$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa File: 1bea22db-543c-392b-894a-1a3fd5009750.roa (raw, json) Hash identifier: Fi8rAj0McVRvlfttc1VcsZN0EYGYN55dtWoU/T6c7xI= Subject key identifier: 6A:D9:10:D1:D4:0F:FF:0A:6B:AC:1C:DF:7E:8E:92:B4:04:2E:FB:D5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3B872E64392C2A8BA580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3b:87:2e:64:39:2c:2a:8b:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=23d63c43-69a9-4ed7-b9ef-8d5bda330882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fb:fa:e0:2b:e5:0a:20:8f:b5:df:3d:25:d9: 0a:89:c8:88:2c:20:af:a3:de:18:e6:91:67:83:ba: 93:13:a7:4d:40:05:85:a7:ac:e7:e5:eb:af:3d:78: 5a:84:db:8b:82:69:96:64:0b:69:cf:80:51:93:74: 19:7c:00:fd:f9:52:64:20:77:fb:f1:5b:98:53:ff: b2:d2:19:5f:24:be:b8:b5:3d:70:83:e8:e5:f0:0d: 46:c1:e7:64:fd:91:25:35:a6:57:4a:87:15:33:a4: 0c:be:ef:49:3b:22:5c:2a:58:86:d8:7f:d9:58:6a: 60:bf:2b:00:de:6c:c2:64:3d:e1:4f:f0:0a:e1:3a: 67:fd:69:ba:99:12:f3:4a:83:17:be:41:6c:70:77: 9f:24:94:ea:28:29:ef:b5:19:c7:d1:d0:88:ce:06: 57:a1:e6:f2:1b:a8:b6:b0:98:07:2a:25:51:5f:2a: 27:cc:78:27:40:2f:27:f7:a4:88:5c:c9:ed:ee:a0: f1:f3:af:c6:9b:d8:92:53:2a:8f:47:c6:aa:64:7a: 84:42:bd:51:9b:48:86:ff:2f:a5:a0:fc:ff:fb:25: d5:1f:fa:1a:9f:f4:a2:f9:e2:7e:c0:31:55:b1:13: 94:ae:6e:a0:ff:98:82:32:3e:35:e0:84:60:4d:1f: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D9:10:D1:D4:0F:FF:0A:6B:AC:1C:DF:7E:8E:92:B4:04:2E:FB:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1bea22db-543c-392b-894a-1a3fd5009750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1f:8a:06:7a:1b:9f:86:df:54:f9:7c:be:63:0f:87:57:90: 5d:ae:6c:8b:32:bf:63:23:9e:e7:04:41:f5:3c:c8:a0:30:d1: 9f:b3:77:78:85:67:63:e2:9a:7f:af:d8:d5:88:07:0a:82:d0: 1f:76:ee:07:e9:21:2f:2a:a6:fa:5a:ad:8b:04:4d:a7:4f:29: da:a9:d3:3d:b5:d5:e6:36:af:dd:a3:73:66:b6:45:0b:18:df: 7f:ad:44:15:42:69:4a:76:cf:d6:27:be:ca:b9:29:1e:d3:08: fe:c4:a0:f8:05:6f:da:92:24:41:54:0a:07:8b:e6:0d:49:03: 5c:63:b8:b2:c9:d2:19:1b:38:4f:ae:66:2d:29:8f:7b:a1:98: 57:b0:8f:76:88:49:d6:57:16:7e:4b:62:12:4e:fe:72:a0:c2: 35:9c:68:fe:b7:40:9f:5d:8f:1f:9d:83:ca:53:b5:1e:c6:9f: 4f:68:ba:3c:9e:cd:46:ed:44:2d:10:14:73:b6:a5:0c:51:5f: f8:5f:d6:7d:6f:b0:b7:b7:31:4f:19:1e:87:d9:91:ca:33:95: 03:9f:3d:b5:df:2b:5a:d1:d9:c3:cc:25:0b:4d:bc:5e:e4:11: 6c:42:3b:70:d0:d8:3a:7d:71:8d:b8:09:da:e1:2a:97:46:d4: 7e:83:ef:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejuHLmQ5LCqLpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjNkNjNjNDMtNjlhOS00ZWQ3LWI5ZWYtOGQ1YmRhMzMwODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/v64CvlCiCPtd89JdkKiciILCCvo94Y5pFn g7qTE6dNQAWFp6zn5euvPXhahNuLgmmWZAtpz4BRk3QZfAD9+VJkIHf78VuYU/+y 0hlfJL64tT1wg+jl8A1Gwedk/ZElNaZXSocVM6QMvu9JOyJcKliG2H/ZWGpgvysA 3mzCZD3hT/AK4Tpn/Wm6mRLzSoMXvkFscHefJJTqKCnvtRnH0dCIzgZXoebyG6i2 sJgHKiVRXyonzHgnQC8n96SIXMnt7qDx86/Gm9iSUyqPR8aqZHqEQr1Rm0iG/y+l oPz/+yXVH/oan/Si+eJ+wDFVsROUrm6g/5iCMj414IRgTR8DcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrZENHUD/8Ka6wc336OkrQELvvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWJlYTIyZGItNTQzYy0z OTJiLTg5NGEtMWEzZmQ1MDA5NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8figZ6G5+G31T5fL5jD4dXkF2ubIsyv2MjnucEQfU8yKAw0Z+zd3iF Z2Pimn+v2NWIBwqC0B927gfpIS8qpvparYsETadPKdqp0z211eY2r92jc2a2RQsY 33+tRBVCaUp2z9Ynvsq5KR7TCP7EoPgFb9qSJEFUCgeL5g1JA1xjuLLJ0hkbOE+u Zi0pj3uhmFewj3aISdZXFn5LYhJO/nKgwjWcaP63QJ9djx+dg8pTtR7Gn09oujye zUbtRC0QFHO2pQxRX/hf1n1vsLe3MU8ZHofZkcozlQOfPbXfK1rR2cPMJQtNvF7k EWxCO3DQ2Dp9cY24CdrhKpdG1H6D79s= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:29 2026 by rpki-client