$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa File: 85637620-9689-35f2-8e85-75b58e890791.roa (raw, json) Hash identifier: BFNeMrgZ3BOr9qUqVrrRhc068BASsN72QR+MrJVUVkM= Subject key identifier: FA:D4:7F:C6:2F:57:13:ED:60:A5:C3:B0:0C:7F:5E:8F:ED:89:72:C8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E04361D2118CC263F1D4A6E80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:1d:21:18:cc:26:3f:1d:4a:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=f95f6876-179f-4c47-92f7-0fce9bdf37bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:57:62:4a:97:60:0a:1c:42:a4:02:8d:65: ca:aa:0a:a3:7c:35:de:f6:df:0c:50:18:44:d4:2c: 5b:fd:0e:0e:58:71:14:20:eb:40:1c:c3:3c:7f:82: 09:91:87:fc:0c:0d:df:32:9e:11:73:4b:b7:90:d9: 88:35:85:bd:d3:f4:10:b4:9e:48:2b:b8:85:e5:a6: 8b:b2:39:c7:6a:9d:82:3f:30:5b:0e:f2:04:56:93: 31:53:a1:ea:1f:f1:e8:c1:4c:3e:5d:3f:09:45:1a: db:be:d3:8a:da:d6:ed:d6:c7:60:03:2d:42:7c:32: b1:49:73:2e:87:f3:0f:5e:43:aa:5f:7e:73:f9:a7: f7:e4:01:80:5a:31:f0:88:dc:5f:1c:1c:eb:16:ad: 80:8a:92:1e:38:a3:ac:15:9e:67:46:48:f0:1c:0e: 78:2d:b3:92:22:86:4d:98:03:fd:7e:d9:07:9c:00: 03:66:59:69:18:8c:3e:bb:b9:0d:e2:5b:c8:d3:0b: c2:ec:9a:8e:f2:f8:55:66:de:89:e4:aa:20:06:9c: ae:c5:d5:10:60:92:a8:3e:bc:cb:c3:3d:18:16:53: 32:b3:ac:6b:78:d9:2a:c2:67:a6:a5:c0:bc:a7:04: 3c:75:f4:39:ed:18:24:22:79:a7:49:7e:5a:b2:4d: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D4:7F:C6:2F:57:13:ED:60:A5:C3:B0:0C:7F:5E:8F:ED:89:72:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f7:3f:8b:d5:47:b1:7f:2f:79:fe:af:7b:0b:95:f5:8d:5d: c5:69:97:9e:a9:31:b3:95:32:7d:2e:d2:d8:3a:1a:5a:d8:77: 94:81:ba:84:68:c1:05:51:f5:80:32:d6:3a:75:a3:26:db:3b: 36:4f:08:a9:3a:dc:c4:5a:f2:69:2c:ff:10:60:b7:96:e8:72: 2d:79:ba:e9:16:2e:2e:be:00:65:c3:1c:3b:ca:7f:a0:a5:cd: 21:6b:fa:0b:7c:ee:78:04:30:aa:5d:e4:07:fc:f6:ba:ba:08: 44:20:a1:bc:34:de:c6:61:c4:91:43:cf:2b:17:a8:59:3b:b2: d5:0a:98:12:5e:0b:ac:2c:6d:1a:90:73:48:6a:fd:79:3d:ac: 75:50:71:f4:b2:f5:50:52:4f:20:89:30:bd:2e:d7:15:ff:64: 1f:ae:39:71:16:1b:e7:57:07:aa:d7:26:1e:bb:35:19:75:5b: 1c:0c:f3:55:67:9c:0f:e0:02:4f:9b:20:a6:8a:aa:6d:e2:a7: 2f:0b:9b:e2:25:a6:f0:ef:d3:07:d7:f7:e9:6a:0b:a5:2c:22: 23:e8:38:07:0c:b3:fa:94:48:d2:a3:a0:7f:98:ca:48:24:fd: 83:d1:7e:72:96:c5:45:0e:4d:3e:e4:4a:0a:51:01:2b:ca:12: cd:05:7a:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENh0hGMwmPx1KboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk Zjk1ZjY4NzYtMTc5Zi00YzQ3LTkyZjctMGZjZTliZGYzN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr1XYkqXYAocQqQCjWXKqgqjfDXe9t8MUBhE 1Cxb/Q4OWHEUIOtAHMM8f4IJkYf8DA3fMp4Rc0u3kNmINYW90/QQtJ5IK7iF5aaL sjnHap2CPzBbDvIEVpMxU6HqH/HowUw+XT8JRRrbvtOK2tbt1sdgAy1CfDKxSXMu h/MPXkOqX35z+af35AGAWjHwiNxfHBzrFq2AipIeOKOsFZ5nRkjwHA54LbOSIoZN mAP9ftkHnAADZllpGIw+u7kN4lvI0wvC7JqO8vhVZt6J5KogBpyuxdUQYJKoPrzL wz0YFlMys6xreNkqwmempcC8pwQ8dfQ57RgkInmnSX5ask3ddwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrUf8YvVxPtYKXDsAx/Xo/tiXLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODU2Mzc2MjAtOTY4OS0z NWYyLThlODUtNzViNThlODkwNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv3P4vVR7F/L3n+r3sLlfWNXcVpl56pMbOVMn0u0tg6GlrYd5SBuoRo wQVR9YAy1jp1oybbOzZPCKk63MRa8mks/xBgt5boci15uukWLi6+AGXDHDvKf6Cl zSFr+gt87ngEMKpd5Af89rq6CEQgobw03sZhxJFDzysXqFk7stUKmBJeC6wsbRqQ c0hq/Xk9rHVQcfSy9VBSTyCJML0u1xX/ZB+uOXEWG+dXB6rXJh67NRl1WxwM81Vn nA/gAk+bIKaKqm3ipy8Lm+IlpvDv0wfX9+lqC6UsIiPoOAcMs/qUSNKjoH+Yykgk /YPRfnKWxUUOTT7kSgpRASvKEs0FeoY= -----END CERTIFICATE-----Generated at Sat Jun 13 18:33:41 2026 by rpki-client