$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/568ac0ff-6926-33db-8182-74e126530140.roa File: 568ac0ff-6926-33db-8182-74e126530140.roa (raw, json) Hash identifier: atIMSpLCUZbRHb0zxMCki+tCHZVJjVJvssIIQfw8a7E= Subject key identifier: 67:38:54:70:20:80:BA:05:59:F8:FB:D0:8B:D3:E2:FA:D7:B9:BD:69 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0436170745A95A60B0902D60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/568ac0ff-6926-33db-8182-74e126530140.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:17:07:45:a9:5a:60:b0:90:2d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=01e66de1-27cc-4f0f-a60f-f1c6fb33c3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:c2:90:53:99:33:f7:92:eb:ff:a0:27:fc: e4:f3:5f:77:23:d8:51:2b:4f:62:2b:f4:e2:39:78: 19:21:8d:85:d8:00:2a:31:02:44:18:ee:5c:65:90: bc:5c:02:49:c6:39:e4:00:d7:d3:6e:bd:d5:3b:2d: 27:ea:de:2e:b1:cb:27:67:07:bd:e2:14:f6:0e:0a: cf:bc:44:5b:c3:05:19:a1:59:c1:4f:54:4c:d1:06: 4f:41:7f:31:da:63:e0:71:b3:7e:6b:d3:3c:eb:9f: f9:19:52:41:32:a5:da:de:22:3c:5d:06:f1:93:46: 34:72:8c:0f:83:bb:5d:75:b0:a0:69:c4:de:d9:54: 7f:41:f4:4f:72:d6:7c:0f:73:86:79:91:3e:be:d5: 00:2b:90:a9:b8:f0:22:07:16:5f:ba:2a:b5:13:3e: 49:97:ae:30:45:e9:da:8f:e9:88:6b:d6:a0:df:34: 3c:aa:1c:f2:79:36:6d:7b:e8:ef:c3:23:1a:1a:ee: 5e:99:98:c3:82:15:0c:cd:af:8a:7d:9d:bf:a6:3b: f9:19:0b:b9:ee:bc:97:78:64:d7:dc:f8:a3:86:49: 32:73:96:47:64:b7:ef:b7:24:da:34:ac:41:93:1d: cb:91:c0:9b:4e:33:9d:f7:ce:27:92:f4:88:e6:f5: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:54:70:20:80:BA:05:59:F8:FB:D0:8B:D3:E2:FA:D7:B9:BD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/568ac0ff-6926-33db-8182-74e126530140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:54:f1:e0:e8:f9:2f:5f:f3:46:a2:58:14:df:c8:d1:85:14: 27:10:cf:54:c7:72:61:c7:07:c9:57:62:eb:77:f1:75:a9:6b: d9:7e:af:23:a0:2d:43:cf:16:10:62:d9:e9:d3:71:a1:67:db: 0e:c4:a2:1d:2d:b4:51:27:f5:96:fa:b3:52:78:6c:c4:3e:f9: f1:0f:b7:ab:01:55:41:fa:88:38:a9:c4:2b:98:e9:de:34:be: a3:6a:19:b9:7d:43:3b:48:f5:14:ef:71:9a:64:ca:9b:f0:d0: 8a:ae:5f:d2:9a:e6:00:7e:99:78:fa:9d:5b:0d:04:a4:14:f9: e3:8f:8c:d4:ca:e6:87:a5:ab:aa:18:8b:83:a4:ad:51:25:ad: ce:0b:74:d5:89:13:9f:df:56:0e:fb:0c:1b:0f:ae:83:ed:de: 93:99:39:39:70:f4:1d:3a:94:aa:3c:95:02:49:85:fc:e1:26: 80:f9:bd:36:a6:94:96:31:01:08:c1:b2:05:70:38:8b:8d:78: 6f:21:bb:02:59:a5:59:cd:82:2f:65:38:c2:7c:a5:dd:15:4d: 0f:14:98:53:40:30:e8:f6:db:ba:d4:9d:fe:f3:a7:ba:9e:45: e9:d7:b0:e3:05:a1:a6:d7:4f:79:de:90:c0:c3:22:cd:63:26: 11:ad:00:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENhcHRalaYLCQLWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MDFlNjZkZTEtMjdjYy00ZjBmLWE2MGYtZjFjNmZiMzNjM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY3CkFOZM/eS6/+gJ/zk8193I9hRK09iK/Ti OXgZIY2F2AAqMQJEGO5cZZC8XAJJxjnkANfTbr3VOy0n6t4uscsnZwe94hT2DgrP vERbwwUZoVnBT1RM0QZPQX8x2mPgcbN+a9M865/5GVJBMqXa3iI8XQbxk0Y0cowP g7tddbCgacTe2VR/QfRPctZ8D3OGeZE+vtUAK5CpuPAiBxZfuiq1Ez5Jl64wRena j+mIa9ag3zQ8qhzyeTZte+jvwyMaGu5emZjDghUMza+KfZ2/pjv5GQu57ryXeGTX 3Pijhkkyc5ZHZLfvtyTaNKxBkx3LkcCbTjOd984nkvSI5vVPHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc4VHAggLoFWfj70IvT4vrXub1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTY4YWMwZmYtNjkyNi0z M2RiLTgxODItNzRlMTI2NTMwMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItU8eDo+S9f80aiWBTfyNGFFCcQz1THcmHHB8lXYut38XWpa9l+ryOg LUPPFhBi2enTcaFn2w7Eoh0ttFEn9Zb6s1J4bMQ++fEPt6sBVUH6iDipxCuY6d40 vqNqGbl9QztI9RTvcZpkypvw0IquX9Ka5gB+mXj6nVsNBKQU+eOPjNTK5oelq6oY i4OkrVElrc4LdNWJE5/fVg77DBsProPt3pOZOTlw9B06lKo8lQJJhfzhJoD5vTam lJYxAQjBsgVwOIuNeG8huwJZpVnNgi9lOMJ8pd0VTQ8UmFNAMOj227rUnf7zp7qe RenXsOMFoabXT3nekMDDIs1jJhGtAOU= -----END CERTIFICATE-----Generated at Sat Jun 13 18:35:39 2026 by rpki-client