$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa File: 3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa (raw, json) Hash identifier: B6gM8QKspTwmfGlRSJV47Fy/tXJY5UuN/etOT8y5hs4= Subject key identifier: 50:F2:50:54:08:86:C6:54:95:5B:CD:58:75:03:F0:AE:0B:C7:DB:61 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E043613E3DFF3A4114AEEA928 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:13:e3:df:f3:a4:11:4a:ee:a9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=59fb0738-f264-4937-8857-134651ceb725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:96:00:ad:cf:e1:1e:66:aa:a5:f7:17:43:15: 98:85:9d:8e:f9:04:bc:36:25:c4:2c:f8:05:e9:f5: 92:c9:0e:5b:28:17:44:8b:2b:60:d7:40:d1:1b:03: da:28:eb:10:1d:4b:d2:49:0f:9b:df:0e:74:1a:5a: c0:d8:a3:c5:f5:f9:35:50:50:8d:5e:de:e5:40:a7: 6d:1e:04:d7:b3:85:56:2b:56:8a:6d:eb:27:22:48: 68:9e:95:bf:4a:b2:c2:5c:ad:b8:2e:e4:40:1f:54: 71:cb:65:ba:c1:03:fb:d1:ab:71:80:35:07:92:e7: ef:38:7f:f5:54:d8:4a:44:10:21:0a:49:c3:40:ca: c9:de:7c:f0:41:0e:d4:a4:63:8a:a7:38:ea:cf:46: 78:4a:2b:84:5b:ff:fa:c6:2b:64:fd:23:bc:e9:16: 16:dc:fa:ef:4e:a9:39:5b:7b:db:1b:77:8c:91:54: b1:86:5d:4d:c0:9d:0c:d0:98:2f:2a:6e:81:a5:ea: 84:12:c9:e6:41:6e:e9:cb:b3:33:05:98:89:54:1d: 82:0b:a7:24:20:36:e3:6d:ba:f0:0c:45:03:cf:a5: ef:67:74:eb:d0:e8:81:01:68:a4:ec:8b:a1:87:48: c0:af:2a:b8:73:20:d3:7f:21:b7:82:55:5b:4c:fb: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F2:50:54:08:86:C6:54:95:5B:CD:58:75:03:F0:AE:0B:C7:DB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:c7:f2:04:df:9b:27:28:5b:06:4a:53:80:d8:46:f5:91:1c: 78:1c:74:4d:bb:d1:6e:b8:2a:a1:c5:5c:56:a3:0d:01:b1:d6: 32:97:2a:1e:37:48:4e:81:5d:cd:97:69:2b:58:66:7e:c9:f4: 6e:44:c4:b8:d9:d1:f4:f7:66:f6:34:d1:b2:35:d2:54:52:b3: eb:d1:5f:96:58:52:6d:81:2c:d2:57:12:da:00:26:18:fa:29: b9:88:36:aa:26:be:f7:ae:ec:5c:36:ce:24:b8:b3:dc:37:f1: 3e:18:b3:94:2a:8d:4e:64:17:b1:1e:43:99:e2:be:23:81:45: 25:f9:c9:4d:4f:47:bf:bd:f2:ae:66:51:ca:d1:e6:9f:f6:60: fc:15:73:ad:97:1e:7e:b8:4e:cc:f2:0b:6c:75:17:5e:8a:df: 8d:b3:6e:34:10:6b:5e:01:bb:65:5a:2c:35:76:50:8f:53:76: 97:43:8b:59:1a:7a:ca:ce:75:1e:43:56:cd:eb:f1:2c:f7:ab: 9e:1d:ca:10:81:e7:80:c7:9c:3e:3f:47:ad:7b:87:db:05:5e: 76:46:68:e0:1b:f9:04:1e:aa:0f:14:29:9d:5c:fe:10:f7:6f: d6:3c:92:10:da:8a:4f:ca:1a:38:36:ea:07:f3:f8:02:b7:99: e4:b0:c9:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENhPj3/OkEUruqSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NTlmYjA3MzgtZjI2NC00OTM3LTg4NTctMTM0NjUxY2ViNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5YArc/hHmaqpfcXQxWYhZ2O+QS8NiXELPgF 6fWSyQ5bKBdEiytg10DRGwPaKOsQHUvSSQ+b3w50GlrA2KPF9fk1UFCNXt7lQKdt HgTXs4VWK1aKbesnIkhonpW/SrLCXK24LuRAH1Rxy2W6wQP70atxgDUHkufvOH/1 VNhKRBAhCknDQMrJ3nzwQQ7UpGOKpzjqz0Z4SiuEW//6xitk/SO86RYW3PrvTqk5 W3vbG3eMkVSxhl1NwJ0M0JgvKm6BpeqEEsnmQW7py7MzBZiJVB2CC6ckIDbjbbrw DEUDz6XvZ3Tr0OiBAWik7Iuhh0jAryq4cyDTfyG3glVbTPvvkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDyUFQIhsZUlVvNWHUD8K4Lx9thMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2EyZGVmMTMtMmRjZS0z ZmEyLTg2MGEtZTYwMDFjYzhhMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRblMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfH8gTfmycoWwZKU4DYRvWRHHgcdE270W64KqHFXFajDQGx1jKXKh43 SE6BXc2XaStYZn7J9G5ExLjZ0fT3ZvY00bI10lRSs+vRX5ZYUm2BLNJXEtoAJhj6 KbmINqomvveu7Fw2ziS4s9w38T4Ys5QqjU5kF7EeQ5niviOBRSX5yU1PR7+98q5m UcrR5p/2YPwVc62XHn64TszyC2x1F16K342zbjQQa14Bu2VaLDV2UI9TdpdDi1ka esrOdR5DVs3r8Sz3q54dyhCB54DHnD4/R617h9sFXnZGaOAb+QQeqg8UKZ1c/hD3 b9Y8khDaik/KGjg26gfz+AK3meSwyRY= -----END CERTIFICATE-----Generated at Sat Jun 13 15:58:02 2026 by rpki-client