$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d8f7d72-145a-3c33-a493-7a82a86c6328.roa File: 5d8f7d72-145a-3c33-a493-7a82a86c6328.roa (raw, json) Hash identifier: Y2XQumRZGeXVNAUqNkdZebCFOCtPxmrGxvX9TUz77D8= Subject key identifier: 11:66:28:B3:E8:F4:EC:B2:C9:FC:76:DB:70:60:B1:8D:F9:AC:5C:47 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E043625B15667553873626800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d8f7d72-145a-3c33-a493-7a82a86c6328.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 207266 IP address blocks: 65.22.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:25:b1:56:67:55:38:73:62:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=9b6618d5-7d64-4f35-b156-541b6695573b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:dd:45:8a:83:60:6b:ff:c4:a3:ad:87:22: 58:d5:c6:91:d3:3c:29:85:a0:76:dc:f8:fe:c3:ab: 37:54:c7:ce:45:5f:7f:39:3f:be:a7:58:26:37:e7: 15:ae:7d:07:3e:06:6b:a1:d7:f0:a4:0f:24:f7:35: 20:c4:1d:2b:10:be:99:b4:5e:18:44:98:11:51:a8: 4b:c3:9b:5f:d0:74:fe:80:fc:71:c5:78:36:06:ec: d8:b5:ef:f2:5e:72:16:14:10:8a:65:91:df:7a:90: 52:2d:68:5d:9d:b9:d8:a0:7b:e1:4b:66:c6:79:72: 05:60:94:fc:5f:29:f4:f3:ea:e7:0d:a8:77:e0:f8: 78:47:8b:9b:89:0c:f4:95:25:f7:aa:8b:ac:02:77: 16:db:cf:5e:0e:57:3d:82:8b:79:ac:16:bf:28:be: 66:90:0e:df:7b:49:52:21:64:cc:cb:4d:90:aa:42: a7:a8:e7:bc:c3:49:fe:92:ce:eb:e4:a6:f0:47:d5: 85:3c:4c:57:63:a7:a3:92:61:02:61:2c:f6:04:69: 4a:6e:c7:b0:18:05:1e:f2:d1:48:1b:a0:02:ec:dd: b8:30:6b:3e:97:25:1b:76:bb:75:b6:59:0c:48:86: 04:6e:36:fe:38:e9:9f:4e:02:fd:e2:d6:dd:1f:cd: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:66:28:B3:E8:F4:EC:B2:C9:FC:76:DB:70:60:B1:8D:F9:AC:5C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d8f7d72-145a-3c33-a493-7a82a86c6328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:38:6a:ac:79:ed:2e:3f:2a:58:06:3f:33:54:c5:7a:c5:32: 9d:e5:74:b5:ab:59:91:cb:ea:b3:aa:29:5d:a5:70:0b:d6:20: f0:86:f7:81:b2:4a:ad:ea:90:86:db:62:ba:3d:fb:8d:96:4d: 56:bd:9e:5d:96:bb:10:2e:4e:53:23:c7:86:65:91:21:97:4e: e0:9f:9f:bb:b8:d2:f2:3e:73:30:dd:b5:66:24:7a:73:f9:4e: 05:fd:72:a7:47:71:ed:69:d1:a7:29:bb:7f:aa:92:64:71:55: 08:e0:f4:ec:f8:95:0d:af:00:39:53:7b:17:dd:42:aa:38:66: 41:c0:d5:99:c9:99:4b:8d:98:08:62:b1:38:99:99:68:c6:38: 58:39:62:20:02:a7:9b:23:9f:be:f0:3b:b2:2b:62:a9:92:2e: 2c:57:df:78:d7:4e:51:ef:50:26:46:3b:fb:af:e8:67:e7:c2: 5d:df:8d:b8:fe:47:bf:6f:b2:42:62:dc:1e:45:1a:d2:15:77: a1:85:ed:17:b6:45:2b:1d:fb:72:e0:c9:e7:5c:00:4e:c1:cc: 62:a4:5c:18:a8:da:b8:5a:82:f1:46:25:6c:30:65:05:b3:32: e7:9f:be:89:9f:4c:05:2c:8c:c0:d7:25:d9:5b:fd:ac:b2:2b: 3a:ff:52:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENiWxVmdVOHNiaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk OWI2NjE4ZDUtN2Q2NC00ZjM1LWIxNTYtNTQxYjY2OTU1NzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCjdRYqDYGv/xKOthyJY1caR0zwphaB23Pj+ w6s3VMfORV9/OT++p1gmN+cVrn0HPgZrodfwpA8k9zUgxB0rEL6ZtF4YRJgRUahL w5tf0HT+gPxxxXg2BuzYte/yXnIWFBCKZZHfepBSLWhdnbnYoHvhS2bGeXIFYJT8 Xyn08+rnDah34Ph4R4ubiQz0lSX3qousAncW289eDlc9got5rBa/KL5mkA7fe0lS IWTMy02QqkKnqOe8w0n+ks7r5KbwR9WFPExXY6ejkmECYSz2BGlKbsewGAUe8tFI G6AC7N24MGs+lyUbdrt1tlkMSIYEbjb+OOmfTgL94tbdH80OMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFmKLPo9Oyyyfx223BgsY35rFxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWQ4ZjdkNzItMTQ1YS0z YzMzLWE0OTMtN2E4MmE4NmM2MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw4aqx57S4/KlgGPzNUxXrFMp3ldLWrWZHL6rOqKV2lcAvWIPCG94Gy Sq3qkIbbYro9+42WTVa9nl2WuxAuTlMjx4ZlkSGXTuCfn7u40vI+czDdtWYkenP5 TgX9cqdHce1p0acpu3+qkmRxVQjg9Oz4lQ2vADlTexfdQqo4ZkHA1ZnJmUuNmAhi sTiZmWjGOFg5YiACp5sjn77wO7IrYqmSLixX33jXTlHvUCZGO/uv6Gfnwl3fjbj+ R79vskJi3B5FGtIVd6GF7Re2RSsd+3LgyedcAE7BzGKkXBio2rhagvFGJWwwZQWz MuefvomfTAUsjMDXJdlb/ayyKzr/Uno= -----END CERTIFICATE-----Generated at Sat Jun 13 16:00:48 2026 by rpki-client