$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa File: 3952f2df-c9da-34fd-b192-2e69549fdba1.roa (raw, json) Hash identifier: c14fcd/wIqtJGA9F0rqmhaUWN6Jpe6NeGuSEmXxN5gk= Subject key identifier: E8:86:F4:48:77:A3:35:06:17:DA:68:C9:F0:AC:E6:92:76:A9:0A:9A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E04362A278F2BF756F201F080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:2a:27:8f:2b:f7:56:f2:01:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=d155115d-f7f1-4424-b590-51fd26b11305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:8d:e3:f5:cd:eb:5b:9f:ca:39:ad:a7:07: c3:48:c5:57:7f:c7:d9:0a:bf:4d:80:7b:d1:9d:d8: 62:d6:92:bc:36:bf:b1:0f:90:1a:bd:cf:39:63:78: 3a:b4:7a:34:fb:35:d3:4e:64:6b:5b:39:86:30:37: 40:dd:43:44:d6:9e:1f:b9:b2:58:8b:78:c4:6d:a1: 53:27:7a:a8:5a:c2:b5:8a:af:67:ab:08:fc:50:91: 82:c7:a2:09:dd:95:7f:67:81:e4:71:95:a7:05:ee: 0a:51:8d:79:f3:19:ba:3d:8c:14:89:fa:21:c9:f2: 50:d9:8a:ee:e7:1d:67:1c:89:c7:16:bf:ed:34:12: 5b:7f:80:27:7b:1d:21:10:92:c3:8c:78:4c:87:12: f1:43:55:63:62:fa:7c:43:a9:ed:65:57:58:ca:52: 22:d8:df:90:05:6c:c1:82:1e:7f:b7:fe:ac:84:d8: 3d:ee:db:cb:51:2e:75:7c:4e:f0:c2:21:ed:43:93: 57:46:46:f4:8c:5c:e5:bb:15:4a:94:ad:2c:54:60: fa:7a:6a:cf:bc:4a:7c:c2:d4:82:df:ca:bc:9c:72: 3a:13:94:dd:07:83:6d:91:1b:87:8b:f4:83:9f:1c: 70:e6:11:80:30:7d:f6:9e:b0:d4:99:7c:4c:b8:07: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:86:F4:48:77:A3:35:06:17:DA:68:C9:F0:AC:E6:92:76:A9:0A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:ec:82:85:5a:17:89:a6:4f:55:3e:04:ff:7f:2d:52:d0:ae: b2:b7:62:76:a9:ae:d5:27:75:1c:65:08:36:ae:3c:6f:6e:7e: b6:46:e6:08:70:9d:35:32:c5:30:41:64:5b:a2:7a:d0:28:41: 31:72:dd:33:ef:07:c9:b5:34:22:df:f4:94:74:55:fb:30:65: 3a:0c:68:eb:46:8c:d4:7b:f0:44:f8:15:95:50:fa:f0:fc:08: 4e:c2:ef:30:3a:82:1c:fe:d9:5d:20:2e:7a:70:7a:1b:68:fe: 58:72:db:ef:d8:bc:51:a6:3c:f9:cf:ca:76:52:c9:9d:20:fd: e2:b0:11:18:97:c8:5f:c4:f7:69:8b:af:b1:71:d9:2b:23:e3: 45:a5:03:c8:5b:d9:85:ee:99:81:8a:ed:10:b5:21:0d:6f:b5: 90:c0:61:be:47:19:3c:d0:04:22:98:d3:9e:44:da:35:72:f6: d9:07:54:f1:65:df:3d:d9:f5:f5:bd:e8:32:e7:81:07:12:39: 00:ba:ca:f0:b1:69:f9:30:c0:36:fb:5f:f0:85:aa:93:e1:a4: 00:09:ee:ff:bc:89:7b:31:5c:33:f0:02:0c:9b:2c:47:dc:66: fd:a1:98:94:82:8c:fd:14:a1:55:ec:4a:3d:f2:c0:a2:17:ac: 32:c1:28:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENionjyv3VvIB8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZDE1NTExNWQtZjdmMS00NDI0LWI1OTAtNTFmZDI2YjExMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE2N4/XN61ufyjmtpwfDSMVXf8fZCr9NgHvR ndhi1pK8Nr+xD5Aavc85Y3g6tHo0+zXTTmRrWzmGMDdA3UNE1p4fubJYi3jEbaFT J3qoWsK1iq9nqwj8UJGCx6IJ3ZV/Z4HkcZWnBe4KUY158xm6PYwUifohyfJQ2Yru 5x1nHInHFr/tNBJbf4Anex0hEJLDjHhMhxLxQ1VjYvp8Q6ntZVdYylIi2N+QBWzB gh5/t/6shNg97tvLUS51fE7wwiHtQ5NXRkb0jFzluxVKlK0sVGD6emrPvEp8wtSC 38q8nHI6E5TdB4NtkRuHi/SDnxxw5hGAMH32nrDUmXxMuAc15wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiG9Eh3ozUGF9poyfCs5pJ2qQqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzk1MmYyZGYtYzlkYS0z NGZkLWIxOTItMmU2OTU0OWZkYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjsgoVaF4mmT1U+BP9/LVLQrrK3YnaprtUndRxlCDauPG9ufrZG5ghw nTUyxTBBZFuietAoQTFy3TPvB8m1NCLf9JR0VfswZToMaOtGjNR78ET4FZVQ+vD8 CE7C7zA6ghz+2V0gLnpwehto/lhy2+/YvFGmPPnPynZSyZ0g/eKwERiXyF/E92mL r7Fx2Ssj40WlA8hb2YXumYGK7RC1IQ1vtZDAYb5HGTzQBCKY055E2jVy9tkHVPFl 3z3Z9fW96DLngQcSOQC6yvCxafkwwDb7X/CFqpPhpAAJ7v+8iXsxXDPwAgybLEfc Zv2hmJSCjP0UoVXsSj3ywKIXrDLBKMo= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:23 2026 by rpki-client