$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/012b129a-df50-391e-9681-b9936988d02e.roa File: 012b129a-df50-391e-9681-b9936988d02e.roa (raw, json) Hash identifier: GtpPaE1iaYuqGlWJQPDR6Cpm59GVVeB/hAuc1/Z7x0g= Subject key identifier: 2C:51:95:B9:83:93:4F:13:F5:E2:F3:32:C1:BA:A7:F9:09:C0:EA:FC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E04362FD34BE8C0273EE7EC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/012b129a-df50-391e-9681-b9936988d02e.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 207266 IP address blocks: 65.22.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:2f:d3:4b:e8:c0:27:3e:e7:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=91fe3d61-0e88-4e50-9b6e-c9ba770718ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:34:13:52:e2:db:6c:a4:5a:ff:e1:63:b4: 8c:b4:57:c1:a5:c2:b6:19:64:13:36:1d:bc:1c:36: e8:bb:2e:9d:87:4e:a6:75:88:b7:de:63:77:4b:67: fa:f6:f7:58:6e:ee:af:24:0e:a5:24:66:2f:80:97: 6e:3d:38:62:83:28:8c:19:90:ea:91:df:5e:db:72: ca:70:d0:70:9b:1a:c6:6c:d1:ab:8f:bb:af:52:82: b5:df:0d:87:eb:7d:60:08:91:54:11:f4:c0:3f:ba: 74:f4:f4:2f:91:d5:a0:4e:be:dc:d1:90:83:8a:a5: d6:e7:61:0a:bf:7d:99:3f:b5:38:3f:3e:03:1c:fd: 81:83:5a:db:e1:51:ac:b1:2f:35:7d:80:bb:e9:be: b5:2a:f0:22:84:74:e0:5f:7b:a9:ff:c4:97:93:3a: ad:97:d4:60:38:36:ee:be:b7:a9:99:8b:cf:25:d8: 0a:03:37:93:d2:79:6c:3c:bd:46:f9:03:72:f5:b3: cf:e0:d8:74:e0:e0:8a:f3:ec:c3:0d:03:85:49:0f: 08:37:ad:35:46:53:73:72:13:72:6e:32:a2:de:33: 71:8c:ab:ca:ec:3c:7c:b9:94:2c:ef:9e:fb:01:e5: 20:9d:22:c8:2b:d0:cc:c6:3b:7e:18:b9:1a:09:73: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:51:95:B9:83:93:4F:13:F5:E2:F3:32:C1:BA:A7:F9:09:C0:EA:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/012b129a-df50-391e-9681-b9936988d02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8d:ea:3b:53:15:03:8f:8e:ac:6e:16:35:26:03:8b:08:2a: e7:31:12:47:22:4b:3a:dc:d4:1d:84:5c:4f:b3:eb:91:6e:53: 1d:61:16:e0:b2:0a:24:2b:b4:78:fd:4f:6f:5f:06:9e:66:af: 84:8b:56:23:b4:09:5d:98:3c:4a:55:99:99:cc:d9:3a:c1:de: 39:7e:13:fe:90:37:5c:77:59:da:ed:3c:68:79:5f:c8:cf:ee: 23:70:a7:21:64:02:f1:7d:e3:08:e6:32:c8:7e:b0:ac:25:4e: 02:86:d6:d4:86:1a:52:06:1b:51:7c:0c:0c:83:7f:c4:2d:e2: 65:ee:74:e5:de:8c:ee:1a:25:99:f4:f7:5a:0c:62:0a:d7:04: 4e:7f:92:1a:94:36:2e:4d:9e:43:f1:07:b7:b8:24:84:e7:73: b5:97:b4:7f:02:fd:fc:f4:15:09:03:40:39:6b:d3:b0:12:54: 4d:8b:3a:96:5b:21:48:b2:d1:17:05:ea:db:c7:43:3f:6a:52: a9:fc:e4:89:d7:d4:85:a3:22:fc:47:a5:57:59:4c:05:5b:41: 1a:bf:1f:e6:cd:88:d3:e2:f2:53:a9:5d:62:39:36:dc:07:25: be:05:a9:07:19:d0:51:4c:99:c0:80:ed:a2:f6:e5:a2:54:66: 07:ee:a2:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENi/TS+jAJz7n7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk OTFmZTNkNjEtMGU4OC00ZTUwLTliNmUtYzliYTc3MDcxOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fM0E1Li22ykWv/hY7SMtFfBpcK2GWQTNh28 HDbouy6dh06mdYi33mN3S2f69vdYbu6vJA6lJGYvgJduPThigyiMGZDqkd9e23LK cNBwmxrGbNGrj7uvUoK13w2H631gCJFUEfTAP7p09PQvkdWgTr7c0ZCDiqXW52EK v32ZP7U4Pz4DHP2Bg1rb4VGssS81fYC76b61KvAihHTgX3up/8SXkzqtl9RgODbu vrepmYvPJdgKAzeT0nlsPL1G+QNy9bPP4Nh04OCK8+zDDQOFSQ8IN601RlNzchNy bjKi3jNxjKvK7Dx8uZQs7577AeUgnSLIK9DMxjt+GLkaCXMySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxRlbmDk08T9eLzMsG6p/kJwOr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDEyYjEyOWEtZGY1MC0z OTFlLTk2ODEtYjk5MzY5ODhkMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeN6jtTFQOPjqxuFjUmA4sIKucxEkciSzrc1B2EXE+z65FuUx1hFuCy CiQrtHj9T29fBp5mr4SLViO0CV2YPEpVmZnM2TrB3jl+E/6QN1x3WdrtPGh5X8jP 7iNwpyFkAvF94wjmMsh+sKwlTgKG1tSGGlIGG1F8DAyDf8Qt4mXudOXejO4aJZn0 91oMYgrXBE5/khqUNi5NnkPxB7e4JITnc7WXtH8C/fz0FQkDQDlr07ASVE2LOpZb IUiy0RcF6tvHQz9qUqn85InX1IWjIvxHpVdZTAVbQRq/H+bNiNPi8lOpXWI5NtwH Jb4FqQcZ0FFMmcCA7aL25aJUZgfuoqg= -----END CERTIFICATE-----Generated at Sat Jun 13 16:02:06 2026 by rpki-client