$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cf56613-0e13-3a4a-a359-daa6619c39b2.roa File: 3cf56613-0e13-3a4a-a359-daa6619c39b2.roa (raw, json) Hash identifier: 6Gsuny+k7BrkZlflN9fum+MBSOSR5yknYd6rr8DceOc= Subject key identifier: A0:B6:B9:E4:4D:23:5C:A4:3B:FC:59:F6:BB:CD:99:D6:3F:B8:CC:52 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E7A64D24B13BD0D048615DCA0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cf56613-0e13-3a4a-a359-daa6619c39b2.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 198260 IP address blocks: 65.22.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:d2:4b:13:bd:0d:04:86:15:dc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=8ce28370-e29d-42eb-9d88-ab4b99a6bf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:26:50:89:ca:b9:6d:96:ea:d0:98:74:fb:0a: 15:8b:d4:b3:8a:ff:9d:7d:86:e3:7e:83:4d:36:65: 8d:c8:97:ca:aa:68:0e:6b:e3:26:aa:67:f7:42:bb: 19:c3:a8:69:65:e9:59:62:87:fb:5d:46:e0:2d:91: 46:a9:61:38:93:bb:94:4d:00:59:c5:8a:08:96:75: 30:27:f1:e9:7f:df:73:bc:29:1c:f0:98:1b:5d:f1: ad:3d:ba:dd:10:13:96:84:fe:88:cf:81:a9:31:9d: 2e:3c:71:6e:6f:fc:76:f3:b3:3e:e6:40:8a:54:73: 2d:49:51:b7:82:a0:52:b7:e0:ec:e4:40:73:7e:e7: a8:19:80:f4:43:00:1e:d7:08:11:75:98:b6:74:5b: 07:6b:bc:c5:ea:8a:74:9e:a4:b9:ae:59:1a:9c:95: 5e:22:21:67:02:82:4d:4a:c6:8c:bd:c0:a3:e9:92: 2c:17:0a:ea:ec:b5:92:a0:d8:7c:21:d8:a7:c0:24: 31:66:b2:30:68:c1:3d:98:50:77:22:6f:5d:a7:0b: 54:91:8d:7e:be:3e:bc:f5:d4:45:cc:5f:c4:8f:09: fa:92:6c:27:89:d9:68:2e:26:3e:0c:3b:d5:b9:80: 2d:08:66:b3:b9:61:49:e5:9c:0f:7e:9c:cd:e1:7d: ab:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B6:B9:E4:4D:23:5C:A4:3B:FC:59:F6:BB:CD:99:D6:3F:B8:CC:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cf56613-0e13-3a4a-a359-daa6619c39b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9d:a9:9c:d9:75:24:9a:4c:42:3c:b2:1a:cb:03:d2:8a:bd: d3:0f:ef:70:b1:db:bb:7e:dc:e6:81:8e:c8:0d:6b:fb:ac:be: 47:17:27:91:76:11:45:4f:e6:41:e6:20:4a:18:8a:85:75:e0: e8:44:9e:20:32:2d:dd:a6:9e:8d:c6:f8:ff:bf:a7:7a:74:4d: ad:ee:66:b2:f5:26:37:f9:12:1b:dc:a0:ef:60:fe:fe:1f:7f: 4a:67:58:11:c5:a9:2b:9f:b0:09:90:3d:1f:64:ff:fb:95:94: 97:84:19:0d:37:64:54:6e:d6:3e:20:b0:e7:a0:2e:7e:53:bd: bd:27:09:61:7b:cc:a2:f7:18:b7:6d:f2:ea:e0:e9:0b:56:25: c4:24:b1:ac:e1:81:52:2b:a3:b8:a7:ae:05:1f:6d:b9:03:15: e1:16:ac:0e:3d:d5:b1:ae:46:88:8b:23:cb:89:98:11:ee:b6: 6e:1a:52:8a:58:fc:5c:45:8e:bf:ca:be:6c:fa:a9:d3:68:64: 7d:ca:f4:4a:8c:90:b8:19:37:a0:d1:b2:9a:0a:2c:23:d3:eb: 55:5f:55:86:4c:5e:e3:8c:a8:ee:72:1c:3f:d2:9b:2c:20:11: 7a:89:06:d9:8a:c7:1b:0f:16:72:2e:2c:18:35:63:9c:3d:b2: 24:87:1b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNJLE70NBIYV3KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk OGNlMjgzNzAtZTI5ZC00MmViLTlkODgtYWI0Yjk5YTZiZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyZQicq5bZbq0Jh0+woVi9Sziv+dfYbjfoNN NmWNyJfKqmgOa+Mmqmf3QrsZw6hpZelZYof7XUbgLZFGqWE4k7uUTQBZxYoIlnUw J/Hpf99zvCkc8JgbXfGtPbrdEBOWhP6Iz4GpMZ0uPHFub/x287M+5kCKVHMtSVG3 gqBSt+Ds5EBzfueoGYD0QwAe1wgRdZi2dFsHa7zF6op0nqS5rlkanJVeIiFnAoJN SsaMvcCj6ZIsFwrq7LWSoNh8IdinwCQxZrIwaME9mFB3Im9dpwtUkY1+vj689dRF zF/Ejwn6kmwnidloLiY+DDvVuYAtCGazuWFJ5ZwPfpzN4X2rTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC2ueRNI1ykO/xZ9rvNmdY/uMxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NmNTY2MTMtMGUxMy0z YTRhLWEzNTktZGFhNjYxOWMzOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSdqZzZdSSaTEI8shrLA9KKvdMP73Cx27t+3OaBjsgNa/usvkcXJ5F2 EUVP5kHmIEoYioV14OhEniAyLd2mno3G+P+/p3p0Ta3uZrL1Jjf5EhvcoO9g/v4f f0pnWBHFqSufsAmQPR9k//uVlJeEGQ03ZFRu1j4gsOegLn5Tvb0nCWF7zKL3GLdt 8urg6QtWJcQksazhgVIro7inrgUfbbkDFeEWrA491bGuRoiLI8uJmBHutm4aUopY /FxFjr/Kvmz6qdNoZH3K9EqMkLgZN6DRspoKLCPT61VfVYZMXuOMqO5yHD/Smywg EXqJBtmKxxsPFnIuLBg1Y5w9siSHG+A= -----END CERTIFICATE-----Generated at Fri Jul 24 11:24:01 2026 by rpki-client