$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c21f1766-fc74-3a08-ba8e-0dd33437395e.roa File: c21f1766-fc74-3a08-ba8e-0dd33437395e.roa (raw, json) Hash identifier: A1WPyfED2CcKayWG3ivvHPjFIw3zDadyGDu415siz8E= Subject key identifier: CF:F9:43:09:05:FC:CC:80:73:32:F2:ED:31:4C:AA:90:69:D8:15:AF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435D87A299E09719B202700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c21f1766-fc74-3a08-ba8e-0dd33437395e.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:d8:7a:29:9e:09:71:9b:20:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=bb2dd6e8-4929-40c6-b3fb-8169565a4293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9d:5a:50:ba:a8:36:09:bf:81:be:55:82:33: 40:a0:f1:a8:36:7c:97:44:99:8e:76:bd:64:01:bf: de:50:35:6c:9f:fa:f2:b6:16:dd:f8:38:51:11:cf: 4a:ab:ae:24:fe:2c:fc:e0:15:13:ba:da:3d:b8:0c: a8:87:5b:a7:84:97:4c:a9:df:39:77:57:a5:9d:fe: bb:43:cd:8b:9d:b0:57:39:e5:ac:d1:16:29:fc:00: 51:fc:dc:cc:d6:89:c6:56:b5:39:4a:d3:2c:b4:e6: 10:33:ce:3e:6e:fa:3c:6e:de:4e:2d:fe:b2:db:1a: 67:32:02:b3:4e:8d:eb:ee:96:22:8b:d2:3b:29:e8: 00:ab:66:e2:cf:e7:ec:f9:fd:34:0d:2e:25:6f:07: d5:49:21:f4:38:49:75:2c:fa:87:09:8d:76:35:4f: 44:7f:e6:64:69:05:28:de:37:63:a1:4b:97:a3:09: 92:f9:23:c4:43:84:9a:a0:84:44:8c:a6:41:e9:6a: db:72:65:ce:82:c6:62:4b:b5:57:9d:16:64:ed:91: 0e:2f:d8:c0:00:69:e9:2f:f8:39:44:4a:93:b0:3b: 8a:02:ea:8a:d8:6e:db:aa:70:69:6a:c6:8c:00:08: 5a:d4:14:a3:42:71:66:1b:61:16:35:e6:77:15:af: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F9:43:09:05:FC:CC:80:73:32:F2:ED:31:4C:AA:90:69:D8:15:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c21f1766-fc74-3a08-ba8e-0dd33437395e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d0:92:1a:24:50:a4:4a:12:19:e4:3f:02:ba:cd:f1:d7:c8: 1f:36:70:b8:bd:00:a6:29:4f:81:9f:b7:cf:44:f2:1f:19:dc: f2:8b:46:0d:ab:91:b7:2d:97:98:7d:c0:63:6f:8f:5f:12:39: 5a:9f:20:57:0b:48:59:1d:bb:59:8c:14:4e:63:0e:b4:e9:26: 23:59:f9:e0:f2:19:aa:1c:00:85:21:4c:99:54:bb:1c:a0:38: 17:ce:33:5a:e1:17:57:b9:5b:cf:5a:37:86:cf:6b:00:7d:7e: 98:71:f6:f8:63:9c:96:08:d3:79:52:1a:71:ac:c5:07:d4:0f: 95:59:b4:c1:39:70:8a:1c:5a:52:76:be:02:1f:68:12:b8:38: 23:44:f2:4e:b8:44:d0:da:ca:e2:2a:57:e4:d0:76:98:00:6f: 1c:bf:5e:4c:d2:24:27:1b:75:1a:d4:a0:32:76:fb:8c:73:56: 71:ea:94:71:eb:e5:0c:b8:8d:df:fa:15:ce:30:2a:35:c7:63: 1c:d9:cf:e7:52:39:13:3d:bf:63:2d:3b:6d:8a:bb:d9:53:30: 1f:d9:13:5e:b8:78:59:79:1a:8c:db:b3:89:16:c6:4e:3d:00: 45:bf:75:09:54:3c:a4:fb:29:4b:e2:1b:54:4f:17:b2:89:73: 7d:9a:12:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdh6KZ4JcZsgJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YmIyZGQ2ZTgtNDkyOS00MGM2LWIzZmItODE2OTU2NWE0MjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp1aULqoNgm/gb5VgjNAoPGoNnyXRJmOdr1k Ab/eUDVsn/rythbd+DhREc9Kq64k/iz84BUTuto9uAyoh1unhJdMqd85d1elnf67 Q82LnbBXOeWs0RYp/ABR/NzM1onGVrU5StMstOYQM84+bvo8bt5OLf6y2xpnMgKz To3r7pYii9I7KegAq2biz+fs+f00DS4lbwfVSSH0OEl1LPqHCY12NU9Ef+ZkaQUo 3jdjoUuXowmS+SPEQ4SaoIREjKZB6WrbcmXOgsZiS7VXnRZk7ZEOL9jAAGnpL/g5 REqTsDuKAuqK2G7bqnBpasaMAAha1BSjQnFmG2EWNeZ3Fa9oFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/5QwkF/MyAczLy7TFMqpBp2BWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzIxZjE3NjYtZmM3NC0z YTA4LWJhOGUtMGRkMzM0MzczOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/QkhokUKRKEhnkPwK6zfHXyB82cLi9AKYpT4Gft89E8h8Z3PKLRg2r kbctl5h9wGNvj18SOVqfIFcLSFkdu1mMFE5jDrTpJiNZ+eDyGaocAIUhTJlUuxyg OBfOM1rhF1e5W89aN4bPawB9fphx9vhjnJYI03lSGnGsxQfUD5VZtME5cIocWlJ2 vgIfaBK4OCNE8k64RNDayuIqV+TQdpgAbxy/XkzSJCcbdRrUoDJ2+4xzVnHqlHHr 5Qy4jd/6Fc4wKjXHYxzZz+dSORM9v2MtO22Ku9lTMB/ZE164eFl5Gozbs4kWxk49 AEW/dQlUPKT7KUviG1RPF7KJc32aEiI= -----END CERTIFICATE-----Generated at Sat Jun 13 20:26:04 2026 by rpki-client