$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/068e7496-b82c-3ab2-b30b-a615dbe11ddb.roa File: 068e7496-b82c-3ab2-b30b-a615dbe11ddb.roa (raw, json) Hash identifier: NdXcOJoSP5dwTP//2HC/l9Z5McOf3Lq33U5O1MKb77w= Subject key identifier: 25:1A:3F:3F:BD:E7:D9:0A:DB:06:E9:97:5C:04:54:1A:8A:2C:02:46 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E043630DD721B047F3C8F3CC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/068e7496-b82c-3ab2-b30b-a615dbe11ddb.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:30:dd:72:1b:04:7f:3c:8f:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=ba5aa558-d7e3-4266-85f6-a59d262f7946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:0a:5e:57:19:9d:09:89:a9:ae:45:27:72: f5:aa:0c:26:2c:7f:7c:f3:9c:c7:0d:4e:16:88:b5: 3b:40:f0:af:29:ce:fb:ad:44:a7:f6:ea:0d:5a:60: 3f:96:0d:15:ca:82:bd:57:e5:2e:e5:db:90:9d:a7: 39:56:bb:12:05:f6:b3:48:d4:71:df:03:9b:58:4a: 76:99:22:a6:22:78:b3:e5:a8:12:e7:3f:0f:cb:a1: 3b:40:a3:40:90:2d:3c:49:11:1c:af:53:23:72:12: 46:ee:74:1a:44:13:e6:26:d1:b7:3e:1f:6d:48:ff: fc:98:af:2f:7b:cd:58:6f:7b:00:2d:fc:87:d1:ac: 40:b3:b7:6c:ef:12:bc:bd:f2:4f:ed:61:9b:ff:ee: 4c:5a:88:db:60:67:b4:d6:ae:dd:02:5b:e1:e5:29: 50:d4:73:f3:09:b0:29:b2:69:c7:be:d4:da:76:a7: c8:d8:85:98:32:4d:a6:58:d4:c5:e7:dd:8c:4c:d4: 8f:f0:4a:3c:95:91:61:7e:a4:1a:ca:78:33:f5:e3: 70:8a:f6:e8:99:7a:fa:42:4e:86:58:3e:3c:6b:d9: cb:d0:07:64:34:d7:06:30:cd:62:e2:50:86:b0:6b: 4e:f7:25:08:74:97:fd:cd:77:62:67:e9:ae:bf:39: 8e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1A:3F:3F:BD:E7:D9:0A:DB:06:E9:97:5C:04:54:1A:8A:2C:02:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/068e7496-b82c-3ab2-b30b-a615dbe11ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b1:24:c2:3e:d7:f9:69:a1:7e:7e:52:0f:0f:05:e7:37:5a: 2b:b1:4d:8a:0e:64:b4:d3:62:07:e8:00:a6:6a:20:c4:02:9d: 56:35:65:c3:55:cc:fd:25:32:26:24:a8:56:a3:ae:cb:82:ce: a8:20:c7:48:99:f7:e0:26:56:f0:63:a0:e7:c2:6d:dd:64:fd: 90:44:9a:09:05:de:8a:ea:fa:e3:fa:0b:68:54:7f:2a:7f:c0: 60:8e:bb:c4:03:0d:df:c5:43:af:05:f5:9c:95:3b:99:37:37: 39:7a:5e:a9:5a:03:18:52:84:87:f1:26:9a:cf:40:fb:3b:fb: b9:c2:47:41:00:34:5c:03:1b:66:25:b5:78:1e:61:5d:78:26: ca:0f:97:7f:30:04:a8:0e:11:b0:3c:e8:95:c7:d2:62:a0:12: e9:49:f0:57:97:b3:01:39:13:16:3b:b1:7e:44:b6:2f:11:d3: 46:75:e8:91:63:00:e6:37:88:18:6f:5d:bb:62:37:48:4a:18: e5:07:14:ad:a5:99:26:7b:a0:22:62:88:a2:69:50:1e:6f:91: 43:a2:7a:80:6b:b8:be:9f:dd:17:d1:f2:b5:1c:d9:e4:7a:97: 11:22:f8:78:da:79:9b:7a:be:ad:9a:33:94:4e:f3:c1:bd:71: 16:50:ce:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENjDdchsEfzyPPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YmE1YWE1NTgtZDdlMy00MjY2LTg1ZjYtYTU5ZDI2MmY3OTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8kKXlcZnQmJqa5FJ3L1qgwmLH9885zHDU4W iLU7QPCvKc77rUSn9uoNWmA/lg0VyoK9V+Uu5duQnac5VrsSBfazSNRx3wObWEp2 mSKmIniz5agS5z8Py6E7QKNAkC08SREcr1MjchJG7nQaRBPmJtG3Ph9tSP/8mK8v e81Yb3sALfyH0axAs7ds7xK8vfJP7WGb/+5MWojbYGe01q7dAlvh5SlQ1HPzCbAp smnHvtTadqfI2IWYMk2mWNTF592MTNSP8Eo8lZFhfqQayngz9eNwivbomXr6Qk6G WD48a9nL0AdkNNcGMM1i4lCGsGtO9yUIdJf9zXdiZ+muvzmOWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUaPz+959kK2wbpl1wEVBqKLAJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDY4ZTc0OTYtYjgyYy0z YWIyLWIzMGItYTYxNWRiZTExZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESxJMI+1/lpoX5+Ug8PBec3WiuxTYoOZLTTYgfoAKZqIMQCnVY1ZcNV zP0lMiYkqFajrsuCzqggx0iZ9+AmVvBjoOfCbd1k/ZBEmgkF3orq+uP6C2hUfyp/ wGCOu8QDDd/FQ68F9ZyVO5k3Nzl6XqlaAxhShIfxJprPQPs7+7nCR0EANFwDG2Yl tXgeYV14JsoPl38wBKgOEbA86JXH0mKgEulJ8FeXswE5ExY7sX5Eti8R00Z16JFj AOY3iBhvXbtiN0hKGOUHFK2lmSZ7oCJiiKJpUB5vkUOieoBruL6f3RfR8rUc2eR6 lxEi+HjaeZt6vq2aM5RO88G9cRZQzlk= -----END CERTIFICATE-----Generated at Sat Jun 13 18:33:06 2026 by rpki-client