$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa File: 08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa (raw, json) Hash identifier: /F76KD5AHEkoo+TqgssVUTWWEpjdBpL4ZoF8ndWI/D8= Subject key identifier: 3A:E1:6C:8C:6D:7B:79:5B:29:7C:13:86:F8:76:AD:E3:7E:0E:C0:EC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E043623A85D6C0379C333EB20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:23:a8:5d:6c:03:79:c3:33:eb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=cd545f2e-43ab-4aa5-b790-a62214d76c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c5:1c:ef:52:61:4a:da:9e:a1:31:0e:31:6e: cd:20:17:bb:6c:dd:d1:5a:f9:21:c1:df:79:f1:29: 4a:5e:88:ff:8e:24:76:13:af:af:1f:2c:7e:37:67: bb:25:e4:67:8e:f3:ef:94:78:88:c9:c1:73:25:2c: 3c:d7:91:4c:bd:e5:d6:50:2b:82:a8:ca:e7:01:38: 13:72:77:f6:86:45:f3:8f:5e:7a:c2:eb:86:79:8f: 22:6b:bd:2b:22:00:ea:5e:fc:c9:df:81:e4:1b:1f: dd:81:0a:3e:f9:80:25:38:f3:0c:af:54:d7:bf:0f: ac:17:55:f5:5a:4f:91:25:37:31:65:86:c4:61:d4: 6d:6d:d1:e5:91:0c:05:5e:ea:a8:c8:ec:50:d5:92: 16:54:2b:5a:32:b8:00:77:50:17:c1:dc:96:89:60: b1:4f:a1:14:62:05:b3:b2:fc:ee:6e:69:b7:84:e3: f2:80:d9:4e:f7:37:c1:1a:59:a8:d2:d7:e6:29:9e: 97:a1:6e:78:2e:ec:67:98:bd:d2:7e:ec:1f:a2:9d: 68:a1:6b:f5:e8:14:05:3a:df:92:9f:a4:bb:db:48: 5c:3f:86:50:a2:4f:b5:1a:82:1f:3c:e1:ac:75:bf: 18:6b:95:3b:e5:09:24:59:cd:b9:df:34:4b:ce:80: 58:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E1:6C:8C:6D:7B:79:5B:29:7C:13:86:F8:76:AD:E3:7E:0E:C0:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08e36ba3-8620-3b8e-b63a-30fe6a37f97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c4:98:fe:3c:ea:9a:81:9c:00:41:f1:1a:f6:7a:9d:88:86: b8:e6:d0:fd:14:02:a3:b9:91:7e:28:35:c1:08:da:dd:7a:b5: 1f:27:62:ce:36:f2:b2:7f:b4:6c:32:87:e3:71:7d:14:a9:26: 4a:c2:19:22:b9:9f:4b:21:88:20:46:a5:e7:13:28:67:6a:74: 9e:62:1d:5a:a9:1e:5c:8b:8a:cf:9d:d3:97:0f:e8:73:39:f1: 27:8a:04:8e:af:62:56:77:e2:03:58:9c:46:aa:bc:16:7a:ab: d6:d4:be:d5:75:77:be:cc:fd:02:be:bf:f8:71:a5:07:2b:4f: af:e5:15:b2:62:d7:39:4b:69:2a:5f:cc:e3:1a:7c:be:a7:ad: f1:0b:bd:7d:f4:7a:31:9c:c5:a0:cc:94:31:11:92:db:6a:3b: 40:c8:2e:fb:ca:40:28:20:31:c4:12:97:0c:40:1e:69:e4:23: 5c:c7:f1:bb:a1:06:4c:b2:92:11:52:94:09:01:98:ed:c2:6d: 84:5e:81:1e:71:a8:c7:69:10:7b:4f:b4:4f:34:e9:b6:c7:1d: ae:98:fd:0d:04:a8:e5:e7:06:0d:68:e1:95:fa:8f:7f:9d:76: 2c:40:b6:80:07:17:17:3c:b1:d4:dc:13:52:29:f1:12:69:c6: 37:df:93:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENiOoXWwDecMz6yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk Y2Q1NDVmMmUtNDNhYi00YWE1LWI3OTAtYTYyMjE0ZDc2Yzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMUc71JhStqeoTEOMW7NIBe7bN3RWvkhwd95 8SlKXoj/jiR2E6+vHyx+N2e7JeRnjvPvlHiIycFzJSw815FMveXWUCuCqMrnATgT cnf2hkXzj156wuuGeY8ia70rIgDqXvzJ34HkGx/dgQo++YAlOPMMr1TXvw+sF1X1 Wk+RJTcxZYbEYdRtbdHlkQwFXuqoyOxQ1ZIWVCtaMrgAd1AXwdyWiWCxT6EUYgWz svzubmm3hOPygNlO9zfBGlmo0tfmKZ6XoW54LuxnmL3Sfuwfop1ooWv16BQFOt+S n6S720hcP4ZQok+1GoIfPOGsdb8Ya5U75QkkWc253zRLzoBYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrhbIxte3lbKXwThvh2reN+DsDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDhlMzZiYTMtODYyMC0z YjhlLWI2M2EtMzBmZTZhMzdmOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPEmP486pqBnABB8Rr2ep2Ihrjm0P0UAqO5kX4oNcEI2t16tR8nYs42 8rJ/tGwyh+NxfRSpJkrCGSK5n0shiCBGpecTKGdqdJ5iHVqpHlyLis+d05cP6HM5 8SeKBI6vYlZ34gNYnEaqvBZ6q9bUvtV1d77M/QK+v/hxpQcrT6/lFbJi1zlLaSpf zOMafL6nrfELvX30ejGcxaDMlDERkttqO0DILvvKQCggMcQSlwxAHmnkI1zH8buh BkyykhFSlAkBmO3CbYRegR5xqMdpEHtPtE806bbHHa6Y/Q0EqOXnBg1o4ZX6j3+d dixAtoAHFxc8sdTcE1Ip8RJpxjffkzQ= -----END CERTIFICATE-----Generated at Sat Jun 13 18:34:06 2026 by rpki-client