$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/32f9a1cc-eae9-36f5-9c08-779779b567b6.roa File: 32f9a1cc-eae9-36f5-9c08-779779b567b6.roa (raw, json) Hash identifier: 24wLHdWTWZ6FZX3OpXWQfhCriaBERX7MhS3dsZPCWh4= Subject key identifier: DC:18:45:73:77:7B:2D:2F:69:C0:8A:74:57:4A:54:DC:83:78:0F:4B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1DA58F3FA1FF34DB6220 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/32f9a1cc-eae9-36f5-9c08-779779b567b6.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1d:a5:8f:3f:a1:ff:34:db:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e2e2dd3b-2713-43e2-91d7-d093f8b60732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:29:3a:2f:99:0b:ba:b2:e5:f7:37:23:a3:26: 01:bc:cd:fc:92:89:67:25:e2:4f:c6:62:29:58:33: da:65:21:96:1a:4c:4c:96:03:8e:d2:99:97:81:95: f4:b0:71:66:b5:4a:4a:a4:6e:33:af:ed:08:97:76: 78:0a:88:97:8d:ee:a1:f5:3b:f6:df:70:6e:9c:18: 82:e0:bd:c0:3d:5a:f8:e4:59:82:25:dd:bc:2e:cf: db:7c:b7:47:31:11:dd:ef:27:56:91:f4:ed:64:72: 70:7f:99:ee:18:1b:2f:df:14:c6:1b:97:9f:02:24: 86:c8:9b:44:22:87:41:1b:9f:60:fd:1a:7b:cb:5d: ff:21:4c:1a:9f:ca:aa:3f:5e:75:f7:13:99:f2:95: 38:ee:fa:08:d2:16:a0:e6:a1:d6:23:4d:83:e3:8e: be:c3:cb:45:30:b4:fc:7f:8d:3a:c5:c9:33:d1:40: 68:57:8c:e3:e4:bd:74:65:28:17:d0:9c:c9:bf:d3: 0f:a6:32:66:36:4e:98:51:3b:7c:f5:ca:93:74:b3: 8c:c4:d7:63:28:43:e4:b9:be:7c:54:93:a2:23:71: 16:4a:a2:32:24:ab:c0:26:7f:70:30:e8:1a:f6:d6: fd:a7:30:ff:5e:84:d7:13:96:a0:78:5b:3d:41:57: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:18:45:73:77:7B:2D:2F:69:C0:8A:74:57:4A:54:DC:83:78:0F:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/32f9a1cc-eae9-36f5-9c08-779779b567b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:5a:6d:2a:1d:51:58:16:16:e9:b8:29:08:22:72:f8:41:ee: 2e:e7:58:f7:2a:ab:26:bc:6a:e0:5e:29:f4:53:9c:be:8c:c8: a0:44:ac:9a:d9:be:0c:87:a2:5b:d4:f8:86:87:56:d4:fd:e8: d5:94:af:5c:81:a3:5d:27:a9:2b:24:0a:62:fe:4c:a8:5d:51: 20:8e:6b:d4:0e:97:3c:b4:26:51:8a:e4:e3:22:b2:ac:94:fe: 47:7d:22:16:7f:09:a3:87:74:13:36:8f:29:8c:28:87:b8:53: 58:01:cd:ca:37:d9:37:9f:a3:a6:77:65:b7:48:cf:ba:08:f5: 4e:45:0d:04:2c:e9:9e:e8:70:9c:42:04:c2:45:4e:6e:fa:83: 65:02:6c:d0:a7:92:d9:7e:ac:3a:c2:0e:66:39:fe:1b:36:d5: ea:65:78:33:0e:f3:39:91:27:91:c0:26:4e:c2:d3:c0:ae:a2: 48:0a:12:f1:e6:0c:17:84:0a:78:09:de:5c:58:bf:99:ae:9b: 19:0a:eb:44:50:1f:00:95:ba:04:76:e0:28:c0:f6:9b:16:7d: d8:73:4e:d6:8c:7c:9a:48:1f:1c:4d:ea:66:0a:76:7a:21:d5: 4f:43:f0:ac:34:a5:5f:56:61:13:a3:84:c5:e9:3e:ff:24:fe: 22:f6:35:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeh2ljz+h/zTbYiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTJlMmRkM2ItMjcxMy00M2UyLTkxZDctZDA5M2Y4YjYwNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSk6L5kLurLl9zcjoyYBvM38kolnJeJPxmIp WDPaZSGWGkxMlgOO0pmXgZX0sHFmtUpKpG4zr+0Il3Z4CoiXje6h9Tv233BunBiC 4L3APVr45FmCJd28Ls/bfLdHMRHd7ydWkfTtZHJwf5nuGBsv3xTGG5efAiSGyJtE IodBG59g/Rp7y13/IUwan8qqP1519xOZ8pU47voI0hag5qHWI02D446+w8tFMLT8 f406xckz0UBoV4zj5L10ZSgX0JzJv9MPpjJmNk6YUTt89cqTdLOMxNdjKEPkub58 VJOiI3EWSqIyJKvAJn9wMOga9tb9pzD/XoTXE5ageFs9QVfEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwYRXN3ey0vacCKdFdKVNyDeA9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzJmOWExY2MtZWFlOS0z NmY1LTljMDgtNzc5Nzc5YjU2N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRabSodUVgWFum4KQgicvhB7i7nWPcqqya8auBeKfRTnL6MyKBErJrZ vgyHolvU+IaHVtT96NWUr1yBo10nqSskCmL+TKhdUSCOa9QOlzy0JlGK5OMisqyU /kd9IhZ/CaOHdBM2jymMKIe4U1gBzco32Tefo6Z3ZbdIz7oI9U5FDQQs6Z7ocJxC BMJFTm76g2UCbNCnktl+rDrCDmY5/hs21epleDMO8zmRJ5HAJk7C08CuokgKEvHm DBeECngJ3lxYv5mumxkK60RQHwCVugR24CjA9psWfdhzTtaMfJpIHxxN6mYKdnoh 1U9D8Kw0pV9WYROjhMXpPv8k/iL2NeI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:12 2026 by rpki-client