$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa File: 3cb5c865-56bc-36bb-9781-6328ac6934e4.roa (raw, json) Hash identifier: wrf0gNZFCYlaSjEvRUvrAEg0byRWxUUgGrhEdAgbcUk= Subject key identifier: 6C:C4:0B:F1:83:41:E4:CC:1C:72:FA:E3:2C:16:3F:A7:2A:C6:62:BD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435E67A8AAAFFE222AA3340 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:e6:7a:8a:aa:ff:e2:22:aa:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=59b78909-cb81-48b7-acb7-07baf35ababd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:e4:c7:c9:10:55:c9:da:06:23:fb:9b:51: 98:5f:d0:de:d6:69:3f:9b:e4:d7:70:15:1e:22:c7: e7:9d:2a:b6:24:3d:15:7c:72:8f:9c:25:d3:22:48: 20:e2:11:8a:47:64:c8:1f:07:6f:42:cb:8c:9f:a8: 06:7a:65:b1:75:e8:5c:88:44:42:19:ca:77:f6:0a: 66:d5:2a:6c:db:64:34:e4:d4:6d:bb:cf:7f:b5:75: db:31:ef:b1:6d:91:f8:ef:31:9a:57:b0:b7:2d:79: f3:07:68:bf:b3:5e:e5:b3:bf:e1:01:0a:fb:01:41: dd:74:e0:08:46:e8:97:f6:fc:0c:17:8a:4c:14:39: 49:ae:40:1e:ad:7d:10:33:aa:1a:ff:9b:88:78:e6: 4d:05:1e:e3:c5:96:9f:16:a9:51:7e:28:7a:9e:fb: 08:04:e2:0b:1f:f1:64:a6:e6:0d:87:b0:50:81:9e: e5:a7:63:72:0f:2d:79:02:20:7a:61:cf:cf:47:c1: 3c:92:15:08:a7:32:b9:63:c1:cc:03:ef:f5:a0:ce: 36:92:86:24:dd:2e:2c:98:66:da:a9:40:53:34:55: ee:ba:89:95:e8:5b:08:66:05:96:3b:27:62:f0:d4: 7f:95:3b:06:1b:19:56:03:9d:c1:e0:97:bd:5c:48: 25:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C4:0B:F1:83:41:E4:CC:1C:72:FA:E3:2C:16:3F:A7:2A:C6:62:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:48:a1:94:98:76:76:17:2e:7d:e7:b5:f6:e4:63:1a:51:63: ef:3f:62:d8:a0:8b:17:d4:89:70:d6:4b:80:c4:59:67:8d:4f: 07:c4:8c:6e:e4:9e:a3:50:f3:26:56:3c:06:8c:13:0f:8d:a0: e2:c7:54:48:de:54:1f:45:2e:da:72:27:f0:37:6f:fe:d0:94: 20:a2:a5:67:e2:de:78:2b:08:3b:fe:fb:2d:8e:7d:42:79:02: 8f:bd:e1:2a:45:b7:1d:a5:77:66:65:82:e6:8d:4a:c0:ac:30: e7:13:91:68:f9:4a:f0:35:aa:1e:75:3e:ff:4e:68:1e:94:70: df:90:41:5e:b6:13:a5:0b:bb:2f:6b:65:ff:7b:6a:0d:81:e4: 9f:91:9c:9f:28:88:e6:5f:7e:9b:91:3a:7d:b6:14:ed:ea:08: d7:6a:18:61:1e:88:ac:6b:58:71:53:3a:d1:d6:92:4f:33:74: a7:99:38:8f:ad:41:8f:ca:05:bf:15:92:8e:0e:58:1a:39:07: 34:be:3a:0d:32:08:4d:83:bb:9b:1b:fd:8c:79:1c:20:3a:1d: bf:ec:5f:46:3a:f0:74:c8:74:22:0e:49:d8:f5:c2:23:cc:71: 9f:ba:ff:51:2a:1c:77:b5:be:fc:07:d5:b0:5d:73:f7:1f:63: 66:f5:ff:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENeZ6iqr/4iKqM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NTliNzg5MDktY2I4MS00OGI3LWFjYjctMDdiYWYzNWFiYWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvbkx8kQVcnaBiP7m1GYX9De1mk/m+TXcBUe IsfnnSq2JD0VfHKPnCXTIkgg4hGKR2TIHwdvQsuMn6gGemWxdehciERCGcp39gpm 1Sps22Q05NRtu89/tXXbMe+xbZH47zGaV7C3LXnzB2i/s17ls7/hAQr7AUHddOAI RuiX9vwMF4pMFDlJrkAerX0QM6oa/5uIeOZNBR7jxZafFqlRfih6nvsIBOILH/Fk puYNh7BQgZ7lp2NyDy15AiB6Yc/PR8E8khUIpzK5Y8HMA+/1oM42koYk3S4smGba qUBTNFXuuomV6FsIZgWWOydi8NR/lTsGGxlWA53B4Je9XEglJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzEC/GDQeTMHHL64ywWP6cqxmK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NiNWM4NjUtNTZiYy0z NmJiLTk3ODEtNjMyOGFjNjkzNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9IoZSYdnYXLn3ntfbkYxpRY+8/YtigixfUiXDWS4DEWWeNTwfEjG7k nqNQ8yZWPAaMEw+NoOLHVEjeVB9FLtpyJ/A3b/7QlCCipWfi3ngrCDv++y2OfUJ5 Ao+94SpFtx2ld2ZlguaNSsCsMOcTkWj5SvA1qh51Pv9OaB6UcN+QQV62E6ULuy9r Zf97ag2B5J+RnJ8oiOZffpuROn22FO3qCNdqGGEeiKxrWHFTOtHWkk8zdKeZOI+t QY/KBb8Vko4OWBo5BzS+Og0yCE2Du5sb/Yx5HCA6Hb/sX0Y68HTIdCIOSdj1wiPM cZ+6/1EqHHe1vvwH1bBdc/cfY2b1/zw= -----END CERTIFICATE-----Generated at Sat Jun 13 14:23:37 2026 by rpki-client