$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa File: a32b982b-80c0-30f4-9738-db8d8a2a0644.roa (raw, json) Hash identifier: soqdQ+uXmJQHHFegcEhjCJSWAwBWYfWzsWogrVYWHy0= Subject key identifier: DC:8E:DD:AE:55:E8:4D:16:74:3F:0C:11:E5:03:6C:B1:91:D9:25:D1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435FFF85CD62632B6D33880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:ff:f8:5c:d6:26:32:b6:d3:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=f1f7e5a9-060b-44f4-9cdc-e76ab0c628bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:30:0e:8a:f4:c1:3c:45:74:5e:c8:6e:18:80: 52:01:13:cd:7f:81:73:dc:ac:0b:b9:4e:47:3b:40: 2e:16:46:12:b6:20:4f:a5:3a:5b:d3:d7:14:95:4e: 65:eb:d1:27:73:46:6b:3c:bc:9b:19:8b:f4:8b:5c: af:c4:b4:8c:2f:a2:eb:b6:80:59:ec:f8:c5:9a:c5: 21:0d:d7:36:b6:f5:db:18:d8:18:07:47:de:90:ff: 51:da:84:7b:02:f7:f6:44:9b:79:6c:24:d3:e5:38: 08:60:c4:51:ca:45:b5:51:ee:9e:55:93:1a:cd:a3: 51:af:93:65:8f:f1:7e:83:5f:85:4a:0b:7b:ee:73: d8:82:f8:1d:d5:02:7d:8b:2a:cf:07:f5:6e:c2:ef: c9:7d:d8:08:d7:51:cf:9c:84:b8:59:30:73:52:1c: 9d:f4:2f:ab:91:48:b0:d5:ef:67:ea:74:f5:0c:3f: bf:0d:88:90:75:0b:ce:37:70:e6:e5:5d:97:2d:96: a5:e1:28:3f:64:7d:bd:94:81:0d:ec:90:63:c8:16: fb:b1:08:05:0e:3f:19:20:fd:65:2b:ae:07:2d:ba: c3:48:9a:f7:95:96:c3:f3:3d:ba:a1:5f:a1:48:17: 09:61:eb:e3:af:6c:fa:32:b0:96:74:6d:8c:83:2d: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8E:DD:AE:55:E8:4D:16:74:3F:0C:11:E5:03:6C:B1:91:D9:25:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:27:f5:8c:a6:5d:8d:64:02:64:08:f9:76:29:15:d1:65:66: ce:89:43:7b:79:7c:36:06:a6:81:82:89:b0:08:f8:0f:8a:08: 9b:18:a8:98:d2:4e:74:1c:c3:9c:09:d5:78:d7:bb:50:0e:d6: 84:72:a8:f8:9c:72:39:52:b6:7f:a9:fc:fe:8b:d0:cd:7e:82: 0d:5d:58:5a:f9:74:b9:0b:5f:62:d1:d3:66:ee:09:75:61:7c: 7f:b3:c3:da:de:21:8d:6d:bd:51:37:e7:15:77:80:28:8c:a8: e8:66:99:51:84:48:73:64:83:4f:63:0a:4b:ef:8e:db:94:a9: 0e:9a:09:36:9e:a4:82:cd:68:65:25:77:40:22:77:24:d4:15: ff:da:51:58:39:83:83:06:ab:ec:d0:cd:85:fb:c1:9b:fb:2d: ba:39:25:60:07:d6:a1:92:7a:10:9e:71:a6:ad:a4:7b:0d:24: 30:6c:58:57:ae:12:94:53:43:e5:7f:e1:f4:47:29:54:9b:ef: 9a:0f:21:ef:b9:09:d0:b4:8c:e7:26:d5:7d:6c:cf:4b:1d:dd: 39:bd:ad:bc:0d:02:b0:53:ae:99:56:35:5e:f8:17:78:61:d9: 34:9e:aa:98:23:70:ab:2b:e5:d9:97:3f:fc:15:53:13:8d:df: 17:3b:98:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENf/4XNYmMrbTOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZjFmN2U1YTktMDYwYi00NGY0LTljZGMtZTc2YWIwYzYyOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjAOivTBPEV0XshuGIBSARPNf4Fz3KwLuU5H O0AuFkYStiBPpTpb09cUlU5l69Enc0ZrPLybGYv0i1yvxLSML6LrtoBZ7PjFmsUh Ddc2tvXbGNgYB0fekP9R2oR7Avf2RJt5bCTT5TgIYMRRykW1Ue6eVZMazaNRr5Nl j/F+g1+FSgt77nPYgvgd1QJ9iyrPB/Vuwu/JfdgI11HPnIS4WTBzUhyd9C+rkUiw 1e9n6nT1DD+/DYiQdQvON3Dm5V2XLZal4Sg/ZH29lIEN7JBjyBb7sQgFDj8ZIP1l K64HLbrDSJr3lZbD8z26oV+hSBcJYevjr2z6MrCWdG2Mgy0MFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyO3a5V6E0WdD8MEeUDbLGR2SXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTMyYjk4MmItODBjMC0z MGY0LTk3MzgtZGI4ZDhhMmEwNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQn9YymXY1kAmQI+XYpFdFlZs6JQ3t5fDYGpoGCibAI+A+KCJsYqJjS TnQcw5wJ1XjXu1AO1oRyqPiccjlStn+p/P6L0M1+gg1dWFr5dLkLX2LR02buCXVh fH+zw9reIY1tvVE35xV3gCiMqOhmmVGESHNkg09jCkvvjtuUqQ6aCTaepILNaGUl d0AidyTUFf/aUVg5g4MGq+zQzYX7wZv7Lbo5JWAH1qGSehCecaatpHsNJDBsWFeu EpRTQ+V/4fRHKVSb75oPIe+5CdC0jOcm1X1sz0sd3Tm9rbwNArBTrplWNV74F3hh 2TSeqpgjcKsr5dmXP/wVUxON3xc7mOI= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:24 2026 by rpki-client