$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa File: 1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa (raw, json) Hash identifier: kkRRQYgSzpIZ6wSKpDZP3LWYUMRx3jwyBYjD/yygzOc= Subject key identifier: 94:8C:FA:DF:BD:9C:BF:F5:83:1F:5A:1A:32:84:15:08:41:A1:21:B6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A2C09AD18C4C0AF2C8F20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2c:09:ad:18:c4:c0:af:2c:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=cf64a416-b8ae-413e-9f6b-92bf12a769fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7c:f8:3a:71:93:74:2f:83:92:28:80:a6:4a: b0:e3:ac:b6:ae:e9:3d:74:d7:96:81:32:c1:31:a5: 80:c9:e8:4a:df:6e:4d:3c:e6:73:0e:d5:e7:9a:e3: 01:d3:39:18:4e:b2:a2:20:e6:02:26:0d:69:ed:fd: f7:6d:2c:13:e9:67:5b:d2:5a:82:f4:36:bb:59:2f: dc:d8:02:24:cc:9b:f6:96:0a:5d:3b:0b:1a:4a:e4: 4a:4f:b2:1e:9f:5f:14:01:c3:1c:a6:ee:79:a3:2d: 82:dc:b5:df:85:33:92:b3:c1:bc:5f:ab:23:81:8f: f6:8f:8d:d9:b9:c4:33:77:ff:5b:e3:fa:e2:00:e6: 57:2a:af:5f:c8:53:b3:e2:fd:3f:56:d1:2c:61:f5: fe:cb:7a:dd:f5:f4:1d:99:37:0d:5d:36:1d:ca:28: d0:bf:5a:1e:6c:2c:71:a0:45:44:76:fa:70:24:6e: 0d:b3:49:b5:c1:26:91:1c:1b:23:e6:41:44:ab:58: 9d:fa:d4:d8:81:9b:b7:40:77:6c:6d:25:d6:53:05: 6a:4c:59:ed:a0:fe:07:79:7f:f2:68:5f:46:56:7f: 60:fb:f5:ad:f3:70:a8:4c:6c:97:7a:84:fa:3a:8a: 14:f3:50:a3:66:ae:50:d5:7a:b5:b1:45:9a:d8:a1: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8C:FA:DF:BD:9C:BF:F5:83:1F:5A:1A:32:84:15:08:41:A1:21:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ab1e88a-0f14-3ecb-806e-6084de6ba51f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:00:cf:ee:e5:09:22:e5:77:b3:77:a9:2c:ac:2d:73:39:31: ac:d7:ad:22:44:69:d6:50:db:c5:23:d3:13:5e:52:14:5e:04: 6e:b7:b0:73:e2:b5:df:16:49:45:5f:73:3d:40:a6:0d:c4:e4: 22:37:09:e4:18:50:b3:89:dc:a9:63:be:e6:b1:b7:e0:d4:89: 5c:85:ba:38:39:48:bf:af:08:ee:c3:93:31:73:75:08:f2:20: 91:b8:99:f9:78:00:ce:35:f8:0c:5d:1e:c0:5f:74:a4:d5:7b: ed:0b:b4:bc:0c:79:9d:1a:35:eb:9b:1a:50:aa:a6:aa:98:e4: f4:a3:a7:c6:28:3d:5f:eb:6d:fc:43:8b:3a:52:7e:d7:1c:1a: 2a:ab:ac:37:85:67:19:93:bb:c6:fd:a8:b8:3b:bb:3d:0e:62: 53:ec:20:ce:3b:a4:c1:bf:8c:ff:49:ad:5a:06:6a:57:1f:f1: b0:d6:fa:fd:76:88:4c:a2:05:7e:bc:f2:50:7e:7f:e9:b6:88: 88:3d:a0:39:d9:af:55:90:9a:a0:e8:12:8a:dc:08:d2:3d:ec: 3e:e5:38:78:fb:cd:c5:36:ac:23:67:e1:bf:ee:c7:26:65:a7: b9:5c:4f:8f:ce:5d:a9:88:6a:90:75:3f:f5:2a:68:a3:50:5b: 0d:d3:b5:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiwJrRjEwK8sjyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Y2Y2NGE0MTYtYjhhZS00MTNlLTlmNmItOTJiZjEyYTc2OWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHz4OnGTdC+DkiiApkqw46y2ruk9dNeWgTLB MaWAyehK325NPOZzDtXnmuMB0zkYTrKiIOYCJg1p7f33bSwT6Wdb0lqC9Da7WS/c 2AIkzJv2lgpdOwsaSuRKT7Ien18UAcMcpu55oy2C3LXfhTOSs8G8X6sjgY/2j43Z ucQzd/9b4/riAOZXKq9fyFOz4v0/VtEsYfX+y3rd9fQdmTcNXTYdyijQv1oebCxx oEVEdvpwJG4Ns0m1wSaRHBsj5kFEq1id+tTYgZu3QHdsbSXWUwVqTFntoP4HeX/y aF9GVn9g+/Wt83CoTGyXeoT6OooU81CjZq5Q1Xq1sUWa2KG+SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSM+t+9nL/1gx9aGjKEFQhBoSG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWFiMWU4OGEtMGYxNC0z ZWNiLTgwNmUtNjA4NGRlNmJhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4Az+7lCSLld7N3qSysLXM5MazXrSJEadZQ28Uj0xNeUhReBG63sHPi td8WSUVfcz1Apg3E5CI3CeQYULOJ3Kljvuaxt+DUiVyFujg5SL+vCO7DkzFzdQjy IJG4mfl4AM41+AxdHsBfdKTVe+0LtLwMeZ0aNeubGlCqpqqY5PSjp8YoPV/rbfxD izpSftccGiqrrDeFZxmTu8b9qLg7uz0OYlPsIM47pMG/jP9JrVoGalcf8bDW+v12 iEyiBX688lB+f+m2iIg9oDnZr1WQmqDoEorcCNI97D7lOHj7zcU2rCNn4b/uxyZl p7lcT4/OXamIapB1P/UqaKNQWw3TtcM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:22 2026 by rpki-client