$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa File: 343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa (raw, json) Hash identifier: WvMq2QBBJIE/qUkvh+sthlWyUaoDIH6tzYEXzGZG30o= Subject key identifier: C2:CF:99:D0:A6:EC:9C:D5:57:39:6B:92:6E:EE:D5:8C:5E:00:5A:52 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1930726F85763E10A100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:19:30:72:6f:85:76:3e:10:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=154c12e7-5df0-4166-9cf2-2c7eae1f7709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:8f:f7:f3:b1:6d:b8:7f:c5:79:35:4e:1c: a0:d6:8e:19:3e:d6:a3:a6:77:ad:90:92:af:3d:68: da:42:ca:c0:37:4e:d8:b9:d0:97:61:81:9f:bb:72: f0:be:b9:c4:55:c6:23:4d:35:48:30:29:57:f6:42: 5d:61:a5:5c:74:42:a0:d4:52:0a:67:71:11:35:bb: 77:12:32:f8:86:56:50:cc:14:76:5d:97:f5:9d:a9: af:a6:96:7f:fe:dd:68:af:f6:f5:53:c3:b2:45:c7: 89:d5:a6:ca:49:d8:81:d7:c6:91:cd:62:77:54:04: 7a:84:ff:4e:99:c0:98:b6:b2:b0:62:d0:a9:60:c1: 21:23:c7:24:31:c4:9d:94:52:fb:60:27:f4:ee:d7: 0a:eb:db:c5:a0:e2:09:01:94:a6:5a:95:49:3c:66: 11:83:ea:0e:62:c8:8f:0c:91:e1:d4:82:40:b2:96: 2e:de:bb:e7:bb:5e:7e:c8:d2:ce:b8:d1:78:23:58: 0c:39:30:96:73:54:b6:a6:de:e1:95:a5:67:35:be: d8:0c:74:80:2a:55:5f:96:95:62:c2:14:74:33:f7: 07:8c:5b:8d:dd:6f:3c:46:b5:de:9a:fc:a1:42:2d: 7a:61:19:00:f7:05:31:cb:a1:17:a6:be:7e:a7:5e: 13:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CF:99:D0:A6:EC:9C:D5:57:39:6B:92:6E:EE:D5:8C:5E:00:5A:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/343b8aeb-8f9b-3f57-a462-86bb7f83bce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:7f:73:be:d2:69:b4:41:f5:00:7c:5c:75:58:ba:c6:47:fe: d1:12:46:46:fa:bc:27:f3:c6:1e:ac:d9:d7:0f:aa:27:a5:61: 8d:ce:59:a8:e4:1a:cd:ee:03:0a:28:1c:4b:ad:33:49:ae:1b: 87:37:3d:9a:7e:1a:9a:28:55:77:fa:b0:0e:fb:73:3d:08:09: 70:24:be:52:08:68:9a:fa:3f:08:3f:c1:00:25:ab:40:b4:6c: 83:80:3d:fa:f6:ec:42:d0:38:03:8e:14:73:7d:48:0a:2c:bf: 95:86:30:c9:1e:5e:ea:70:0e:40:3b:93:2e:e1:a5:0c:eb:5c: 56:39:94:bf:a8:24:42:29:a3:7c:79:cc:8e:9d:ca:1e:ae:7c: 25:c6:cd:86:61:43:25:e1:54:13:1f:64:ad:58:07:89:20:13: 82:a9:76:40:a8:f7:41:2b:81:9e:49:87:6c:46:38:e1:ec:2a: 91:27:9f:dc:b8:93:99:7a:36:0c:70:73:da:c1:22:77:53:69: 2e:25:37:15:70:41:ee:40:d2:79:59:1f:bc:76:66:cd:9f:94: 58:1d:3c:c3:88:19:43:4c:93:d1:e2:26:89:e4:b6:f9:01:65: 61:11:c3:89:a1:de:4e:3b:a2:c0:b3:1b:ee:e8:e4:62:9f:ab: 1a:b9:40:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehkwcm+Fdj4QoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTU0YzEyZTctNWRmMC00MTY2LTljZjItMmM3ZWFlMWY3NzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto2P9/Oxbbh/xXk1Thyg1o4ZPtajpnetkJKv PWjaQsrAN07YudCXYYGfu3LwvrnEVcYjTTVIMClX9kJdYaVcdEKg1FIKZ3ERNbt3 EjL4hlZQzBR2XZf1namvppZ//t1or/b1U8OyRceJ1abKSdiB18aRzWJ3VAR6hP9O mcCYtrKwYtCpYMEhI8ckMcSdlFL7YCf07tcK69vFoOIJAZSmWpVJPGYRg+oOYsiP DJHh1IJAspYu3rvnu15+yNLOuNF4I1gMOTCWc1S2pt7hlaVnNb7YDHSAKlVflpVi whR0M/cHjFuN3W88RrXemvyhQi16YRkA9wUxy6EXpr5+p14TWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLPmdCm7JzVVzlrkm7u1YxeAFpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzQzYjhhZWItOGY5Yi0z ZjU3LWE0NjItODZiYjdmODNiY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACB/c77SabRB9QB8XHVYusZH/tESRkb6vCfzxh6s2dcPqielYY3OWajk Gs3uAwooHEutM0muG4c3PZp+GpooVXf6sA77cz0ICXAkvlIIaJr6Pwg/wQAlq0C0 bIOAPfr27ELQOAOOFHN9SAosv5WGMMkeXupwDkA7ky7hpQzrXFY5lL+oJEIpo3x5 zI6dyh6ufCXGzYZhQyXhVBMfZK1YB4kgE4KpdkCo90ErgZ5Jh2xGOOHsKpEnn9y4 k5l6Ngxwc9rBIndTaS4lNxVwQe5A0nlZH7x2Zs2flFgdPMOIGUNMk9HiJonktvkB ZWERw4mh3k47osCzG+7o5GKfqxq5QFQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:04 2026 by rpki-client