$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa File: d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa (raw, json) Hash identifier: h/Kx46JsrmEXHQ7WBHGJKpUaIkIGT6Zqj7KelAkseeA= Subject key identifier: 47:41:5C:76:50:22:90:3E:3D:FB:C1:92:13:BA:D0:9E:18:47:12:B4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435F7445116B3CCFB6D5A40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:f7:44:51:16:b3:cc:fb:6d:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=7efbaa23-c1d6-4c0a-8c8a-b612f8975cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:19:e0:2d:cb:54:6b:69:52:04:18:f2:24: 32:02:14:b0:dd:0b:cb:16:99:6d:77:1f:61:c0:72: 97:df:9e:7c:74:42:4c:8e:a5:20:55:24:67:90:bd: 3b:83:91:4f:22:6d:7a:75:b8:c6:14:62:cc:d0:26: ae:17:c8:f5:05:1a:6f:4a:c5:81:e9:86:de:38:cb: e6:bf:ec:8e:04:54:2d:a2:24:9b:03:b6:61:a2:70: 16:62:a3:89:ed:05:14:78:77:09:14:5f:e2:ea:e6: 3f:57:0a:f7:3a:df:ac:ba:ce:79:9d:87:2d:0f:b4: af:02:30:02:f9:44:48:68:19:5d:2e:b6:2c:6b:cd: 35:06:d1:5c:8f:a8:51:e6:37:7a:52:a7:d9:0d:d9: 80:0d:27:02:68:cb:0c:3d:38:ad:71:85:94:e8:3a: 58:b3:ba:0f:f8:04:22:72:5c:fd:6b:11:94:4d:59: a9:91:21:23:4f:b8:78:d3:13:a7:0c:eb:99:88:3c: f6:b3:4b:b4:4a:10:ea:69:11:02:30:43:2a:61:ee: 56:06:11:7b:90:98:8c:45:12:62:f0:20:9e:d9:22: 16:30:44:68:1f:14:43:f8:15:83:df:5c:18:45:ed: dd:8b:9b:18:67:73:e0:56:46:2f:1c:3e:b1:af:f5: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:41:5C:76:50:22:90:3E:3D:FB:C1:92:13:BA:D0:9E:18:47:12:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d776fa0a-8f11-32f5-a6f5-6639c19f084a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4e:9f:e8:10:1b:f1:c2:0f:f5:0f:6b:24:27:77:b7:01:69: c7:8b:cb:23:4a:c7:36:81:c5:75:8f:88:51:31:48:13:82:8c: 6e:c6:ba:53:52:a9:94:24:a6:20:52:55:0d:e9:bb:3f:63:b4: 94:25:0f:93:66:fe:8e:8c:38:21:5e:ae:58:4b:2d:cf:5b:f4: 8e:12:c5:88:4b:a6:57:54:f9:b7:30:2d:a2:6f:c4:6d:4f:e6: c9:5a:93:39:bd:44:68:09:10:a6:e6:db:e9:74:b4:d9:8a:53: ed:dc:5c:4e:4b:2a:e2:fa:49:dd:30:2a:5e:18:7d:f4:41:a7: 91:eb:44:6d:e7:7e:27:5d:5a:fc:fb:d3:44:e1:4a:cd:0f:52: c7:5c:89:27:f1:04:43:27:23:6e:14:ae:8c:c5:08:0d:1a:c6: 3b:54:f5:aa:0e:90:a8:6b:65:a6:fc:bb:62:51:10:d2:33:bf: ac:ef:ee:f6:3c:e2:85:ac:6c:97:73:a0:23:91:b0:1c:fa:3e: aa:80:76:d6:45:83:d6:b3:0e:f4:59:9f:b3:d4:07:c0:e2:0c: c9:e3:b4:c6:a9:fd:04:14:76:56:8d:09:6d:35:66:ca:67:b0: e3:aa:66:d8:9f:1a:8e:4d:08:0c:b1:69:95:96:87:69:11:d7: 33:8e:f3:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENfdEURazzPttWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk N2VmYmFhMjMtYzFkNi00YzBhLThjOGEtYjYxMmY4OTc1Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCYZ4C3LVGtpUgQY8iQyAhSw3QvLFpltdx9h wHKX3558dEJMjqUgVSRnkL07g5FPIm16dbjGFGLM0CauF8j1BRpvSsWB6YbeOMvm v+yOBFQtoiSbA7ZhonAWYqOJ7QUUeHcJFF/i6uY/Vwr3Ot+sus55nYctD7SvAjAC +URIaBldLrYsa801BtFcj6hR5jd6UqfZDdmADScCaMsMPTitcYWU6DpYs7oP+AQi clz9axGUTVmpkSEjT7h40xOnDOuZiDz2s0u0ShDqaRECMEMqYe5WBhF7kJiMRRJi 8CCe2SIWMERoHxRD+BWD31wYRe3di5sYZ3PgVkYvHD6xr/Vk9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdBXHZQIpA+PfvBkhO60J4YRxK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDc3NmZhMGEtOGYxMS0z MmY1LWE2ZjUtNjYzOWMxOWYwODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtOn+gQG/HCD/UPayQnd7cBaceLyyNKxzaBxXWPiFExSBOCjG7GulNS qZQkpiBSVQ3puz9jtJQlD5Nm/o6MOCFerlhLLc9b9I4SxYhLpldU+bcwLaJvxG1P 5slakzm9RGgJEKbm2+l0tNmKU+3cXE5LKuL6Sd0wKl4YffRBp5HrRG3nfiddWvz7 00ThSs0PUsdciSfxBEMnI24UrozFCA0axjtU9aoOkKhrZab8u2JRENIzv6zv7vY8 4oWsbJdzoCORsBz6PqqAdtZFg9azDvRZn7PUB8DiDMnjtMap/QQUdlaNCW01Zspn sOOqZtifGo5NCAyxaZWWh2kR1zOO88Y= -----END CERTIFICATE-----Generated at Sat Jun 13 14:21:04 2026 by rpki-client