$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8b75b56-4fa1-33ed-80be-359971cece0a.roa File: f8b75b56-4fa1-33ed-80be-359971cece0a.roa (raw, json) Hash identifier: LoYAabJ6POnj+RyfweGypnZ+avOIX4dWXTUmSa9hv08= Subject key identifier: F0:DD:46:23:EC:8F:70:42:21:60:8F:13:05:27:24:9D:DE:0B:66:A2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C225F1C2AF19912238F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8b75b56-4fa1-33ed-80be-359971cece0a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 65.22.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:22:5f:1c:2a:f1:99:12:23:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=85c75bbd-8273-4be7-a4d6-9eb1b8bea04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:3f:42:02:23:d0:44:18:e6:09:8f:8b:74: 04:58:a6:83:53:04:a1:6c:ec:aa:04:c9:e6:03:1e: 4b:b3:55:69:4f:25:14:5e:bf:cc:3a:0f:7d:59:91: 73:61:7e:cd:fa:f4:f9:ac:22:22:fe:a4:8c:5a:66: 2b:19:11:b8:a5:11:f0:bf:8f:08:ac:cd:8e:27:a5: ce:ef:e7:ad:05:12:50:2e:19:70:20:e5:e0:bd:17: 14:aa:23:e7:8f:fc:fa:44:2e:2f:4f:32:77:ee:b5: 61:35:b0:32:7c:04:c7:13:d0:a4:77:8c:aa:2a:db: c1:9c:d1:f3:95:98:a5:63:0e:76:82:6f:61:67:bd: 6f:49:df:d5:b9:8c:33:15:34:c1:12:b0:34:d7:24: d2:38:6f:0a:d7:01:94:cb:ed:84:53:e8:8b:89:d5: d1:c5:39:31:f0:e7:00:17:08:8d:7a:ca:2f:ff:b4: 07:c8:f7:cc:b7:69:81:59:14:0e:e1:37:9b:8b:01: 65:8c:2f:1f:4a:1b:cc:07:b4:3f:f4:21:32:69:84: 85:cf:3f:f9:fa:8a:64:7d:98:d7:77:4a:02:ee:b0: 59:4b:32:57:30:3e:8d:3d:4e:ac:3c:03:19:ef:83: 26:26:0b:4d:f5:d7:ab:71:e5:eb:19:81:f5:51:ca: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DD:46:23:EC:8F:70:42:21:60:8F:13:05:27:24:9D:DE:0B:66:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f8b75b56-4fa1-33ed-80be-359971cece0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c4:9d:80:88:1d:a4:43:d8:53:37:21:e9:4b:84:7d:84:f7: 17:16:cc:c6:ab:af:a4:c2:7a:80:3f:85:4f:1a:8e:7d:22:1a: 85:77:5b:a5:10:97:66:c8:09:05:31:c0:23:7e:33:ad:70:25: 91:6e:76:f9:d2:59:ba:8b:2b:af:97:ff:3d:52:97:0c:ca:3d: 19:a5:69:f9:c3:de:e9:3b:08:cd:ba:36:c5:95:fd:e9:c5:19: e1:25:f1:ad:ae:8a:be:b3:e5:b6:f7:03:02:d0:9e:82:13:ce: 3c:b0:43:51:ab:95:54:29:e8:3b:2f:e7:06:fb:d2:ab:d4:eb: 61:55:f8:bf:6a:e1:16:3f:d2:4e:75:01:2a:52:6b:93:21:72: 64:e6:3b:67:9e:7c:31:d9:b3:55:54:b0:d5:31:3a:5e:c2:e5: d2:69:f7:03:d8:5e:b0:06:0c:35:ca:47:f1:11:a8:4e:8c:9c: 37:36:09:6d:f6:4f:90:26:0e:04:da:3d:ec:3c:cd:91:bf:45: 2f:9e:b5:50:90:82:30:83:a1:3c:59:7f:45:bf:b6:e4:ec:b5: d1:39:02:da:eb:97:1c:b0:cd:1e:01:37:a3:ec:e8:bc:93:ad: 2f:59:e6:e5:50:f0:60:70:a0:92:d0:67:e4:6e:e4:e2:f6:3d: a5:51:47:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnCJfHCrxmRIjjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODVjNzViYmQtODI3My00YmU3LWE0ZDYtOWViMWI4YmVhMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZg/QgIj0EQY5gmPi3QEWKaDUwShbOyqBMnm Ax5Ls1VpTyUUXr/MOg99WZFzYX7N+vT5rCIi/qSMWmYrGRG4pRHwv48IrM2OJ6XO 7+etBRJQLhlwIOXgvRcUqiPnj/z6RC4vTzJ37rVhNbAyfATHE9Ckd4yqKtvBnNHz lZilYw52gm9hZ71vSd/VuYwzFTTBErA01yTSOG8K1wGUy+2EU+iLidXRxTkx8OcA FwiNesov/7QHyPfMt2mBWRQO4TebiwFljC8fShvMB7Q/9CEyaYSFzz/5+opkfZjX d0oC7rBZSzJXMD6NPU6sPAMZ74MmJgtN9derceXrGYH1UcrFVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDdRiPsj3BCIWCPEwUnJJ3eC2aiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjhiNzViNTYtNGZhMS0z M2VkLTgwYmUtMzU5OTcxY2VjZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbEnYCIHaRD2FM3IelLhH2E9xcWzMarr6TCeoA/hU8ajn0iGoV3W6UQ l2bICQUxwCN+M61wJZFudvnSWbqLK6+X/z1SlwzKPRmlafnD3uk7CM26NsWV/enF GeEl8a2uir6z5bb3AwLQnoITzjywQ1GrlVQp6Dsv5wb70qvU62FV+L9q4RY/0k51 ASpSa5MhcmTmO2eefDHZs1VUsNUxOl7C5dJp9wPYXrAGDDXKR/ERqE6MnDc2CW32 T5AmDgTaPew8zZG/RS+etVCQgjCDoTxZf0W/tuTstdE5AtrrlxywzR4BN6Ps6LyT rS9Z5uVQ8GBwoJLQZ+Ru5OL2PaVRR/0= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:23 2026 by rpki-client