$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6df1ece5-2e0a-3eaf-9062-7e22d5d33777.roa File: 6df1ece5-2e0a-3eaf-9062-7e22d5d33777.roa (raw, json) Hash identifier: nOOORE8VQyp3CNhD+4NgdF8psjYJmzl99BYehM/TqDk= Subject key identifier: 25:AC:3B:91:FA:3E:BA:F0:6D:73:6E:94:A6:B5:86:94:69:66:D8:92 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E043601253D8B5EDCE6393280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6df1ece5-2e0a-3eaf-9062-7e22d5d33777.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:01:25:3d:8b:5e:dc:e6:39:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=470fcb81-3495-4d0d-9fe1-b57dd34817bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:90:f5:a2:f4:63:f1:8f:da:7e:c0:2b:3e: 26:fa:04:44:b2:2c:16:37:7e:76:79:64:a0:b5:fd: 4f:1b:83:72:47:09:05:24:aa:e4:6c:15:ed:8b:56: 27:3a:3e:76:15:ce:05:2f:c6:82:4c:77:ed:10:33: 83:ec:25:47:da:f3:64:0a:52:e9:c1:27:6f:af:93: a5:a0:64:1a:6b:47:00:b2:bb:ba:71:0b:fd:5e:38: 77:79:db:00:ff:de:5b:64:54:d9:e7:7f:99:6d:c1: d6:9e:9c:7a:b5:ef:87:50:1a:e3:23:1b:21:85:5f: 5f:11:57:1d:48:a3:f3:06:98:71:76:fc:df:f9:e7: ae:5d:54:8a:02:6e:a4:64:03:51:25:3f:b6:96:a5: a6:a2:fb:ec:86:79:cb:41:4a:0b:0b:29:ea:17:49: 5d:9b:3d:d2:82:7e:74:1c:1d:bf:b2:c1:1d:9f:cd: 4e:98:8e:fe:9f:c9:d7:87:1a:32:bb:24:a5:b4:e9: 52:29:2a:6d:53:be:2f:ac:af:5a:2d:2b:6a:12:91: 8d:10:fa:c4:69:54:67:d2:c5:28:fa:d6:18:fb:47: a3:37:48:d1:6d:16:f2:eb:da:e6:e3:07:e2:36:8d: a1:72:7b:df:ba:03:f1:69:37:2b:54:f2:ea:bf:43: 49:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AC:3B:91:FA:3E:BA:F0:6D:73:6E:94:A6:B5:86:94:69:66:D8:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6df1ece5-2e0a-3eaf-9062-7e22d5d33777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:80:bc:e9:c7:2d:61:0f:3b:b1:dc:0b:3f:97:58:57:7b:61: db:23:98:df:4d:8e:e3:65:34:c1:ae:89:fb:93:ad:2a:79:a5: 7e:6c:38:af:a2:21:36:13:3f:68:46:11:e4:23:78:0b:b3:99: cb:c4:4b:4c:b1:d4:85:2e:76:50:74:bb:56:7e:3b:7e:a1:ac: 09:ea:b3:dc:a8:e8:da:67:dd:91:3a:2d:20:d4:9c:3c:dd:3f: 96:cb:62:83:e7:66:41:ca:e5:38:16:2e:1d:21:a5:ed:c3:2a: 94:72:3c:71:80:e1:46:40:3c:25:03:32:58:e8:ab:d0:d9:28: 2d:53:f7:46:1e:f1:6d:bc:f2:ef:66:1c:26:4d:2e:6c:e9:19: 5f:26:ac:19:f8:68:35:9c:24:77:01:ba:b9:32:13:29:e7:af: 16:06:3e:01:5e:49:74:d7:15:91:70:a9:69:ce:bb:82:1a:ca: 24:a5:39:d9:ab:4f:69:37:f3:11:40:e0:14:f8:97:ed:c0:0a: 12:30:ae:0b:8a:52:b4:5a:f0:26:2e:f0:05:33:71:3f:6e:0d: 47:28:8b:e8:c5:5f:bc:34:5b:14:a6:4b:04:b4:6a:81:ae:b0: fe:ed:41:9e:cc:3e:dd:fb:e4:61:3f:a1:51:0f:25:f4:11:2e: 9c:c6:f8:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENgElPYte3OY5MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NDcwZmNiODEtMzQ5NS00ZDBkLTlmZTEtYjU3ZGQzNDgxN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos2Q9aL0Y/GP2n7AKz4m+gREsiwWN352eWSg tf1PG4NyRwkFJKrkbBXti1YnOj52Fc4FL8aCTHftEDOD7CVH2vNkClLpwSdvr5Ol oGQaa0cAsru6cQv9Xjh3edsA/95bZFTZ53+ZbcHWnpx6te+HUBrjIxshhV9fEVcd SKPzBphxdvzf+eeuXVSKAm6kZANRJT+2lqWmovvshnnLQUoLCynqF0ldmz3Sgn50 HB2/ssEdn81OmI7+n8nXhxoyuySltOlSKSptU74vrK9aLStqEpGNEPrEaVRn0sUo +tYY+0ejN0jRbRby69rm4wfiNo2hcnvfugPxaTcrVPLqv0NJowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWsO5H6PrrwbXNulKa1hpRpZtiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmRmMWVjZTUtMmUwYS0z ZWFmLTkwNjItN2UyMmQ1ZDMzNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuAvOnHLWEPO7HcCz+XWFd7YdsjmN9NjuNlNMGuifuTrSp5pX5sOK+i ITYTP2hGEeQjeAuzmcvES0yx1IUudlB0u1Z+O36hrAnqs9yo6Npn3ZE6LSDUnDzd P5bLYoPnZkHK5TgWLh0hpe3DKpRyPHGA4UZAPCUDMljoq9DZKC1T90Ye8W288u9m HCZNLmzpGV8mrBn4aDWcJHcBurkyEynnrxYGPgFeSXTXFZFwqWnOu4IayiSlOdmr T2k38xFA4BT4l+3AChIwrguKUrRa8CYu8AUzcT9uDUcoi+jFX7w0WxSmSwS0aoGu sP7tQZ7MPt375GE/oVEPJfQRLpzG+K0= -----END CERTIFICATE-----Generated at Sat Jun 13 17:07:09 2026 by rpki-client