$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa File: 2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa (raw, json) Hash identifier: K343OyZ7xPMt/GXhYx0PTWWF36NwLH3vyS/VvZv/Dvk= Subject key identifier: 9A:CF:EC:E0:28:79:99:44:D4:13:E2:18:DB:EC:CA:8C:80:77:C5:58 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A007B3B2BABD6482B5B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:00:7b:3b:2b:ab:d6:48:2b:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=d704ebc9-c9e2-4462-9f18-fb56f100b6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:24:df:2d:61:4a:8d:5d:a7:1a:9c:42:b6:42: 38:3b:1b:7e:51:96:c7:1a:84:c0:51:c6:93:01:f4: 8e:ad:2d:52:74:bc:06:a6:8a:eb:7d:1b:fd:c2:96: 5a:2f:50:68:fb:42:49:61:0a:12:a5:3b:ee:fa:ef: 2b:8f:26:41:87:46:53:c1:42:c4:f5:04:4e:41:41: 83:70:4e:b0:dc:a0:12:b2:ab:45:d8:c5:d3:b2:06: fc:31:4c:35:e0:2d:6e:c2:5f:97:10:73:99:8e:f9: 8e:0d:8c:38:25:56:81:72:fc:ca:2d:46:f6:1c:37: 21:db:ef:b6:b9:08:a3:2d:31:d1:df:e5:9d:bb:4c: b4:34:71:2a:ad:d5:4d:60:1a:34:63:2e:83:99:2e: 39:89:1d:9a:f4:7b:a2:45:f1:c0:da:ed:a7:0c:2e: 51:c1:01:70:f2:30:33:3e:7c:75:c2:8a:7c:fa:4a: a7:e4:5e:1c:6d:31:41:9b:99:c6:e9:8a:64:a7:02: b5:dc:3e:3d:52:0e:02:d4:b4:9b:65:1a:48:ac:e4: 84:69:29:ad:21:c5:fc:48:8e:77:10:ef:3f:39:ed: 3e:d9:30:2a:33:fc:a5:4e:73:fc:fb:75:ee:13:c8: 52:98:d9:11:d1:75:e8:ce:ec:19:e4:24:64:18:da: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CF:EC:E0:28:79:99:44:D4:13:E2:18:DB:EC:CA:8C:80:77:C5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2a8569b7-2ee6-3f83-a594-68c571b0a75e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:67:42:8c:96:e4:a6:5f:8a:ee:7e:fc:05:20:f1:82:6b:66: a2:27:bf:52:83:08:d0:46:0e:de:6c:75:13:28:e9:84:fb:c1: 87:29:39:d9:49:1c:11:e8:0d:74:7d:84:b2:2b:36:98:fe:33: d0:43:81:3a:03:ae:8e:80:06:45:6d:ef:0b:af:74:2c:1b:3e: e8:b8:ca:5b:3d:b3:a3:b5:51:4b:78:ee:b0:d8:4b:f7:99:7a: 82:91:db:f2:73:b0:38:98:29:f7:6a:52:e3:80:26:ea:41:39: a4:e5:c8:eb:27:c9:68:07:b7:b0:1c:ec:48:57:ea:8a:f4:06: 34:e9:99:63:fc:f7:f3:f4:89:07:13:24:64:b6:08:ec:13:8a: c7:8b:09:70:0d:59:c0:05:8f:66:42:ef:f6:ae:30:b3:28:89: bd:de:e8:d5:9b:01:51:8f:6c:5b:ac:e1:59:b4:53:b3:bc:c5: 1b:f4:8b:8b:e9:f0:f1:19:81:ce:6d:3d:be:95:f0:61:d0:b7: 59:41:df:e2:e9:50:05:1f:82:92:77:e0:2d:d3:94:e0:19:52: e6:18:f7:d2:1d:cf:ea:33:eb:32:af:05:80:a5:9f:58:a2:99: 68:bc:91:fd:08:4c:82:4e:fa:6d:72:ca:05:58:20:81:fc:8e: 6b:40:3f:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegB7Oyur1kgrW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDcwNGViYzktYzllMi00NDYyLTlmMTgtZmI1NmYxMDBiNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSTfLWFKjV2nGpxCtkI4Oxt+UZbHGoTAUcaT AfSOrS1SdLwGporrfRv9wpZaL1Bo+0JJYQoSpTvu+u8rjyZBh0ZTwULE9QROQUGD cE6w3KASsqtF2MXTsgb8MUw14C1uwl+XEHOZjvmODYw4JVaBcvzKLUb2HDch2++2 uQijLTHR3+Wdu0y0NHEqrdVNYBo0Yy6DmS45iR2a9HuiRfHA2u2nDC5RwQFw8jAz Pnx1wop8+kqn5F4cbTFBm5nG6YpkpwK13D49Ug4C1LSbZRpIrOSEaSmtIcX8SI53 EO8/Oe0+2TAqM/ylTnP8+3XuE8hSmNkR0XXozuwZ5CRkGNq9vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrP7OAoeZlE1BPiGNvsyoyAd8VYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmE4NTY5YjctMmVlNi0z ZjgzLWE1OTQtNjhjNTcxYjBhNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdnQoyW5KZfiu5+/AUg8YJrZqInv1KDCNBGDt5sdRMo6YT7wYcpOdlJ HBHoDXR9hLIrNpj+M9BDgToDro6ABkVt7wuvdCwbPui4yls9s6O1UUt47rDYS/eZ eoKR2/JzsDiYKfdqUuOAJupBOaTlyOsnyWgHt7Ac7EhX6or0BjTpmWP89/P0iQcT JGS2COwTiseLCXANWcAFj2ZC7/auMLMoib3e6NWbAVGPbFus4Vm0U7O8xRv0i4vp 8PEZgc5tPb6V8GHQt1lB3+LpUAUfgpJ34C3TlOAZUuYY99Idz+oz6zKvBYCln1ii mWi8kf0ITIJO+m1yygVYIIH8jmtAP8I= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:37 2026 by rpki-client