$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa File: 9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa (raw, json) Hash identifier: dS4bJi6wrfWbWKVvYYV38EP9IkjnWm9l36Y7uL0KbPs= Subject key identifier: 38:FD:6D:71:36:C2:EA:E0:EA:88:5C:14:2C:FE:81:34:23:24:66:75 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435FB208AAB35A7358BF69A Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:fb:20:8a:ab:35:a7:35:8b:f6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=1d398cd7-ca77-4603-98ff-ab36991a34fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:fa:47:79:45:e6:46:99:4b:7e:b9:74:56: 90:ae:2c:7c:e1:9b:95:81:83:f5:f8:a2:3e:91:33: e6:f1:a0:1e:af:7d:97:ec:ab:f4:4c:c0:49:ef:83: bc:51:4e:85:e1:0c:ee:4c:a2:77:17:8c:d1:a8:bc: 53:93:72:a9:c7:c6:0f:17:a0:b4:ae:ce:92:7d:68: 50:4c:47:58:0f:35:0a:f5:b1:3d:dd:91:1c:d9:bf: 1a:06:fc:6f:1e:5c:46:59:34:f3:bd:90:6a:7f:45: fa:0a:96:01:c1:3e:3d:89:92:70:0e:9b:b5:7d:6b: 5a:91:07:3b:df:ac:8f:b1:84:8c:df:98:e5:4e:d4: 23:58:b3:56:e7:04:8c:61:8e:b4:46:39:1f:df:5e: 4f:2b:1d:16:f5:f6:c1:65:76:fa:ff:18:9f:48:e5: cc:68:ce:a1:06:d1:7d:bd:ef:bf:0e:13:e3:2a:1a: 86:83:72:14:fe:0d:fd:dd:e7:a4:f0:dc:f7:5d:80: c1:1a:ef:b5:6e:50:93:6e:7e:41:50:50:ce:74:f2: 70:c0:03:fb:d9:11:1b:c8:2d:22:98:78:0e:fa:be: d4:31:3f:7b:ac:f4:af:d5:74:a3:e5:ab:d2:e9:a4: 4d:e1:ea:ca:34:02:21:bd:bf:8e:be:68:8b:f5:11: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FD:6D:71:36:C2:EA:E0:EA:88:5C:14:2C:FE:81:34:23:24:66:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b1:46:ba:0e:9b:a9:55:a3:7a:e1:c2:12:b8:d0:3f:2e:53: dd:88:a1:54:ec:28:65:24:70:93:71:4b:8f:6c:ef:c7:bf:83: dc:cc:59:f9:ec:3d:b7:3b:e9:7e:99:39:84:c0:b9:73:be:62: 44:46:0a:cd:f2:9a:e6:5a:48:17:a7:3c:bc:b6:e6:c5:44:56: e7:83:0d:f9:84:41:be:36:3c:15:b5:e5:41:cf:8e:9f:92:cd: 97:81:6a:06:46:f0:69:2b:3d:74:a3:a2:99:83:6f:b9:b5:b1: 0e:44:5d:6f:c3:78:4c:00:c0:ae:d9:2c:99:cd:3e:46:87:bf: be:72:6f:53:9c:b5:55:a5:a4:c7:9e:30:5f:25:74:16:d3:1a: d4:ab:4c:68:e7:2d:bd:96:d6:9a:46:c4:12:b0:e0:02:07:75: 05:ed:9c:e5:78:51:56:09:30:92:9a:2c:b9:cb:2b:6d:f3:1c: 27:6a:8c:71:44:1a:67:06:f2:14:37:a8:3c:9a:48:d0:9e:56: 41:67:fd:54:1b:08:f6:48:91:ea:7b:7d:ce:2c:48:6e:6e:be: 55:fd:eb:53:68:0b:66:8b:41:51:47:7a:c2:84:cf:64:ab:66: 3a:69:56:c6:71:9b:5c:1f:4b:17:1d:8f:1b:29:65:be:aa:89: 10:71:d4:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENfsgiqs1pzWL9powDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MWQzOThjZDctY2E3Ny00NjAzLTk4ZmYtYWIzNjk5MWEzNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJj6R3lF5kaZS365dFaQrix84ZuVgYP1+KI+ kTPm8aAer32X7Kv0TMBJ74O8UU6F4QzuTKJ3F4zRqLxTk3Kpx8YPF6C0rs6SfWhQ TEdYDzUK9bE93ZEc2b8aBvxvHlxGWTTzvZBqf0X6CpYBwT49iZJwDpu1fWtakQc7 36yPsYSM35jlTtQjWLNW5wSMYY60Rjkf315PKx0W9fbBZXb6/xifSOXMaM6hBtF9 ve+/DhPjKhqGg3IU/g393eek8Nz3XYDBGu+1blCTbn5BUFDOdPJwwAP72REbyC0i mHgO+r7UMT97rPSv1XSj5avS6aRN4erKNAIhvb+OvmiL9RFu+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDj9bXE2wurg6ohcFCz+gTQjJGZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWYzYmM4ZTItNTZhMy0z MTg3LWIzZmMtOTE1OTI1MmNkYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuxRroOm6lVo3rhwhK40D8uU92IoVTsKGUkcJNxS49s78e/g9zMWfns Pbc76X6ZOYTAuXO+YkRGCs3ymuZaSBenPLy25sVEVueDDfmEQb42PBW15UHPjp+S zZeBagZG8GkrPXSjopmDb7m1sQ5EXW/DeEwAwK7ZLJnNPkaHv75yb1OctVWlpMee MF8ldBbTGtSrTGjnLb2W1ppGxBKw4AIHdQXtnOV4UVYJMJKaLLnLK23zHCdqjHFE GmcG8hQ3qDyaSNCeVkFn/VQbCPZIkep7fc4sSG5uvlX961NoC2aLQVFHesKEz2Sr ZjppVsZxm1wfSxcdjxspZb6qiRBx1JA= -----END CERTIFICATE-----Generated at Sat Jun 13 17:07:09 2026 by rpki-client