$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fba2cbe6-2c11-3b10-97f6-f38385925598.roa File: fba2cbe6-2c11-3b10-97f6-f38385925598.roa (raw, json) Hash identifier: cM7kE6qceVEkfD/ot6TPfZd4XremsdgZ26OKYRyuRR4= Subject key identifier: C2:F3:E8:38:65:C2:30:1F:0E:E5:14:F0:44:9A:BE:E9:1D:C7:2D:7B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435D2D4622927CFB87BC6C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fba2cbe6-2c11-3b10-97f6-f38385925598.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:d2:d4:62:29:27:cf:b8:7b:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=98fa239e-f100-41c1-b0e8-7e5a6e1b3f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:16:94:44:74:1d:b5:2f:0f:ca:5a:51:b8:f5: 2e:80:c1:ac:5f:fa:c5:fc:a0:85:3a:4b:ef:f8:e7: c7:d9:5a:ff:34:98:a9:ed:f5:c7:6e:cd:3f:14:32: ed:21:3b:52:19:8d:84:a8:86:5e:53:d1:80:1f:90: 30:f2:a5:e1:c3:3f:ac:dc:a3:2b:60:76:66:d7:2b: 3e:72:10:fa:14:80:7e:57:15:d5:8b:60:49:46:42: 82:66:d6:7a:fa:4f:0c:36:83:0d:c9:bd:18:c8:c2: 4c:f0:d0:f5:07:fd:28:d2:d0:06:35:be:aa:0c:af: 67:f0:f3:2b:d7:4a:43:ba:e0:fb:82:77:1d:31:e4: a3:d7:bf:37:82:19:16:5e:d6:f6:bc:ae:16:b6:2d: ef:74:42:fe:32:03:02:97:fd:ae:df:39:cb:0a:9c: 96:9e:08:0a:62:76:b2:6b:cf:75:dc:e5:ca:5e:f1: d6:a1:d6:33:11:0d:cf:09:8e:3f:58:6b:6b:17:37: 14:81:ae:3d:c3:07:c4:47:a7:cc:10:e9:9a:09:c2: 2b:82:14:87:2b:e3:26:8e:60:ec:14:fa:85:cc:49: b3:0e:88:73:3d:8a:b5:bc:37:8c:4f:39:2f:5f:77: d7:1f:89:f2:3c:15:a1:ef:14:8b:3b:72:ea:b9:51: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F3:E8:38:65:C2:30:1F:0E:E5:14:F0:44:9A:BE:E9:1D:C7:2D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fba2cbe6-2c11-3b10-97f6-f38385925598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:89:57:46:53:2d:b5:df:39:81:3c:a4:80:15:3d:f5:2e:a7: 57:cc:60:f8:13:cc:82:12:31:c6:0e:17:0b:7a:89:f7:75:8d: 7c:20:2e:1b:a3:07:41:f3:e9:45:72:4e:bc:ac:4b:ad:ce:01: 7f:48:e8:a2:73:85:ed:4a:fc:e7:fd:c5:87:8c:82:0e:85:52: e5:0e:54:1d:d4:9d:68:eb:08:8a:dc:f1:a4:3b:f8:14:88:73: a4:e6:a0:2a:9d:79:e9:df:06:95:e1:d3:98:be:ce:0d:df:ac: 70:a6:68:f9:14:9b:fe:ac:38:e0:ee:ce:54:5e:d3:2f:80:14: 4e:49:b3:9e:c4:27:1b:3d:7e:56:81:91:c6:5e:eb:e5:32:eb: 65:37:8e:8e:8b:21:51:3b:d1:42:f6:fd:a8:9f:79:f6:bd:06: b6:09:68:b6:a3:09:16:f4:79:c8:59:04:10:f7:b1:a0:b9:0a: 43:45:7b:81:38:51:92:96:7d:d9:76:29:ec:47:3e:67:ff:f2: 75:50:1f:12:cb:e7:22:5a:4e:cf:d5:01:9c:6c:8c:47:38:9a: a0:b8:8a:12:e1:f5:3d:09:c5:d1:5b:2d:cc:51:c5:43:c1:dd: b5:a6:c6:ac:9c:31:70:38:8b:89:ed:09:2e:3f:db:b5:68:38: ec:7a:76:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdLUYiknz7h7xsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk OThmYTIzOWUtZjEwMC00MWMxLWIwZTgtN2U1YTZlMWIzZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BaURHQdtS8PylpRuPUugMGsX/rF/KCFOkvv +OfH2Vr/NJip7fXHbs0/FDLtITtSGY2EqIZeU9GAH5Aw8qXhwz+s3KMrYHZm1ys+ chD6FIB+VxXVi2BJRkKCZtZ6+k8MNoMNyb0YyMJM8ND1B/0o0tAGNb6qDK9n8PMr 10pDuuD7gncdMeSj1783ghkWXtb2vK4Wti3vdEL+MgMCl/2u3znLCpyWnggKYnay a8913OXKXvHWodYzEQ3PCY4/WGtrFzcUga49wwfER6fMEOmaCcIrghSHK+MmjmDs FPqFzEmzDohzPYq1vDeMTzkvX3fXH4nyPBWh7xSLO3LquVG5SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLz6DhlwjAfDuUU8ESavukdxy17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmJhMmNiZTYtMmMxMS0z YjEwLTk3ZjYtZjM4Mzg1OTI1NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyJV0ZTLbXfOYE8pIAVPfUup1fMYPgTzIISMcYOFwt6ifd1jXwgLhuj B0Hz6UVyTrysS63OAX9I6KJzhe1K/Of9xYeMgg6FUuUOVB3UnWjrCIrc8aQ7+BSI c6TmoCqdeenfBpXh05i+zg3frHCmaPkUm/6sOODuzlRe0y+AFE5Js57EJxs9flaB kcZe6+Uy62U3jo6LIVE70UL2/aifefa9BrYJaLajCRb0echZBBD3saC5CkNFe4E4 UZKWfdl2KexHPmf/8nVQHxLL5yJaTs/VAZxsjEc4mqC4ihLh9T0JxdFbLcxRxUPB 3bWmxqycMXA4i4ntCS4/27VoOOx6dj4= -----END CERTIFICATE-----Generated at Sat Jun 13 20:04:21 2026 by rpki-client