$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/22ec627c-aa84-3540-acff-80f50e93a6a0.roa File: 22ec627c-aa84-3540-acff-80f50e93a6a0.roa (raw, json) Hash identifier: jT02pdrvgoxD8D+sHFAsSbSQaP5dtX6Z9MUGPFbN8wA= Subject key identifier: CD:8B:39:1F:0D:AF:CC:45:60:5B:E4:D6:20:7E:04:9A:E4:6F:4C:23 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A7261C5D0246511A87E00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/22ec627c-aa84-3540-acff-80f50e93a6a0.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 65.22.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:72:61:c5:d0:24:65:11:a8:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ac9698f4-83f7-48ec-8fac-5eea7d125d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:de:f7:1c:8d:81:44:93:c1:e8:5b:cd:4d:85: 4d:8d:c5:8c:ad:55:0a:7f:30:2c:80:99:cc:c8:99: 99:7e:01:69:aa:36:be:97:0d:ed:47:ca:f1:88:e9: 43:fa:7f:51:ec:4e:2b:8c:81:bb:69:ae:63:30:b3: 02:18:56:ef:ba:c3:36:18:c6:72:fe:d9:11:9a:43: 01:cf:18:d7:2c:1e:ff:95:95:a7:52:5e:44:92:75: 45:98:c1:55:f6:74:4b:7e:c6:c5:16:f1:8b:bc:ce: 96:19:24:17:ff:88:30:c7:7f:ac:0f:8e:1d:ae:c4: 0e:9b:dc:c4:24:3b:15:27:06:af:7a:7a:1e:d7:f4: 41:e3:f0:33:7c:d1:bd:65:df:13:46:dd:90:ea:e3: e6:3d:49:b1:3a:96:4a:3f:16:31:27:44:a9:4d:ec: df:99:5c:ed:c3:8d:99:2f:53:26:80:57:7f:98:75: a4:87:a0:e4:96:36:79:90:62:56:1b:f3:62:fd:12: 53:da:47:41:ad:bb:59:64:ab:f7:80:76:eb:46:7a: e0:52:43:37:e0:94:a7:c4:b4:d8:c4:3d:85:e8:17: b4:45:26:3e:ba:f5:61:65:84:79:fc:10:5d:9d:50: c7:73:da:6d:17:d1:c6:93:c5:ad:eb:b7:98:55:94: 7a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8B:39:1F:0D:AF:CC:45:60:5B:E4:D6:20:7E:04:9A:E4:6F:4C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/22ec627c-aa84-3540-acff-80f50e93a6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b5:3d:5e:8b:f0:c5:ba:fb:8b:2b:21:b6:39:03:c3:5f:3b: 9f:91:7f:0a:82:c6:9a:00:2b:fd:2b:0a:d8:5d:5d:80:9d:ab: 5f:fb:f6:7f:5e:d6:85:17:36:cb:b4:5f:1f:b5:72:1f:25:32: 7a:fa:b0:f9:49:4b:3d:d2:1c:3d:cb:5d:0b:3c:82:cb:cb:00: c3:ba:36:3a:d1:cf:1b:ed:73:fe:f4:44:84:55:c0:f8:cf:cf: 02:c5:ef:b3:34:a3:ac:73:9a:47:0a:b2:f9:ad:da:cb:1d:30: 76:16:fc:5d:0a:5f:14:7a:11:b0:78:fd:a8:46:76:fa:c7:3f: 24:01:7d:01:a1:e4:38:19:3c:6c:65:56:c5:6e:6c:18:36:e5: 82:65:b7:e9:a5:fa:d1:be:f3:be:bf:42:97:72:40:c8:9b:ca: a5:d8:44:2e:0c:93:8b:23:e1:f3:9a:25:38:46:28:4a:2c:3d: 3f:08:66:43:28:3e:88:0d:06:6b:07:d6:ae:4a:e0:87:cb:09: db:e1:3f:ec:36:70:c4:d9:05:dd:89:e5:73:cd:fd:25:49:a7: 51:1f:f1:1a:27:13:9d:b4:1b:44:95:fd:b5:cc:16:9f:ed:17: 45:96:ee:bb:2b:15:5c:3b:d8:b8:1c:1e:13:ca:7d:9c:26:34: c9:ab:74:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jenJhxdAkZRGofgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YWM5Njk4ZjQtODNmNy00OGVjLThmYWMtNWVlYTdkMTI1ZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh973HI2BRJPB6FvNTYVNjcWMrVUKfzAsgJnM yJmZfgFpqja+lw3tR8rxiOlD+n9R7E4rjIG7aa5jMLMCGFbvusM2GMZy/tkRmkMB zxjXLB7/lZWnUl5EknVFmMFV9nRLfsbFFvGLvM6WGSQX/4gwx3+sD44drsQOm9zE JDsVJwavenoe1/RB4/AzfNG9Zd8TRt2Q6uPmPUmxOpZKPxYxJ0SpTezfmVztw42Z L1MmgFd/mHWkh6DkljZ5kGJWG/Ni/RJT2kdBrbtZZKv3gHbrRnrgUkM34JSnxLTY xD2F6Be0RSY+uvVhZYR5/BBdnVDHc9ptF9HGk8Wt67eYVZR6WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2LOR8Nr8xFYFvk1iB+BJrkb0wjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjJlYzYyN2MtYWE4NC0z NTQwLWFjZmYtODBmNTBlOTNhNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJi1PV6L8MW6+4srIbY5A8NfO5+RfwqCxpoAK/0rCthdXYCdq1/79n9e 1oUXNsu0Xx+1ch8lMnr6sPlJSz3SHD3LXQs8gsvLAMO6NjrRzxvtc/70RIRVwPjP zwLF77M0o6xzmkcKsvmt2ssdMHYW/F0KXxR6EbB4/ahGdvrHPyQBfQGh5DgZPGxl VsVubBg25YJlt+ml+tG+876/QpdyQMibyqXYRC4Mk4sj4fOaJThGKEosPT8IZkMo PogNBmsH1q5K4IfLCdvhP+w2cMTZBd2J5XPN/SVJp1Ef8RonE520G0SV/bXMFp/t F0WW7rsrFVw72LgcHhPKfZwmNMmrdNI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:32 2026 by rpki-client