$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa File: 5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa (raw, json) Hash identifier: eadq8+o3yTjOxCZqU3OYXwOSVfYrMBxg5slI8iJnTJE= Subject key identifier: DA:E4:F5:E5:4A:18:78:D8:66:30:6D:FE:5A:F5:3E:A4:50:5C:40:F6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E04361B9C5F2CAD6E90EF0BC3 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:1b:9c:5f:2c:ad:6e:90:ef:0b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=896f5184-7ea3-418c-867d-bed93c3d6e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:de:eb:74:9c:af:da:d7:7f:85:7a:a1:6a: 8d:f9:84:23:7a:11:4a:98:4a:48:fb:b5:fe:60:1b: b4:66:79:08:0d:98:fa:90:83:1d:e6:ac:6c:15:e4: d1:27:bc:fc:d6:1b:73:07:6a:d2:0e:b2:28:a9:61: 5a:98:15:7b:ae:f8:e2:8f:ac:16:c1:ad:5a:87:8b: 55:ee:84:be:de:0c:d0:7d:b1:d4:91:16:22:a2:67: 36:3e:44:72:38:9d:f6:20:c1:4f:7d:e9:c3:2b:70: fb:ba:99:be:a2:02:9c:e6:c4:f0:c1:08:20:63:2e: 68:33:27:f6:e4:06:22:49:67:e5:d8:d4:b8:11:b7: 4b:ed:ae:a4:64:db:05:b7:3f:06:1c:f9:be:42:3b: 70:24:6e:f3:82:3e:24:8b:fb:65:7b:b2:38:49:31: 61:1b:d4:6a:3d:d7:c8:06:24:3d:de:1c:66:2d:69: 65:b4:1d:52:40:f0:83:0e:3d:4f:8a:c1:73:d1:55: 91:50:82:42:9a:ff:4d:92:9a:6f:a8:88:13:5b:67: 40:50:fe:50:a8:2f:8f:14:61:bf:b9:a4:41:4a:60: 54:a8:82:3b:ac:ee:96:30:1f:0a:47:4d:11:4a:a7: 09:6a:30:20:83:ea:37:b1:a4:3f:d9:22:3d:dd:3e: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E4:F5:E5:4A:18:78:D8:66:30:6D:FE:5A:F5:3E:A4:50:5C:40:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5a940eea-cb74-3d67-b0cc-a726e2853bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fd:4f:9f:b5:3e:e1:cb:97:57:bd:50:aa:20:c4:28:fe:7c: 84:ff:da:5e:1a:04:82:4d:ab:ec:7e:23:47:53:76:0c:e0:18: a6:a9:87:7b:00:e7:4c:36:e1:c0:58:5a:d7:ac:cd:ac:a7:65: 16:ca:d7:e9:c4:55:5d:01:fa:53:d0:4e:01:83:16:21:bf:e4: d5:fb:70:d2:0e:20:ee:e0:61:bf:35:d4:e1:e3:b2:c8:35:e8: 11:97:b8:f1:d3:b5:29:05:fe:57:46:ab:c3:91:bc:79:77:62: d3:52:21:18:1f:31:75:5b:7b:1f:59:38:0b:f2:98:0a:de:d5: d0:eb:9b:1e:8c:e7:94:33:99:db:c0:a1:eb:c0:cf:9c:45:cb: 98:38:dc:75:c0:c7:3f:7e:12:e8:b9:14:9c:20:b4:db:89:ac: 10:8f:3a:ae:27:1c:8d:e1:c3:78:1e:b4:7f:51:90:1c:6e:cd: e4:e2:60:39:16:6c:56:8a:69:65:02:a7:cc:9b:70:86:34:1c: a5:2b:fe:84:d4:34:10:26:2f:74:ec:82:03:1a:f1:17:d7:07: 10:93:a9:0f:09:63:8d:46:a5:80:a2:a6:26:fd:31:a8:48:bd: be:c9:50:92:b1:48:b5:1e:8e:83:6f:76:98:e3:52:df:ca:d0: 22:64:1f:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENhucXyytbpDvC8MwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ODk2ZjUxODQtN2VhMy00MThjLTg2N2QtYmVkOTNjM2Q2ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzXe63Scr9rXf4V6oWqN+YQjehFKmEpI+7X+ YBu0ZnkIDZj6kIMd5qxsFeTRJ7z81htzB2rSDrIoqWFamBV7rvjij6wWwa1ah4tV 7oS+3gzQfbHUkRYiomc2PkRyOJ32IMFPfenDK3D7upm+ogKc5sTwwQggYy5oMyf2 5AYiSWfl2NS4EbdL7a6kZNsFtz8GHPm+QjtwJG7zgj4ki/tle7I4STFhG9RqPdfI BiQ93hxmLWlltB1SQPCDDj1PisFz0VWRUIJCmv9NkppvqIgTW2dAUP5QqC+PFGG/ uaRBSmBUqII7rO6WMB8KR00RSqcJajAgg+o3saQ/2SI93T4sxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrk9eVKGHjYZjBt/lr1PqRQXED2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWE5NDBlZWEtY2I3NC0z ZDY3LWIwY2MtYTcyNmUyODUzYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH9T5+1PuHLl1e9UKogxCj+fIT/2l4aBIJNq+x+I0dTdgzgGKaph3sA 50w24cBYWteszaynZRbK1+nEVV0B+lPQTgGDFiG/5NX7cNIOIO7gYb811OHjssg1 6BGXuPHTtSkF/ldGq8ORvHl3YtNSIRgfMXVbex9ZOAvymAre1dDrmx6M55QzmdvA oevAz5xFy5g43HXAxz9+Eui5FJwgtNuJrBCPOq4nHI3hw3getH9RkBxuzeTiYDkW bFaKaWUCp8ybcIY0HKUr/oTUNBAmL3TsggMa8RfXBxCTqQ8JY41GpYCipib9MahI vb7JUJKxSLUejoNvdpjjUt/K0CJkH5M= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:26 2026 by rpki-client