$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa File: f97c1542-281c-386c-aa21-e33460f6654b.roa (raw, json) Hash identifier: QWHrPG0YddCFP7b6Z39WlmbExhBnAT0qElrDitRN5Bk= Subject key identifier: DC:F5:69:AC:B3:1D:19:36:60:FE:5C:09:CC:8F:57:D5:C1:C1:D4:06 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E04362D9281BA9FCAA0FB6780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:2d:92:81:ba:9f:ca:a0:fb:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=816e31a9-3598-4abf-9b16-48abe0362d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:dd:f1:a6:8a:4a:a2:4a:2c:d2:0e:e3:a6: 50:3d:73:1e:83:6a:62:4a:14:f1:97:17:62:ba:38: 36:60:81:48:5e:7f:f1:77:fe:d0:32:28:89:19:4a: 1e:2b:ec:86:89:b5:fb:47:8e:41:94:f3:71:c8:cc: b9:76:20:39:d0:1a:48:98:b2:bc:d8:92:e9:73:2d: de:b2:38:47:20:f7:1d:c0:c5:15:be:b0:9e:42:77: 0e:be:de:b4:b7:97:bc:e1:c6:89:ca:59:4c:a4:aa: a0:34:77:04:e1:af:b1:cf:0e:62:2e:03:d7:14:27: 07:97:2b:43:ff:23:f5:ac:b5:5f:e1:a6:a3:e3:d3: 9c:6f:31:a8:54:a7:46:02:89:84:53:b9:01:05:c4: ec:94:4d:d3:a1:e8:9f:e7:10:ed:ec:84:c9:c7:39: 55:67:f9:40:dc:ab:ee:12:13:02:f8:95:f1:7a:08: 3d:b7:87:1e:b8:97:c0:6e:67:d3:50:db:20:37:48: 69:b4:63:e1:d7:4e:2f:a2:35:4b:01:30:7d:e6:f6: f5:5b:1e:95:ab:db:52:61:46:45:e1:c0:ef:a6:b3: 7c:de:56:98:72:07:c5:66:c1:ed:cb:db:19:30:c9: b8:08:5f:a7:57:17:c9:20:51:57:5f:f8:56:d6:97: 59:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F5:69:AC:B3:1D:19:36:60:FE:5C:09:CC:8F:57:D5:C1:C1:D4:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f97c1542-281c-386c-aa21-e33460f6654b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:fa:40:9c:d2:9d:f7:f0:78:ef:12:7f:e6:54:24:b3:7e:1a: 96:f0:de:72:99:81:15:86:ed:cc:48:35:36:b8:37:df:9a:b1: 88:2e:47:2b:ed:42:70:96:0c:1b:36:9a:c6:17:81:ff:bc:99: 60:f9:c6:dc:42:6f:f9:23:4a:e0:71:6d:90:51:ac:bc:73:b3: d9:62:d3:e5:b3:73:76:7e:9c:ae:1c:d9:41:5e:13:14:5d:55: 6f:3c:df:31:31:f7:40:4a:e3:82:12:c7:da:f2:50:34:24:8e: fe:d6:12:01:31:a1:e8:01:f5:85:27:f0:f2:28:85:81:8a:61: 90:d0:b4:1b:9a:78:d7:b8:3f:ac:cf:d0:9f:c7:d5:de:42:3a: 64:95:aa:8d:58:3a:9f:73:53:ad:b3:9c:a7:a0:9c:0a:95:18: b4:e9:e7:23:17:dd:58:e9:bc:23:82:b9:05:df:6f:f6:d3:a6: 17:6b:8f:a9:d1:27:ea:aa:3c:fb:7f:b4:a3:dc:73:b3:e9:26: e8:4b:9d:83:ff:3e:6e:5e:47:98:9d:ec:17:db:b6:3f:42:8f: 00:2a:c4:40:d4:5c:40:da:72:64:35:c2:28:30:2e:69:78:c5: 70:c8:db:19:42:42:76:67:65:f0:00:0c:4f:7e:5d:3b:c2:b0: d8:f9:09:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENi2SgbqfyqD7Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ODE2ZTMxYTktMzU5OC00YWJmLTliMTYtNDhhYmUwMzYyZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigLd8aaKSqJKLNIO46ZQPXMeg2piShTxlxdi ujg2YIFIXn/xd/7QMiiJGUoeK+yGibX7R45BlPNxyMy5diA50BpImLK82JLpcy3e sjhHIPcdwMUVvrCeQncOvt60t5e84caJyllMpKqgNHcE4a+xzw5iLgPXFCcHlytD /yP1rLVf4aaj49OcbzGoVKdGAomEU7kBBcTslE3Toeif5xDt7ITJxzlVZ/lA3Kvu EhMC+JXxegg9t4ceuJfAbmfTUNsgN0hptGPh104vojVLATB95vb1Wx6Vq9tSYUZF 4cDvprN83laYcgfFZsHty9sZMMm4CF+nVxfJIFFXX/hW1pdZhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz1aayzHRk2YP5cCcyPV9XBwdQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjk3YzE1NDItMjgxYy0z ODZjLWFhMjEtZTMzNDYwZjY2NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALb6QJzSnffweO8Sf+ZUJLN+Gpbw3nKZgRWG7cxINTa4N9+asYguRyvt QnCWDBs2msYXgf+8mWD5xtxCb/kjSuBxbZBRrLxzs9li0+Wzc3Z+nK4c2UFeExRd VW883zEx90BK44ISx9ryUDQkjv7WEgExoegB9YUn8PIohYGKYZDQtBuaeNe4P6zP 0J/H1d5COmSVqo1YOp9zU62znKegnAqVGLTp5yMX3VjpvCOCuQXfb/bTphdrj6nR J+qqPPt/tKPcc7PpJuhLnYP/Pm5eR5id7Bfbtj9CjwAqxEDUXEDacmQ1wigwLml4 xXDI2xlCQnZnZfAADE9+XTvCsNj5Ce4= -----END CERTIFICATE-----Generated at Sat Jun 13 14:22:26 2026 by rpki-client