$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2b561737-1a46-337b-962b-a00d1d1293b3.roa File: 2b561737-1a46-337b-962b-a00d1d1293b3.roa (raw, json) Hash identifier: zBy7uRpf71xlfEqn0+7qO5woHU+zngsOJ0j92yWzaGg= Subject key identifier: 57:65:78:2B:30:25:26:E0:E6:23:99:AA:CC:A5:0E:87:66:8A:D9:07 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E04362C4FECBF1B37EE0E8044 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2b561737-1a46-337b-962b-a00d1d1293b3.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:2c:4f:ec:bf:1b:37:ee:0e:80:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=97e615dc-2118-4988-a615-9e323e480994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:96:fb:44:f6:f5:5b:2d:43:93:22:7d:0c: 5d:c1:73:c1:12:91:99:83:f2:e8:a1:ba:f2:00:1f: 98:07:ef:c8:2d:3c:2a:82:b7:31:4e:a8:57:e6:c8: 9c:f4:dd:d9:7b:22:77:37:57:a7:d8:8a:84:1c:95: 59:3d:49:69:6f:0b:1e:46:35:a1:e3:ea:f0:c8:0b: da:87:3e:32:52:c6:af:c6:d1:87:52:64:b0:15:e6: 8f:96:5e:94:5f:01:68:5d:65:18:d3:e6:23:1a:a5: b4:c4:27:26:40:bb:34:35:a5:9c:95:ab:1a:a7:f5: ea:d2:db:fa:e4:42:da:b7:f4:70:31:19:c6:62:e7: 84:91:32:79:6b:58:e3:8f:00:97:c7:10:c6:29:53: c1:6c:49:88:20:22:5a:bd:76:bb:f6:f1:47:60:9e: a9:5a:5f:3e:8c:62:6e:a8:7a:c8:8d:80:0a:c4:4e: 97:c1:48:c1:b2:74:31:e5:6e:e8:3d:8c:1a:ce:41: b7:90:d1:56:89:9e:44:62:71:c7:fb:3e:ba:a8:55: b4:a7:f4:d0:bd:3b:9b:2e:ff:b1:f7:db:d1:76:ec: fd:fb:cf:58:8e:54:34:c9:8c:02:b3:8d:51:ec:f9: 4f:6e:0b:e5:fe:5a:b0:dd:26:5b:19:94:d2:16:40: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:65:78:2B:30:25:26:E0:E6:23:99:AA:CC:A5:0E:87:66:8A:D9:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2b561737-1a46-337b-962b-a00d1d1293b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0b:c1:d1:c4:a1:55:6b:97:26:bc:9c:72:4c:22:8a:57:79: 72:80:6a:0f:01:04:8b:81:2b:22:b6:83:46:80:17:f1:1a:5e: 4d:18:c6:ce:95:2e:77:04:2b:19:9d:4e:1c:82:08:90:d3:17: 66:e7:04:6a:26:87:de:92:4f:6f:8f:b0:3b:0b:61:b0:60:c3: bb:9b:3d:fe:dc:d3:39:be:e9:3b:e0:b2:4f:dc:c3:2e:00:e3: b1:da:b6:37:41:6c:1d:f3:01:0c:2f:9d:e4:22:f0:d3:30:6d: f1:a1:99:46:8d:ad:e1:cd:b5:85:b7:ea:91:5d:89:02:d9:17: 60:97:f2:5e:08:35:9b:44:93:ee:19:40:a7:31:ba:4a:96:a5: 1b:20:87:50:67:3b:53:68:19:b4:f6:7e:78:55:b4:f3:f9:9b: 80:49:8c:9a:03:9e:7c:bf:58:ae:11:e3:52:03:b8:fc:12:94: e8:60:4c:69:7b:7c:32:70:df:1e:b1:af:cf:23:b2:4a:ab:c8: 1a:12:41:28:39:35:d1:67:c0:39:f1:79:96:25:30:95:fe:5a: fc:91:dc:b1:7a:d1:fc:09:91:22:d9:ca:86:fd:28:2d:96:e3: bb:cd:d0:b1:8f:02:f4:97:b7:7a:74:c3:cd:a0:bf:42:a6:ae: 91:38:ee:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENixP7L8bN+4OgEQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk OTdlNjE1ZGMtMjExOC00OTg4LWE2MTUtOWUzMjNlNDgwOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC6W+0T29VstQ5MifQxdwXPBEpGZg/Loobry AB+YB+/ILTwqgrcxTqhX5sic9N3ZeyJ3N1en2IqEHJVZPUlpbwseRjWh4+rwyAva hz4yUsavxtGHUmSwFeaPll6UXwFoXWUY0+YjGqW0xCcmQLs0NaWclasap/Xq0tv6 5ELat/RwMRnGYueEkTJ5a1jjjwCXxxDGKVPBbEmIICJavXa79vFHYJ6pWl8+jGJu qHrIjYAKxE6XwUjBsnQx5W7oPYwazkG3kNFWiZ5EYnHH+z66qFW0p/TQvTubLv+x 99vRduz9+89YjlQ0yYwCs41R7PlPbgvl/lqw3SZbGZTSFkDmUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdleCswJSbg5iOZqsylDodmitkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmI1NjE3MzctMWE0Ni0z MzdiLTk2MmItYTAwZDFkMTI5M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRapMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0LwdHEoVVrlya8nHJMIopXeXKAag8BBIuBKyK2g0aAF/EaXk0Yxs6V LncEKxmdThyCCJDTF2bnBGomh96ST2+PsDsLYbBgw7ubPf7c0zm+6Tvgsk/cwy4A 47HatjdBbB3zAQwvneQi8NMwbfGhmUaNreHNtYW36pFdiQLZF2CX8l4INZtEk+4Z QKcxukqWpRsgh1BnO1NoGbT2fnhVtPP5m4BJjJoDnny/WK4R41IDuPwSlOhgTGl7 fDJw3x6xr88jskqryBoSQSg5NdFnwDnxeZYlMJX+WvyR3LF60fwJkSLZyob9KC2W 47vN0LGPAvSXt3p0w82gv0KmrpE47iY= -----END CERTIFICATE-----Generated at Sat Jun 13 14:22:25 2026 by rpki-client