$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa File: 4376d315-6a36-3312-aa90-2c446e1e3899.roa (raw, json) Hash identifier: VOMFNu5eF32GbomZVXvdbZeZUVafTO3u1NTFSI9ONrE= Subject key identifier: 6C:19:29:E0:D2:CB:CE:9B:02:11:85:E6:AC:66:02:CF:B4:38:75:EC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435E9A1BE32498B23AF2980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 207266 IP address blocks: 65.22.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:e9:a1:be:32:49:8b:23:af:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=3223b95c-32b7-4331-b297-cb7cec4cca7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:f9:42:3a:09:8d:4d:5b:77:cc:2b:9e:08: 8b:11:11:98:31:71:f1:65:89:1f:aa:19:22:5d:2d: ce:0f:e1:4d:c8:dd:0f:57:d9:4a:d4:57:79:88:cd: f9:44:c7:f2:28:1b:6d:0e:4f:c8:1b:f8:5d:a9:e0: 14:a8:dc:94:cf:e2:2c:8c:1a:43:f0:d5:9a:62:26: 32:c2:24:34:3c:3b:1d:91:88:21:a7:17:4a:02:06: 60:9e:49:df:78:6b:31:25:37:88:b5:56:ac:d1:99: c6:60:59:f8:87:92:74:7d:0c:33:c7:a8:81:ce:36: be:bf:cc:fd:7f:89:a9:b0:dc:7d:d9:c6:a5:87:41: c0:63:57:51:1c:23:ed:13:ba:dc:7b:af:58:6f:c6: 90:41:98:51:0b:c6:b2:e2:f2:20:28:a4:95:35:ed: c0:4c:d4:20:29:20:24:4b:4c:a6:ae:fa:64:69:c1: 52:77:2a:f4:7d:56:9d:92:6e:79:67:e3:ad:f9:42: 56:bf:58:8d:05:bd:44:c6:b7:49:c7:0c:d4:0c:93: ad:7c:9c:af:5e:37:57:f8:d8:2d:8f:f7:97:6b:0e: 0f:b6:d1:e2:c0:8a:cb:28:34:ee:9d:ed:d6:68:bd: 82:62:c4:f5:de:71:e0:4f:8d:05:65:55:4d:ea:a1: 23:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:19:29:E0:D2:CB:CE:9B:02:11:85:E6:AC:66:02:CF:B4:38:75:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:16:f7:57:3f:13:01:47:0f:95:7b:b5:08:7c:ee:dd:dc:34: 92:c2:d9:ea:9e:be:ad:7d:a9:00:47:9b:06:81:3b:a6:fb:4f: c1:4c:6f:59:53:ab:93:90:c6:90:f2:66:61:b1:9a:03:d2:fd: b3:5a:84:dc:9c:32:a5:82:94:9e:68:73:91:ff:c8:8c:4d:5f: 97:5f:76:c2:72:b2:bf:7e:96:f3:bd:27:e5:63:1e:d3:4c:5b: 0b:b3:61:03:4a:4f:aa:fe:7b:d5:ce:c0:1e:c9:02:4f:c6:e3: f6:81:06:9d:3a:d5:71:5c:24:75:86:b4:78:26:51:f4:fb:2a: 27:a0:3a:e9:8e:f1:f2:21:92:6c:af:59:01:81:51:bd:22:d0: 4c:74:00:aa:fd:5d:8f:f2:b4:f6:b9:be:d7:35:c7:62:da:1e: 50:ac:02:89:d8:a0:c5:d4:7c:89:3b:78:e5:2e:a4:b2:df:0b: 72:f4:c8:ec:46:dd:d0:cf:6b:f0:9a:b7:b1:69:7c:1d:cd:d3: 5e:c2:3a:f3:d8:5e:72:bf:d2:a5:5d:1f:f4:12:dd:e8:47:3e: 6e:71:e8:ab:d6:3c:53:f0:3c:57:6f:81:18:a5:e7:44:97:43: f6:81:ef:6e:72:cd:0d:66:79:ac:74:66:fa:aa:8e:7f:b3:e6: 1e:68:28:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENemhvjJJiyOvKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MzIyM2I5NWMtMzJiNy00MzMxLWIyOTctY2I3Y2VjNGNjYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoT5QjoJjU1bd8wrngiLERGYMXHxZYkfqhki XS3OD+FNyN0PV9lK1Fd5iM35RMfyKBttDk/IG/hdqeAUqNyUz+IsjBpD8NWaYiYy wiQ0PDsdkYghpxdKAgZgnknfeGsxJTeItVas0ZnGYFn4h5J0fQwzx6iBzja+v8z9 f4mpsNx92calh0HAY1dRHCPtE7rce69Yb8aQQZhRC8ay4vIgKKSVNe3ATNQgKSAk S0ymrvpkacFSdyr0fVadkm55Z+Ot+UJWv1iNBb1ExrdJxwzUDJOtfJyvXjdX+Ngt j/eXaw4PttHiwIrLKDTune3WaL2CYsT13nHgT40FZVVN6qEjXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwZKeDSy86bAhGF5qxmAs+0OHXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDM3NmQzMTUtNmEzNi0z MzEyLWFhOTAtMmM0NDZlMWUzODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAW91c/EwFHD5V7tQh87t3cNJLC2eqevq19qQBHmwaBO6b7T8FMb1lT q5OQxpDyZmGxmgPS/bNahNycMqWClJ5oc5H/yIxNX5dfdsJysr9+lvO9J+VjHtNM WwuzYQNKT6r+e9XOwB7JAk/G4/aBBp061XFcJHWGtHgmUfT7KiegOumO8fIhkmyv WQGBUb0i0Ex0AKr9XY/ytPa5vtc1x2LaHlCsAonYoMXUfIk7eOUupLLfC3L0yOxG 3dDPa/Cat7FpfB3N017COvPYXnK/0qVdH/QS3ehHPm5x6KvWPFPwPFdvgRil50SX Q/aB725yzQ1meax0Zvqqjn+z5h5oKP0= -----END CERTIFICATE-----Generated at Sat Jun 13 14:26:06 2026 by rpki-client