$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa File: 298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa (raw, json) Hash identifier: csL+eMdZY4SFXXauNF8k97W1OYa6W+uglL8VGwieHYc= Subject key identifier: 22:A0:E9:7E:D1:4F:23:46:DA:B2:EA:DA:2A:0A:B1:90:C5:C8:C9:28 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A20D2B4E0F0E10238B308 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:20:d2:b4:e0:f0:e1:02:38:b3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6dee116b-e7f7-47d1-b377-0311df6144e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:46:30:c2:a6:eb:d3:9c:7e:dc:a4:ab:85: 1f:97:05:01:35:4b:ca:f6:94:42:f8:ac:6c:c5:79: 79:6a:69:a2:cf:14:72:e6:b9:24:b8:e9:6a:da:3e: fe:ab:36:d8:ab:d0:04:7c:83:a1:e0:ab:3c:66:c9: 4d:70:33:30:eb:79:a3:57:7e:a4:98:d3:3e:bb:c0: f4:af:d2:64:d5:32:8a:48:01:90:28:99:59:e8:08: 34:0f:39:99:ea:76:2a:75:fe:d7:af:8a:49:e7:34: 1f:ad:57:73:da:70:ec:dd:fa:4c:48:f2:19:a7:6d: 1e:cb:d7:7b:ad:33:cc:6e:44:37:c0:04:5c:10:78: 06:e3:2c:14:b0:b7:88:19:cd:11:a1:ea:53:f2:14: 82:ae:71:04:16:86:b3:79:47:f6:f5:f3:0d:b4:70: 0e:df:9d:40:3c:1c:d5:00:f6:ae:93:51:8c:35:16: c5:d6:ab:3c:de:4e:c5:0c:13:24:7b:af:d2:c7:64: 47:fc:9c:35:93:34:35:d8:e7:72:66:68:c4:fb:c0: 02:26:af:6b:82:ea:47:e7:c7:6b:04:38:05:15:65: ce:bb:38:3e:01:7d:0a:d3:dc:e5:db:69:60:ea:9f: 1a:72:e9:00:18:71:04:d2:4c:fe:56:2c:06:1a:66: e9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A0:E9:7E:D1:4F:23:46:DA:B2:EA:DA:2A:0A:B1:90:C5:C8:C9:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/298490ea-1596-3ee3-9ed2-9d96c8dddc76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:11:cc:b4:88:a4:76:53:93:2d:f8:c8:29:06:46:62:76:aa: 05:9a:b3:6f:dd:02:29:d8:20:62:3a:d1:91:4c:78:e5:3f:14: a9:8a:37:c5:bf:3e:41:22:34:7e:12:e5:60:07:5e:03:f3:d8: 25:74:d1:95:5d:e8:dc:70:1c:cb:7f:cf:fd:f4:fb:f8:d3:c0: 3e:74:b7:9d:55:a3:ed:30:05:28:d4:38:b4:7d:e1:ec:31:75: 15:c0:2c:ac:be:22:eb:f2:15:eb:1c:78:c0:49:d5:2f:a6:eb: 7b:4a:42:48:94:df:d8:28:88:92:f2:64:ea:95:4e:b1:d2:86: 97:81:f8:dc:56:9b:f9:9c:6a:92:1a:d7:87:71:16:06:f9:e2: 29:a1:5d:0c:27:02:25:dd:49:a9:4c:5d:30:c3:42:05:30:d7: 1e:7a:52:76:49:8d:8c:25:08:54:f2:c6:98:f0:dc:fc:53:45: b2:0b:0c:8e:e6:e6:f5:06:a0:3d:ca:48:22:d2:25:82:88:b7: dd:b7:2b:5e:23:d5:18:49:67:1d:ef:fe:a1:0b:7b:62:76:30: e4:7b:20:78:38:2a:fb:33:3a:88:2a:81:07:e7:37:68:ef:29: 20:64:f1:53:b6:4e:d4:d3:9c:8a:0b:6d:f2:aa:1b:d1:5c:b8: 83:4f:c1:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiDStODw4QI4swgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmRlZTExNmItZTdmNy00N2QxLWIzNzctMDMxMWRmNjE0NGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEpGMMKm69Ocftykq4UflwUBNUvK9pRC+Kxs xXl5ammizxRy5rkkuOlq2j7+qzbYq9AEfIOh4Ks8ZslNcDMw63mjV36kmNM+u8D0 r9Jk1TKKSAGQKJlZ6Ag0DzmZ6nYqdf7Xr4pJ5zQfrVdz2nDs3fpMSPIZp20ey9d7 rTPMbkQ3wARcEHgG4ywUsLeIGc0RoepT8hSCrnEEFoazeUf29fMNtHAO351APBzV APauk1GMNRbF1qs83k7FDBMke6/Sx2RH/Jw1kzQ12OdyZmjE+8ACJq9rgupH58dr BDgFFWXOuzg+AX0K09zl22lg6p8acukAGHEE0kz+ViwGGmbpJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKg6X7RTyNG2rLq2ioKsZDFyMkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjk4NDkwZWEtMTU5Ni0z ZWUzLTllZDItOWQ5NmM4ZGRkYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQRzLSIpHZTky34yCkGRmJ2qgWas2/dAinYIGI60ZFMeOU/FKmKN8W/ PkEiNH4S5WAHXgPz2CV00ZVd6NxwHMt/z/30+/jTwD50t51Vo+0wBSjUOLR94ewx dRXALKy+IuvyFesceMBJ1S+m63tKQkiU39goiJLyZOqVTrHShpeB+NxWm/mcapIa 14dxFgb54imhXQwnAiXdSalMXTDDQgUw1x56UnZJjYwlCFTyxpjw3PxTRbILDI7m 5vUGoD3KSCLSJYKIt923K14j1RhJZx3v/qELe2J2MOR7IHg4KvszOogqgQfnN2jv KSBk8VO2TtTTnIoLbfKqG9FcuINPwZs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:18 2026 by rpki-client