$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2fdffa0f-7c93-368f-8243-27f29765ab18.roa File: 2fdffa0f-7c93-368f-8243-27f29765ab18.roa (raw, json) Hash identifier: o3LJsB6uDNSGwNB4aGztc9Tc3ya2I+C4fc1eFP4Io5E= Subject key identifier: BD:1F:BE:23:C0:F8:E3:48:83:1A:4D:5A:18:43:F5:7E:A8:3A:1D:13 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A52ECDCCD836FEDCC3C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2fdffa0f-7c93-368f-8243-27f29765ab18.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:52:ec:dc:cd:83:6f:ed:cc:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=1658b3db-020a-4770-a160-4d485a1ab621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:3f:6f:00:55:75:b8:3b:a2:8d:cd:d9:fb: 97:05:4c:e1:1e:c8:2f:22:eb:3e:95:e7:a9:a3:30: 1c:13:4b:12:a7:51:0c:b9:01:79:ba:f6:51:bc:9e: 9d:35:14:ba:e4:6d:61:35:98:e6:a2:b7:56:ce:ea: 42:69:00:df:f2:51:20:e6:19:bc:c5:60:68:fd:20: ad:74:60:f6:4b:16:fe:71:f4:16:88:a9:82:40:43: 91:c2:93:a6:6b:5c:5d:69:95:0b:a1:d2:76:b9:05: 64:40:a1:82:8d:b6:7a:df:5c:32:d1:17:e3:8c:b7: 82:a9:ae:b4:e1:c3:c6:2d:b8:b4:d3:99:28:ba:70: fc:9f:21:15:d2:b7:53:0a:61:d5:4e:ee:54:31:92: a3:00:6c:70:07:e4:6d:82:80:3c:c3:88:79:0a:d5: 6b:3c:89:98:d1:82:3d:83:63:39:4f:08:a6:95:21: ee:7b:e0:04:aa:13:18:f5:35:9a:52:85:30:98:25: 7b:2a:30:2e:15:7b:f5:38:96:ad:49:fb:35:64:74: 3d:16:81:f1:20:e8:c1:6b:ee:1b:bc:29:64:62:ab: 75:3c:2e:aa:df:00:46:b7:9b:e7:e1:83:95:5d:ab: 05:d4:13:e1:1f:ef:5e:53:85:76:e8:95:cb:45:55: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1F:BE:23:C0:F8:E3:48:83:1A:4D:5A:18:43:F5:7E:A8:3A:1D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2fdffa0f-7c93-368f-8243-27f29765ab18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fb:3e:f6:66:bb:11:72:30:8b:6f:6b:9c:ac:0f:8c:ff:2e: ee:41:29:be:0d:90:20:eb:0d:f6:b1:c4:a5:c1:bc:ef:41:76: e0:99:c4:96:a0:b3:ba:e2:e3:d9:a0:74:7f:6a:04:21:28:5d: a2:1b:14:be:dc:9c:2c:78:d7:fb:88:78:24:d8:ae:65:a0:d0: be:d0:84:b0:fa:c3:84:29:5b:0b:63:57:7d:1e:e6:c3:63:d7: 57:df:40:af:cf:94:3a:5c:ed:91:5e:33:46:85:71:ba:05:76: 73:65:f9:93:22:fe:16:4e:ab:26:e7:6c:4c:e2:ca:c0:be:d4: 01:6e:a5:28:7e:e2:7a:02:06:b3:94:29:32:e1:8c:8f:69:28: 24:9e:36:46:05:b1:7a:db:07:e1:c8:62:5a:72:b1:95:6b:c5: 38:12:21:d3:66:14:f4:bd:ad:d5:54:97:c9:aa:1e:05:84:ba: 73:2d:e2:48:d1:53:80:9c:29:e8:df:f0:45:5a:d7:86:df:2b: 77:e3:64:b3:9c:0d:f7:da:45:20:29:04:ac:38:aa:dd:90:78: 26:f6:37:4b:16:d2:64:6b:11:4d:dc:e7:36:08:a0:46:45:8d: 73:02:69:bc:b7:56:97:c5:12:a9:61:17:86:13:7f:e3:c9:ea: 3b:2b:1f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelLs3M2Db+3MPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTY1OGIzZGItMDIwYS00NzcwLWExNjAtNGQ0ODVhMWFiNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3c/bwBVdbg7oo3N2fuXBUzhHsgvIus+leep ozAcE0sSp1EMuQF5uvZRvJ6dNRS65G1hNZjmordWzupCaQDf8lEg5hm8xWBo/SCt dGD2Sxb+cfQWiKmCQEORwpOma1xdaZULodJ2uQVkQKGCjbZ631wy0RfjjLeCqa60 4cPGLbi005kounD8nyEV0rdTCmHVTu5UMZKjAGxwB+RtgoA8w4h5CtVrPImY0YI9 g2M5TwimlSHue+AEqhMY9TWaUoUwmCV7KjAuFXv1OJatSfs1ZHQ9FoHxIOjBa+4b vClkYqt1PC6q3wBGt5vn4YOVXasF1BPhH+9eU4V26JXLRVVmaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0fviPA+ONIgxpNWhhD9X6oOh0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmZkZmZhMGYtN2M5My0z NjhmLTgyNDMtMjdmMjk3NjVhYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj7PvZmuxFyMItva5ysD4z/Lu5BKb4NkCDrDfaxxKXBvO9BduCZxJag s7ri49mgdH9qBCEoXaIbFL7cnCx41/uIeCTYrmWg0L7QhLD6w4QpWwtjV30e5sNj 11ffQK/PlDpc7ZFeM0aFcboFdnNl+ZMi/hZOqybnbEziysC+1AFupSh+4noCBrOU KTLhjI9pKCSeNkYFsXrbB+HIYlpysZVrxTgSIdNmFPS9rdVUl8mqHgWEunMt4kjR U4CcKejf8EVa14bfK3fjZLOcDffaRSApBKw4qt2QeCb2N0sW0mRrEU3c5zYIoEZF jXMCaby3VpfFEqlhF4YTf+PJ6jsrHzU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:37 2026 by rpki-client