$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa File: 1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa (raw, json) Hash identifier: 4dTZi6pYf7SrPHwlZ6yUat1eIBYO37DCS0smYOiSLcs= Subject key identifier: 5A:97:3C:29:66:1B:17:EB:4A:E9:22:E2:DE:92:73:C3:42:B6:71:09 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435DADE376BA13F0BB7ED80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:da:de:37:6b:a1:3f:0b:b7:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=93257e61-d0f7-494d-ae20-77b9a1869a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:0e:45:c1:10:64:88:7f:7c:58:18:f3:ba: 58:2c:5c:d9:07:6b:12:39:f5:fd:5c:0a:99:03:4f: c5:0d:4a:ed:f4:ec:e9:7d:ad:dd:fc:53:9b:22:b6: 98:88:5a:39:ac:c9:3b:2b:aa:3c:47:69:65:32:51: db:9f:65:8f:10:77:21:ce:04:68:9d:3a:70:05:73: 33:c8:5f:b4:aa:5c:f8:27:ba:b6:a6:47:c0:9e:d8: 44:3c:78:7b:ee:fe:2d:80:e4:a8:6f:6c:c0:25:79: 36:fd:20:f8:b4:a9:28:10:eb:66:44:5b:59:11:16: 26:cc:96:66:f5:01:a1:c1:a3:36:2e:83:24:fc:c1: 08:ab:83:2f:c4:5f:81:f6:8f:7e:46:3e:4b:51:1b: bc:b5:8c:b7:81:2a:12:bf:0e:4d:64:48:58:a1:74: f8:af:3a:f7:0a:4e:52:f1:e3:3f:ef:bf:c8:d0:7a: 8c:51:db:fd:6d:d8:85:c9:88:50:74:8c:69:6e:b3: b0:b9:d4:66:6a:19:c8:f4:5e:78:7d:c1:2e:63:ab: 81:a8:79:3f:9f:f5:a6:22:b9:54:58:aa:c5:74:82: fd:a9:92:2d:d1:2d:c9:71:93:0d:f2:a8:2d:29:a5: 6c:a3:b3:e1:c3:d2:19:34:b9:b9:52:43:3b:1a:34: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:97:3C:29:66:1B:17:EB:4A:E9:22:E2:DE:92:73:C3:42:B6:71:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c7:bc:fd:e2:9a:34:ab:10:b5:ea:28:7d:95:07:1e:04:e2: a5:05:60:ba:99:80:db:2b:8e:09:42:fc:34:30:73:7c:0d:38: 6a:d6:b7:bf:89:ec:dd:ad:8f:8f:f4:69:ed:77:dd:7f:b5:58: 89:a3:57:71:8b:dd:cd:f5:26:e4:45:df:b9:b9:88:5f:6b:58: b1:3e:7f:aa:7a:a9:7d:fe:4e:68:71:3f:94:01:de:dc:1b:78: 63:81:a1:b0:32:fa:d6:61:f8:c5:5e:8f:3c:de:c3:ae:0e:1c: c1:a5:c6:2d:f6:20:85:db:69:57:0b:a7:68:bd:fc:85:4d:2c: 83:35:07:e8:ee:e0:ce:2d:ca:e9:99:b8:40:0f:1e:06:2e:3f: dc:03:b5:fa:3c:87:01:da:9c:51:46:2d:09:ca:19:25:6c:e2: ea:29:8a:9f:02:23:a7:5e:33:b0:fa:5c:dc:ae:5e:6e:e5:80: 34:6e:1b:70:9a:25:fd:fa:6c:d1:71:74:67:1a:72:50:bb:e1: 61:c0:db:a4:b4:d6:40:ae:36:3e:a7:73:2e:bf:d5:92:3f:ef: 65:5a:82:02:81:2e:e9:b7:f0:c3:57:cd:fb:e9:07:14:01:3a: bf:43:d0:d9:a8:93:2d:6f:2e:18:91:11:64:42:ee:b5:da:76: 0c:9b:60:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdreN2uhPwu37YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk OTMyNTdlNjEtZDBmNy00OTRkLWFlMjAtNzdiOWExODY5YTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GYORcEQZIh/fFgY87pYLFzZB2sSOfX9XAqZ A0/FDUrt9Ozpfa3d/FObIraYiFo5rMk7K6o8R2llMlHbn2WPEHchzgRonTpwBXMz yF+0qlz4J7q2pkfAnthEPHh77v4tgOSob2zAJXk2/SD4tKkoEOtmRFtZERYmzJZm 9QGhwaM2LoMk/MEIq4MvxF+B9o9+Rj5LURu8tYy3gSoSvw5NZEhYoXT4rzr3Ck5S 8eM/77/I0HqMUdv9bdiFyYhQdIxpbrOwudRmahnI9F54fcEuY6uBqHk/n/WmIrlU WKrFdIL9qZIt0S3JcZMN8qgtKaVso7Phw9IZNLm5UkM7GjRy1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqXPClmGxfrSuki4t6Sc8NCtnEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWNmMDYyMGQtZjJmMS0z YzVhLTg5N2YtN2FhMTEzZjQ4ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3HvP3imjSrELXqKH2VBx4E4qUFYLqZgNsrjglC/DQwc3wNOGrWt7+J 7N2tj4/0ae133X+1WImjV3GL3c31JuRF37m5iF9rWLE+f6p6qX3+TmhxP5QB3twb eGOBobAy+tZh+MVejzzew64OHMGlxi32IIXbaVcLp2i9/IVNLIM1B+ju4M4tyumZ uEAPHgYuP9wDtfo8hwHanFFGLQnKGSVs4uopip8CI6deM7D6XNyuXm7lgDRuG3Ca Jf36bNFxdGcaclC74WHA26S01kCuNj6ncy6/1ZI/72VaggKBLum38MNXzfvpBxQB Or9D0Nmoky1vLhiREWRC7rXadgybYFo= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:01 2026 by rpki-client