$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/18f5c9dd-745e-3941-870e-7eac0b6e0574.roa File: 18f5c9dd-745e-3941-870e-7eac0b6e0574.roa (raw, json) Hash identifier: 678wyz6sodjUxSDOKZN0IhH+B0uk1bZnjnB3Tqtg1iw= Subject key identifier: 99:26:3F:3F:FE:0A:8C:9A:49:D6:20:E3:9E:B5:66:F7:78:EE:61:5B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A70D94B6A0CF886CA7800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/18f5c9dd-745e-3941-870e-7eac0b6e0574.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 65.22.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:70:d9:4b:6a:0c:f8:86:ca:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=0b2ddebc-46ac-4445-935c-7ef635ef737e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:74:d8:ea:26:44:05:cf:31:68:41:cd:e0:3b: f7:01:9e:08:9f:3a:63:96:6a:88:7b:81:ba:b8:e5: 9b:3b:0a:5d:25:f1:b1:4b:57:bd:73:e6:0a:21:c4: ff:5f:09:c4:0d:56:a6:2e:c5:7c:51:6f:37:ce:37: c8:4d:16:14:d1:38:e9:8c:f5:5f:e7:8d:e2:c8:e2: 7d:29:28:6a:3c:8c:fb:45:a2:f9:5e:5d:b0:77:27: 55:a1:19:05:cd:30:09:dd:47:28:ae:c4:74:57:cd: 7f:1c:ae:e2:9f:47:63:0f:36:9b:bf:82:ce:93:42: e8:ce:8e:87:b0:da:42:a3:ba:99:2e:a0:b5:62:6c: 41:2c:48:13:cd:65:6e:5f:17:e4:1e:c9:0b:60:f9: bd:86:0d:76:f8:53:7e:d2:46:25:11:a1:28:1c:37: b3:f5:e4:7d:00:8c:4a:1b:f4:ec:a6:d0:eb:9d:75: ed:54:f6:49:0a:04:7d:db:00:af:30:f2:f9:1e:ca: 40:c0:b1:8d:16:36:f6:67:17:61:06:bd:02:d3:d4: f9:19:d2:05:5c:ee:2f:c5:bb:3f:57:3d:8f:47:5c: de:13:09:b2:07:3f:13:af:d3:a5:30:47:37:d2:4f: ab:62:dc:96:b9:5d:e6:25:b5:c5:50:f4:cc:49:d0: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:26:3F:3F:FE:0A:8C:9A:49:D6:20:E3:9E:B5:66:F7:78:EE:61:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/18f5c9dd-745e-3941-870e-7eac0b6e0574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:7a:56:be:08:b1:66:71:d2:d3:5c:74:4c:ea:11:40:f6:5c: ae:79:a0:ae:52:a9:78:49:c0:e2:c6:fe:a9:46:38:94:ba:de: 62:ea:8f:86:97:14:60:de:68:87:27:f4:d6:66:fa:7a:c8:e7: 2e:4d:66:dd:bc:9f:28:cc:93:d1:21:c6:d5:10:02:c7:78:4a: 6a:77:08:1e:c1:62:10:b9:68:b6:e2:a1:61:29:df:3d:97:01: 5c:2a:8b:4a:66:83:95:41:ca:ef:5f:37:b1:51:85:f8:ff:55: 13:30:67:fd:25:67:2a:8e:52:c9:ae:d1:41:ac:4f:39:92:08: d0:f8:b0:dd:07:1e:0e:4e:0e:95:4c:1d:46:35:b7:ce:53:35: 9e:c3:91:ac:e0:93:c7:d2:f5:36:f9:8e:7d:91:a9:fe:0d:7b: 08:3c:ab:fa:cf:c1:1d:29:33:ed:7d:b1:a6:0e:b4:e1:c5:fb: 83:bc:ae:f3:8a:f5:8a:d7:7a:26:a0:de:18:a9:65:49:a5:aa: ba:59:c8:7e:8c:43:24:ba:80:04:90:61:c9:21:df:b4:6a:4b: 2d:03:6f:e2:c4:38:d6:5e:f8:6e:61:33:49:96:40:7c:9f:d0: 9b:cf:f7:10:71:7c:af:98:1d:0e:1e:d7:57:86:04:c3:f2:f0: 5a:c6:67:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jenDZS2oM+IbKeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MGIyZGRlYmMtNDZhYy00NDQ1LTkzNWMtN2VmNjM1ZWY3MzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXTY6iZEBc8xaEHN4Dv3AZ4InzpjlmqIe4G6 uOWbOwpdJfGxS1e9c+YKIcT/XwnEDVamLsV8UW83zjfITRYU0TjpjPVf543iyOJ9 KShqPIz7RaL5Xl2wdydVoRkFzTAJ3UcorsR0V81/HK7in0djDzabv4LOk0Lozo6H sNpCo7qZLqC1YmxBLEgTzWVuXxfkHskLYPm9hg12+FN+0kYlEaEoHDez9eR9AIxK G/TsptDrnXXtVPZJCgR92wCvMPL5HspAwLGNFjb2ZxdhBr0C09T5GdIFXO4vxbs/ Vz2PR1zeEwmyBz8Tr9OlMEc30k+rYtyWuV3mJbXFUPTMSdDUMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkmPz/+CoyaSdYg4561Zvd47mFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMThmNWM5ZGQtNzQ1ZS0z OTQxLTg3MGUtN2VhYzBiNmUwNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALB6Vr4IsWZx0tNcdEzqEUD2XK55oK5SqXhJwOLG/qlGOJS63mLqj4aX FGDeaIcn9NZm+nrI5y5NZt28nyjMk9EhxtUQAsd4Smp3CB7BYhC5aLbioWEp3z2X AVwqi0pmg5VByu9fN7FRhfj/VRMwZ/0lZyqOUsmu0UGsTzmSCND4sN0HHg5ODpVM HUY1t85TNZ7Dkazgk8fS9Tb5jn2Rqf4Newg8q/rPwR0pM+19saYOtOHF+4O8rvOK 9YrXeiag3hipZUmlqrpZyH6MQyS6gASQYckh37RqSy0Db+LEONZe+G5hM0mWQHyf 0JvP9xBxfK+YHQ4e11eGBMPy8FrGZ6I= -----END CERTIFICATE-----Generated at Thu Mar 26 13:22:32 2026 by rpki-client