$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf2f47cc-24f9-32fc-9d0c-4172ea8aad75.roa File: bf2f47cc-24f9-32fc-9d0c-4172ea8aad75.roa (raw, json) Hash identifier: QAXaFG5aTE6jb4fbuqy2ZVZvxV2U/Vjsot622X4pUDM= Subject key identifier: B0:35:B1:C8:66:E8:36:A3:B5:0D:AE:B1:B4:05:03:AB:AB:D7:5E:1F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435F3070A226D996C05DD80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf2f47cc-24f9-32fc-9d0c-4172ea8aad75.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:f3:07:0a:22:6d:99:6c:05:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=517f8cfa-ba99-471c-b786-dcde046eda08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6c:fd:2e:2a:f1:ad:47:3d:3d:51:91:55:7e: 5d:65:82:b8:5e:b1:ae:8c:a4:74:b3:29:57:f1:56: 0e:cb:ae:3b:a5:b6:17:2a:b1:db:0d:29:5d:30:56: a4:3b:41:e1:57:13:d0:eb:73:e5:b3:22:3f:23:53: a5:91:5b:fb:71:eb:d9:99:22:0b:5a:ba:d3:9f:c2: 1b:40:83:f2:f7:26:15:72:6f:82:6d:6a:01:62:91: a2:e0:0d:5a:1a:68:ff:03:59:ad:80:67:7d:be:04: c9:8f:0f:33:5a:4f:f5:3b:7d:fb:b7:e4:f3:87:ca: 12:98:39:47:7b:c6:73:84:42:3a:06:2a:67:1c:b5: 5a:1b:0b:c1:2d:40:5b:3a:31:8b:7b:9f:6b:dd:d2: 88:e1:92:6f:60:19:b7:e9:5e:23:c4:b0:a7:a9:e6: dc:fc:c8:8f:ed:54:ec:a7:43:73:07:2c:bd:80:f5: 7d:56:86:89:35:76:e7:bb:1b:56:d0:62:13:3d:ce: a8:7d:3a:2a:7c:fc:85:b2:b7:87:0a:f8:a3:87:5e: 16:c3:60:fa:33:6c:72:b6:28:0d:e1:33:9b:41:f3: b5:0b:84:1c:40:b5:1b:ac:64:75:b4:f0:61:e8:16: f1:a3:cf:59:b5:a5:4a:6d:97:26:20:46:d6:25:6e: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:35:B1:C8:66:E8:36:A3:B5:0D:AE:B1:B4:05:03:AB:AB:D7:5E:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf2f47cc-24f9-32fc-9d0c-4172ea8aad75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6a:bd:b9:19:32:de:87:e8:96:0a:f3:30:e9:57:b8:19:93: a4:87:30:dc:88:ca:e3:8a:37:04:c9:7b:d9:a3:fc:2e:7f:7c: 40:6d:f0:52:19:76:7e:99:f7:a1:f2:84:93:d1:b8:f8:e9:91: 8b:d6:83:29:67:11:92:f2:96:69:3f:4b:f5:1b:6d:38:9f:cf: 5e:48:f9:2c:88:31:4c:7e:65:23:33:44:d2:d9:77:7a:70:d1: c5:c0:18:44:29:57:5f:f5:60:88:32:3f:80:a3:9b:93:3e:fa: 10:09:8f:4d:28:dc:50:24:c0:ae:56:d1:09:08:ae:d9:f9:d7: 14:d8:8a:6a:aa:1c:7c:e3:3e:36:3c:c9:19:21:50:c2:03:0d: b4:fe:52:f1:1c:8d:d7:2e:f5:85:b1:6e:30:3c:af:68:9b:d2: 5a:d4:1f:a9:1f:8a:71:7a:f2:5a:ab:92:7e:10:5d:19:3c:91: df:ab:97:15:02:8e:ce:77:32:e4:50:a2:64:9e:94:1c:d0:b0: 73:37:05:24:0e:fa:29:1c:cd:0f:98:46:55:47:03:72:bd:16: 4c:1a:a5:dd:e2:f0:63:85:18:5a:42:f8:cd:51:e1:63:84:60: 67:30:2b:22:99:9a:bf:f6:1c:5d:7f:27:49:a2:67:17:88:02: 48:93:35:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENfMHCiJtmWwF3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NTE3ZjhjZmEtYmE5OS00NzFjLWI3ODYtZGNkZTA0NmVkYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomz9LirxrUc9PVGRVX5dZYK4XrGujKR0sylX 8VYOy647pbYXKrHbDSldMFakO0HhVxPQ63PlsyI/I1OlkVv7cevZmSILWrrTn8Ib QIPy9yYVcm+CbWoBYpGi4A1aGmj/A1mtgGd9vgTJjw8zWk/1O337t+Tzh8oSmDlH e8ZzhEI6BipnHLVaGwvBLUBbOjGLe59r3dKI4ZJvYBm36V4jxLCnqebc/MiP7VTs p0NzByy9gPV9VoaJNXbnuxtW0GITPc6ofToqfPyFsreHCvijh14Ww2D6M2xytigN 4TObQfO1C4QcQLUbrGR1tPBh6Bbxo89ZtaVKbZcmIEbWJW6rCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA1schm6DajtQ2usbQFA6ur114fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmYyZjQ3Y2MtMjRmOS0z MmZjLTlkMGMtNDE3MmVhOGFhZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBqvbkZMt6H6JYK8zDpV7gZk6SHMNyIyuOKNwTJe9mj/C5/fEBt8FIZ dn6Z96HyhJPRuPjpkYvWgylnEZLylmk/S/UbbTifz15I+SyIMUx+ZSMzRNLZd3pw 0cXAGEQpV1/1YIgyP4Cjm5M++hAJj00o3FAkwK5W0QkIrtn51xTYimqqHHzjPjY8 yRkhUMIDDbT+UvEcjdcu9YWxbjA8r2ib0lrUH6kfinF68lqrkn4QXRk8kd+rlxUC js53MuRQomSelBzQsHM3BSQO+ikczQ+YRlVHA3K9Fkwapd3i8GOFGFpC+M1R4WOE YGcwKyKZmr/2HF1/J0miZxeIAkiTNYQ= -----END CERTIFICATE-----Generated at Sat Jun 13 15:58:50 2026 by rpki-client