSgloBs6clYaIpGu3N3RDvbbOjUJBctRVJ9dEz 1mxNf6hB00DeWzC+K8h/skDxvpWdDQXdSIXpIRandSZ3r8/LLdUTZFC9wpXBUod0 F96Lg3NbAx5+Al1+TPi+tq+Nog0eSv3K7soeB+YZNhLyr287yAzr2eAQxQ0jzMWZ p8fRKSEDkcwhM5wyp6TnVPQrM/yKqOPAatep/oAZWp7BRSx9lUDTwlmoysiUNvsi mV8lERY/gEO1Cm8iRiw+Trnp+Jf7dfYxD9Uu4akuyhtgWSI+7JZi/tDjfAjONUV3 x9+q9xzCamrrXrK6wtS236uwOtftRXc= -----END CERTIFICATE-----Generated at Wed Jul 29 06:56:06 2026 by rpki-client