$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa File: ddc8d858-035c-3840-a15e-407ffbe6818e.roa (raw, json) Hash identifier: 13vTeRcWbTp1oKwu7qydVS5MIMrAzYtyq9XdD6iSwW4= Subject key identifier: B8:7F:76:0A:47:CE:9E:C7:98:69:41:DA:96:1F:6B:8C:76:05:C4:79 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0436210B6A94308BFE771AA0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:21:0b:6a:94:30:8b:fe:77:1a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=6c94065e-53ed-4121-a4f5-09e198c46b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:db:ca:25:b5:70:3f:36:1e:d6:05:d2:2c:7f: bf:c3:16:42:d9:65:2c:3b:b9:f4:c2:0b:4d:55:2b: 41:0d:ad:c4:8d:31:89:e2:97:2b:81:0e:f8:0a:e9: c4:45:5e:4e:63:4d:ea:44:2c:1b:d5:5d:8b:8c:ce: 6e:d1:ba:41:b6:44:20:31:4f:63:54:0f:fb:b8:0d: 10:bf:1b:34:3d:d8:e4:53:db:7d:5a:c9:8f:05:26: 51:2b:41:81:0d:41:da:a4:a8:15:61:04:17:96:4c: cd:e8:05:19:f2:fc:72:91:19:72:5e:67:cb:a3:30: b2:29:2f:e1:4a:af:79:96:98:57:0a:1d:94:c4:d7: 96:d4:f5:06:5e:57:32:fe:9c:0b:44:0e:bb:a9:6e: 38:eb:14:7f:ea:40:a5:67:f4:9f:b7:0e:b2:5d:9b: 91:1f:d2:09:31:d5:bb:1c:9e:05:62:d1:e1:40:5e: 58:18:21:df:33:7a:4f:58:f2:c8:44:ff:11:55:91: a3:a5:5e:c5:8d:fd:da:eb:e9:38:24:39:9b:65:f6: af:03:dd:4e:08:35:28:6c:a7:63:05:46:66:67:36: 5d:f5:a7:d0:b3:62:01:ea:a0:08:07:c1:40:50:02: f8:c8:fc:93:91:77:07:84:5b:51:01:6f:ac:c9:cf: fa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7F:76:0A:47:CE:9E:C7:98:69:41:DA:96:1F:6B:8C:76:05:C4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d0:48:90:d1:68:dc:15:ca:47:ce:98:83:b1:e4:8f:53:68: 01:5d:6a:a7:b5:72:c1:ac:42:1d:12:34:c7:c9:5e:ff:85:ab: 7f:38:82:51:ef:33:61:81:0b:b8:16:cc:38:ec:ef:a7:3e:02: ea:f6:f6:10:cd:d6:82:f5:c8:e4:a9:fd:b3:e4:53:64:b5:2d: c9:83:2d:72:32:7d:67:bb:10:d1:d3:b8:58:65:65:c4:a1:99: 54:d1:28:48:45:0c:01:90:6a:9d:67:18:5a:4c:98:8c:d3:27: 93:c2:5f:5c:21:31:50:6d:85:30:79:41:42:2e:cd:31:f3:b1: 48:17:d9:0c:c0:30:b2:da:49:d7:15:72:41:98:8e:0a:07:a6: 1d:28:bf:53:9d:28:36:28:78:d1:57:d3:88:df:c0:06:fd:1c: 72:0c:38:1f:37:41:b7:34:da:60:4b:c7:3f:ed:33:43:97:0f: 6e:a9:de:1b:56:e4:43:a0:b2:55:c9:c0:cf:44:88:d5:48:20: 5d:49:e4:58:62:43:b5:ff:85:6f:e2:31:27:95:3a:67:96:44: b8:f7:3f:80:e3:ee:30:4c:b7:fa:ab:3a:9d:54:c0:93:45:52: 39:50:87:a8:52:fb:ea:40:4a:76:0b:45:10:b5:56:08:81:5a: b5:a1:a8:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENiELapQwi/53GqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NmM5NDA2NWUtNTNlZC00MTIxLWE0ZjUtMDllMTk4YzQ2YjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9vKJbVwPzYe1gXSLH+/wxZC2WUsO7n0wgtN VStBDa3EjTGJ4pcrgQ74CunERV5OY03qRCwb1V2LjM5u0bpBtkQgMU9jVA/7uA0Q vxs0PdjkU9t9WsmPBSZRK0GBDUHapKgVYQQXlkzN6AUZ8vxykRlyXmfLozCyKS/h Sq95lphXCh2UxNeW1PUGXlcy/pwLRA67qW446xR/6kClZ/Sftw6yXZuRH9IJMdW7 HJ4FYtHhQF5YGCHfM3pPWPLIRP8RVZGjpV7Fjf3a6+k4JDmbZfavA91OCDUobKdj BUZmZzZd9afQs2IB6qAIB8FAUAL4yPyTkXcHhFtRAW+syc/6YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh/dgpHzp7HmGlB2pYfa4x2BcR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGRjOGQ4NTgtMDM1Yy0z ODQwLWExNWUtNDA3ZmZiZTY4MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3QSJDRaNwVykfOmIOx5I9TaAFdaqe1csGsQh0SNMfJXv+Fq384glHv M2GBC7gWzDjs76c+Aur29hDN1oL1yOSp/bPkU2S1LcmDLXIyfWe7ENHTuFhlZcSh mVTRKEhFDAGQap1nGFpMmIzTJ5PCX1whMVBthTB5QUIuzTHzsUgX2QzAMLLaSdcV ckGYjgoHph0ov1OdKDYoeNFX04jfwAb9HHIMOB83Qbc02mBLxz/tM0OXD26p3htW 5EOgslXJwM9EiNVIIF1J5FhiQ7X/hW/iMSeVOmeWRLj3P4Dj7jBMt/qrOp1UwJNF UjlQh6hS++pASnYLRRC1VgiBWrWhqFA= -----END CERTIFICATE-----Generated at Sat Jun 13 18:31:49 2026 by rpki-client