$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa File: 9957d7bb-4a48-379a-8699-0af885f6a4a3.roa (raw, json) Hash identifier: B0p3MvOoKSxjTlfWfcNMktgCTUvQJXB4YJxowJ5IG14= Subject key identifier: CC:D8:1D:20:15:57:DC:D6:42:82:3B:4B:09:C8:97:85:7F:D5:DB:3C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435F603F0F3B747E1101000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:f6:03:f0:f3:b7:47:e1:10:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=d14e22b0-d743-4b53-b74c-a229e2915dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:0f:4a:62:35:21:83:40:18:7f:62:c3:af: 38:0f:2b:1b:6f:4f:95:db:3f:63:6d:1f:dc:a0:c4: 84:4d:4a:05:16:76:7c:10:2c:63:66:dc:78:a0:e3: 9a:06:a6:e2:58:58:f3:af:dd:f9:68:58:da:08:eb: 8b:b2:20:14:0c:fe:1f:ea:4f:d7:32:6c:57:31:e8: a5:f8:65:a8:53:e1:ce:b4:fb:d6:50:4a:51:9a:ed: e6:7b:c1:eb:60:59:ea:05:50:d8:c5:22:53:ff:9d: 34:57:04:cd:2c:e4:32:fe:fe:9d:ae:37:97:16:81: 9c:fe:be:1a:ce:96:5a:30:b0:80:67:60:f5:a2:b8: a9:85:12:c6:1d:ff:a2:80:a3:78:5f:bd:6b:aa:b8: 58:6d:f1:8b:34:37:60:d5:ec:23:13:63:f7:01:d4: b4:c3:c8:5d:90:2f:cf:25:83:cc:39:61:fd:1f:c7: 97:63:89:68:0d:99:1e:87:9d:c1:14:a4:20:d7:c4: b7:da:d4:7a:a0:a7:e1:fb:f4:08:f2:73:0f:10:ae: b8:fd:09:b7:23:c3:58:c3:c4:4e:e5:28:e2:79:23: 07:d1:fd:c2:fd:3c:55:e1:a1:06:cd:e0:99:8c:e6: 76:b5:2b:38:91:3a:bd:aa:b5:cd:a2:fd:a6:a3:61: e6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D8:1D:20:15:57:DC:D6:42:82:3B:4B:09:C8:97:85:7F:D5:DB:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:17:24:97:f3:2c:e6:11:50:15:fa:d8:25:32:f5:b3:98:f0: b2:79:9e:d2:66:2c:ff:53:14:68:20:d3:0e:78:94:03:75:31: cb:32:ca:af:96:e9:52:c7:9a:ba:d1:20:b2:db:59:f9:7d:51: 50:74:6f:bb:29:b6:bf:69:bc:75:fe:71:08:37:49:af:5a:2e: 70:44:a1:e1:08:c8:6b:0f:44:41:41:30:8b:d7:3d:99:11:90: 71:38:3a:d6:ff:35:3d:87:76:6d:e1:f0:da:71:d7:bb:bb:79: 14:d4:fd:10:55:1d:5b:88:c6:e4:6d:80:9d:83:e1:15:0d:3a: a4:1d:43:1d:e5:1c:2d:a0:91:a6:25:37:c2:a0:0c:48:6a:0e: ef:9a:a7:f1:70:c9:c6:d3:01:58:d4:1e:d2:e4:92:93:2e:28: a1:6d:d2:0a:95:44:62:e1:be:a4:12:e9:0a:48:c7:36:35:7f: d5:b7:ad:ca:1d:28:92:f6:53:15:a7:d5:bd:cb:98:4f:2e:f7: 99:37:a1:f6:9e:87:ce:45:81:0e:71:bc:60:87:cb:e0:c4:36: b3:e1:9f:d7:9f:09:3b:f8:0f:6f:85:6d:4b:7b:06:ce:b5:30: 01:ea:a1:b6:97:4c:1c:f7:5d:aa:13:5b:5c:d0:90:d0:85:bd: 8c:d0:11:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENfYD8PO3R+EQEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZDE0ZTIyYjAtZDc0My00YjUzLWI3NGMtYTIyOWUyOTE1ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubIPSmI1IYNAGH9iw684Dysbb0+V2z9jbR/c oMSETUoFFnZ8ECxjZtx4oOOaBqbiWFjzr935aFjaCOuLsiAUDP4f6k/XMmxXMeil +GWoU+HOtPvWUEpRmu3me8HrYFnqBVDYxSJT/500VwTNLOQy/v6drjeXFoGc/r4a zpZaMLCAZ2D1oriphRLGHf+igKN4X71rqrhYbfGLNDdg1ewjE2P3AdS0w8hdkC/P JYPMOWH9H8eXY4loDZkeh53BFKQg18S32tR6oKfh+/QI8nMPEK64/Qm3I8NYw8RO 5SjieSMH0f3C/TxV4aEGzeCZjOZ2tSs4kTq9qrXNov2mo2HmZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzYHSAVV9zWQoI7SwnIl4V/1ds8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTk1N2Q3YmItNGE0OC0z NzlhLTg2OTktMGFmODg1ZjZhNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQXJJfzLOYRUBX62CUy9bOY8LJ5ntJmLP9TFGgg0w54lAN1Mcsyyq+W 6VLHmrrRILLbWfl9UVB0b7sptr9pvHX+cQg3Sa9aLnBEoeEIyGsPREFBMIvXPZkR kHE4Otb/NT2Hdm3h8Npx17u7eRTU/RBVHVuIxuRtgJ2D4RUNOqQdQx3lHC2gkaYl N8KgDEhqDu+ap/FwycbTAVjUHtLkkpMuKKFt0gqVRGLhvqQS6QpIxzY1f9W3rcod KJL2UxWn1b3LmE8u95k3ofaeh85FgQ5xvGCHy+DENrPhn9efCTv4D2+FbUt7Bs61 MAHqobaXTBz3XaoTW1zQkNCFvYzQEeY= -----END CERTIFICATE-----Generated at Sat Jun 13 16:01:59 2026 by rpki-client