$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa File: 2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa (raw, json) Hash identifier: VoudIzBVRhW0TAbzb8/mSZkhg/4zLmJcBo7Wg9dRiQM= Subject key identifier: AA:4E:86:2E:50:C7:1D:B4:78:9F:75:29:E0:EF:C0:0A:B3:8F:57:9A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435DD8D988BED9A1DC22280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:dd:8d:98:8b:ed:9a:1d:c2:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=ae6bab99-1e7b-4837-83fc-672593044b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:99:91:30:42:a9:1c:1e:78:7f:15:39:d9: 8b:be:a3:ed:f5:7d:ac:c8:5e:c4:23:f7:86:1e:b0: 19:dd:16:ee:e9:bc:72:5a:30:9c:c6:3e:2f:6c:82: 81:fb:31:d0:94:d1:b9:02:b2:eb:69:f5:fb:3c:5c: 51:cf:2b:c8:a0:e2:9d:5d:eb:c7:1d:52:44:4b:41: 34:36:78:3b:ac:38:d5:2e:72:fd:1f:1d:b8:df:1c: 6a:5e:3b:0d:aa:11:55:2c:8a:9d:47:30:32:53:58: 49:e2:a7:be:ee:9c:79:98:bb:64:64:f0:ec:36:63: 78:40:81:a2:9e:ab:ae:a3:0f:72:56:a9:17:2e:f9: 4d:76:d3:28:f6:ee:90:b0:7d:35:0f:aa:48:5a:f2: 57:9a:b1:48:7a:06:22:c7:03:f5:8d:f9:70:cd:96: 6f:f2:33:38:1e:73:51:fb:17:ec:3f:06:c1:7f:22: 16:fb:a0:ba:b0:e0:11:8a:b5:4a:f2:5c:fb:fc:c4: 9e:24:ca:30:db:ff:5e:45:8b:01:d7:de:f7:8d:ba: 32:07:c3:28:83:61:98:ad:ed:e4:db:f1:36:4d:6d: d3:5a:fc:47:9f:23:6e:a0:55:55:e4:87:54:45:ff: 9b:9c:be:3e:41:cc:cc:01:95:5c:ca:f5:f0:db:e8: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4E:86:2E:50:C7:1D:B4:78:9F:75:29:E0:EF:C0:0A:B3:8F:57:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:e4:57:dd:8e:14:b6:59:da:b3:86:9f:ce:df:6c:82:9c:b2: 2e:c3:2b:ff:a3:20:d1:b0:2c:89:7c:3a:ce:a3:c7:5e:e4:7d: cf:08:8b:87:f3:d3:07:1e:6c:c5:1c:2f:da:31:89:52:b3:17: 39:27:7b:fe:10:f1:d1:98:7b:35:37:94:cf:7c:91:07:3f:57: 57:c5:69:fd:72:6c:19:5a:53:d9:b6:61:c4:d2:2a:2f:7b:1a: 40:e3:85:4e:5b:f7:da:a9:f9:18:4f:04:f8:cb:84:53:73:1f: 0f:9f:09:5c:4e:83:d4:96:d8:d3:a1:bc:98:d8:1c:12:7d:9f: ad:ea:84:8e:ec:0f:f0:d1:b0:ea:e4:38:fd:1c:4e:32:a4:ff: 37:cb:7f:07:ae:32:6a:93:09:a8:bd:0d:fa:33:ef:df:fc:db: 67:25:f9:09:29:10:44:53:89:b3:3a:56:fe:a5:91:8a:58:89: 56:18:46:93:90:38:3d:39:ce:ef:78:a7:28:b5:fe:79:a8:e3: e9:2f:cf:49:db:45:e9:87:44:ed:47:92:02:20:fc:79:07:11: 77:6b:0d:ad:4e:1a:4d:64:c3:cd:44:7b:8f:49:18:8f:57:18: cb:f8:7b:60:48:06:67:7b:c2:eb:32:e1:76:ac:3a:90:29:50: 59:d1:f0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENd2NmIvtmh3CIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YWU2YmFiOTktMWU3Yi00ODM3LTgzZmMtNjcyNTkzMDQ0YjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktaZkTBCqRweeH8VOdmLvqPt9X2syF7EI/eG HrAZ3Rbu6bxyWjCcxj4vbIKB+zHQlNG5ArLrafX7PFxRzyvIoOKdXevHHVJES0E0 Nng7rDjVLnL9Hx243xxqXjsNqhFVLIqdRzAyU1hJ4qe+7px5mLtkZPDsNmN4QIGi nquuow9yVqkXLvlNdtMo9u6QsH01D6pIWvJXmrFIegYixwP1jflwzZZv8jM4HnNR +xfsPwbBfyIW+6C6sOARirVK8lz7/MSeJMow2/9eRYsB1973jboyB8Mog2GYre3k 2/E2TW3TWvxHnyNuoFVV5IdURf+bnL4+QczMAZVcyvXw2+guGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpOhi5Qxx20eJ91KeDvwAqzj1eaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmE4NTY5YjctMmVlNi0z ZjgzLWE1OTQtNjhjNTcxYjBhNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrkV92OFLZZ2rOGn87fbIKcsi7DK/+jINGwLIl8Os6jx17kfc8Ii4fz 0wcebMUcL9oxiVKzFzkne/4Q8dGYezU3lM98kQc/V1fFaf1ybBlaU9m2YcTSKi97 GkDjhU5b99qp+RhPBPjLhFNzHw+fCVxOg9SW2NOhvJjYHBJ9n63qhI7sD/DRsOrk OP0cTjKk/zfLfweuMmqTCai9Dfoz79/822cl+QkpEERTibM6Vv6lkYpYiVYYRpOQ OD05zu94pyi1/nmo4+kvz0nbRemHRO1HkgIg/HkHEXdrDa1OGk1kw81Ee49JGI9X GMv4e2BIBmd7wusy4XasOpApUFnR8Go= -----END CERTIFICATE-----Generated at Sat Jun 13 21:23:44 2026 by rpki-client