$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/567d56cc-6714-3e9f-aaf0-bab208fa0453.roa File: 567d56cc-6714-3e9f-aaf0-bab208fa0453.roa (raw, json) Hash identifier: OdGveHMMXmoogkiBod3QyNQ5cG28XYTEOnGG5bgDVCw= Subject key identifier: D2:B4:47:97:9C:2D:A8:81:37:38:40:52:ED:7E:28:E0:7E:7C:D5:0B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A461AF031CB6E1BA8D948 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/567d56cc-6714-3e9f-aaf0-bab208fa0453.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:46:1a:f0:31:cb:6e:1b:a8:d9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=df8f9be2-d184-4eb5-aba2-0a4dd4022ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:f0:1b:48:3e:23:94:83:e8:46:ad:90:2d: 43:62:c0:fc:2c:07:1f:81:1c:de:e3:87:f2:08:b5: ac:aa:6e:86:15:b0:5e:25:b1:58:5c:53:5c:2a:4b: d9:83:b1:1b:0f:7d:4c:77:fd:0c:4e:e0:8d:44:1a: 11:46:39:42:b0:03:25:c9:0a:44:e8:48:8f:35:34: 2c:bf:d9:b9:35:55:e1:11:c0:5e:19:13:38:0c:d8: 7f:81:bb:df:82:21:ea:49:d1:4c:4e:c4:e9:2e:3e: 3e:a9:bd:7a:69:6d:c0:47:17:d3:c9:99:34:14:eb: 5c:1d:ee:a5:18:b6:50:13:db:a6:85:06:bc:2b:75: c7:0f:35:03:0e:5f:b2:3a:36:60:f2:8b:bd:4e:18: 91:b9:1a:04:12:19:7c:41:7c:5c:e6:3e:64:7d:71: e0:56:05:21:0a:29:00:ba:f2:65:83:3e:07:2b:07: d4:fe:60:9b:5e:fa:b0:44:78:c8:c9:25:54:45:c5: 1d:a6:9b:e2:00:ed:65:7c:74:46:0e:f8:70:64:49: fe:ae:55:01:0a:2c:ce:b2:0c:8f:72:11:fa:d9:f0: 97:be:f7:df:d6:c1:19:a9:d9:92:c5:27:4c:4e:40: d0:2a:da:cf:01:5d:45:b0:08:9e:73:e6:93:7d:91: fc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B4:47:97:9C:2D:A8:81:37:38:40:52:ED:7E:28:E0:7E:7C:D5:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/567d56cc-6714-3e9f-aaf0-bab208fa0453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:45:77:0d:cc:07:f8:10:bc:54:6f:22:19:00:34:d2:fe:35: 6b:44:aa:dd:15:72:77:6a:87:8a:ca:59:de:5c:84:9a:ff:7d: 4f:b8:e0:7d:46:ff:4f:04:94:03:8e:e9:7c:7d:3d:89:bf:69: 0c:05:40:c0:3a:a7:d1:6f:72:37:77:12:a6:65:7a:94:c1:1b: d2:bc:e9:7a:d4:4a:4c:06:01:9c:86:e0:74:c6:42:4a:4f:ef: 2a:40:5f:26:6c:6c:0a:b5:7d:9b:47:13:59:cf:df:7a:66:79: 72:28:fe:ea:b4:f2:8e:7f:10:b1:f5:34:4a:e4:67:f1:1e:99: 16:64:03:f3:45:e1:36:d5:0c:8d:93:ea:49:f6:f7:50:8c:0f: 15:f8:5d:28:c0:11:d9:87:b6:6a:13:fd:f1:d5:36:48:e9:7d: 30:39:78:09:c8:a7:b6:f4:de:ed:93:9f:81:6e:be:e3:2f:09: bd:fc:ff:51:35:07:f0:2a:e8:ef:d9:8f:3d:69:bd:6f:c6:ac: 65:34:c0:89:8d:c9:fe:c5:f4:c3:4e:e3:82:9d:fa:b6:62:bc: a3:a2:2d:b8:11:a1:86:8c:9c:21:4a:54:fb:4f:97:16:2d:77: 45:c9:b3:12:76:44:28:d2:51:f4:97:e4:b0:fc:d7:38:12:91: 93:60:d6:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekYa8DHLbhuo2UgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZGY4ZjliZTItZDE4NC00ZWI1LWFiYTItMGE0ZGQ0MDIyYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zXwG0g+I5SD6EatkC1DYsD8LAcfgRze44fy CLWsqm6GFbBeJbFYXFNcKkvZg7EbD31Md/0MTuCNRBoRRjlCsAMlyQpE6EiPNTQs v9m5NVXhEcBeGRM4DNh/gbvfgiHqSdFMTsTpLj4+qb16aW3ARxfTyZk0FOtcHe6l GLZQE9umhQa8K3XHDzUDDl+yOjZg8ou9ThiRuRoEEhl8QXxc5j5kfXHgVgUhCikA uvJlgz4HKwfU/mCbXvqwRHjIySVURcUdppviAO1lfHRGDvhwZEn+rlUBCizOsgyP chH62fCXvvff1sEZqdmSxSdMTkDQKtrPAV1FsAiec+aTfZH8XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK0R5ecLaiBNzhAUu1+KOB+fNULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTY3ZDU2Y2MtNjcxNC0z ZTlmLWFhZjAtYmFiMjA4ZmEwNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANFdw3MB/gQvFRvIhkANNL+NWtEqt0Vcndqh4rKWd5chJr/fU+44H1G /08ElAOO6Xx9PYm/aQwFQMA6p9Fvcjd3EqZlepTBG9K86XrUSkwGAZyG4HTGQkpP 7ypAXyZsbAq1fZtHE1nP33pmeXIo/uq08o5/ELH1NErkZ/EemRZkA/NF4TbVDI2T 6kn291CMDxX4XSjAEdmHtmoT/fHVNkjpfTA5eAnIp7b03u2Tn4FuvuMvCb38/1E1 B/Aq6O/Zjz1pvW/GrGU0wImNyf7F9MNO44Kd+rZivKOiLbgRoYaMnCFKVPtPlxYt d0XJsxJ2RCjSUfSX5LD81zgSkZNg1lw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:22 2026 by rpki-client