$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/36c03f27-784e-3c97-9cf8-912e9208b8d8.roa File: 36c03f27-784e-3c97-9cf8-912e9208b8d8.roa (raw, json) Hash identifier: 0d1fY3iNOnwqeWLG3tMJ80r7Tplz5xJOMrHD+VQ9nX0= Subject key identifier: 10:A3:A5:DC:9F:7E:12:7F:57:C1:34:98:6E:81:F6:24:CA:8D:CB:38 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4034264B3F4D91B79B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/36c03f27-784e-3c97-9cf8-912e9208b8d8.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:40:34:26:4b:3f:4d:91:b7:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6c4de598-370f-4fcd-a5bd-45dee114dc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fd:2e:a1:e4:7b:d7:68:5a:7d:5c:8c:7a:d5: 8b:89:2d:49:c9:ad:9d:e5:95:b7:e8:70:4c:90:f4: 4d:be:fa:2f:a6:91:68:53:09:02:63:b8:71:f0:b6: 32:56:8b:37:29:ee:61:33:8b:58:53:c0:40:aa:37: da:f9:c2:77:1e:c2:21:ef:96:6a:7f:b5:ce:6d:fb: d1:77:f5:4e:a7:a2:a4:86:c0:ea:65:05:62:82:d7: 89:b4:0d:2c:80:67:ea:c0:04:52:9a:ba:67:86:9c: ac:00:08:a3:2b:ac:3f:21:29:fc:61:f0:6a:cb:07: eb:59:2a:ef:36:bb:66:5b:5e:c8:e9:0c:82:91:df: 96:d5:c1:b6:06:e2:e5:01:54:d1:33:19:55:3b:5a: 06:f9:0d:ce:32:e1:d4:18:9e:25:5a:0b:30:67:fa: d4:02:94:d0:97:2d:b3:32:ce:e1:d6:50:58:7f:53: 5d:85:d3:3d:d4:d6:7a:93:f8:2b:04:0c:34:f1:61: d3:28:89:71:cf:64:66:78:3a:4d:d1:3f:80:da:a8: 64:82:e7:3d:6d:10:12:33:0c:ad:37:44:ef:e4:b1: 7c:12:2d:57:08:88:05:0b:4a:51:ff:66:d4:cd:81: 7f:73:2c:4a:2c:32:b8:0d:e5:cc:8b:b3:b1:fe:68: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A3:A5:DC:9F:7E:12:7F:57:C1:34:98:6E:81:F6:24:CA:8D:CB:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/36c03f27-784e-3c97-9cf8-912e9208b8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:26:af:b8:29:4c:7d:49:cd:4f:09:5a:ff:f1:e7:74:fa:c7: 75:70:bc:f7:6a:d1:b5:27:c4:eb:f5:a8:8d:ee:8d:e6:bc:31: 4d:74:2e:46:5d:52:47:02:78:69:bf:53:ac:c4:06:ac:ae:37: 24:1a:d5:19:49:d4:50:b2:f5:57:d4:4f:52:62:c7:8a:6b:d1: 31:4d:27:d4:79:a6:3f:db:06:86:03:08:18:ee:98:3a:42:fb: a5:34:6c:b6:37:1d:98:ba:2f:64:f7:2d:19:c2:3f:9a:e9:a3: 16:81:84:1c:d0:9f:f5:c5:c3:ea:34:b0:e9:58:c6:30:b7:e9: d1:3b:f4:88:b4:5c:27:76:69:ac:68:c0:9c:20:09:23:03:a8: 79:49:43:f4:e7:fa:ac:58:28:e0:17:12:ad:a0:9a:81:3c:d3: dc:fa:56:a9:a6:18:35:a6:38:c6:ca:8a:d7:32:39:53:64:54: ca:5b:5a:df:98:75:5d:69:4f:aa:b4:a3:12:f7:82:76:cf:28: c3:b1:93:10:c3:fc:4a:9b:61:76:4f:e0:8c:1a:d0:e5:67:e8: 0e:e0:f6:58:56:a5:3b:cf:59:cc:b8:64:d5:f5:8c:76:b4:f6: 5d:6d:8f:4c:3d:59:13:88:af:23:0f:f2:85:a8:14:d2:b6:82: 92:f4:2b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekA0Jks/TZG3m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmM0ZGU1OTgtMzcwZi00ZmNkLWE1YmQtNDVkZWUxMTRkYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv0uoeR712hafVyMetWLiS1Jya2d5ZW36HBM kPRNvvovppFoUwkCY7hx8LYyVos3Ke5hM4tYU8BAqjfa+cJ3HsIh75Zqf7XObfvR d/VOp6KkhsDqZQVigteJtA0sgGfqwARSmrpnhpysAAijK6w/ISn8YfBqywfrWSrv NrtmW17I6QyCkd+W1cG2BuLlAVTRMxlVO1oG+Q3OMuHUGJ4lWgswZ/rUApTQly2z Ms7h1lBYf1NdhdM91NZ6k/grBAw08WHTKIlxz2RmeDpN0T+A2qhkguc9bRASMwyt N0Tv5LF8Ei1XCIgFC0pR/2bUzYF/cyxKLDK4DeXMi7Ox/mhEKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCjpdyffhJ/V8E0mG6B9iTKjcs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzZjMDNmMjctNzg0ZS0z Yzk3LTljZjgtOTEyZTkyMDhiOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYmr7gpTH1JzU8JWv/x53T6x3VwvPdq0bUnxOv1qI3ujea8MU10LkZd UkcCeGm/U6zEBqyuNyQa1RlJ1FCy9VfUT1Jix4pr0TFNJ9R5pj/bBoYDCBjumDpC +6U0bLY3HZi6L2T3LRnCP5rpoxaBhBzQn/XFw+o0sOlYxjC36dE79Ii0XCd2aaxo wJwgCSMDqHlJQ/Tn+qxYKOAXEq2gmoE809z6VqmmGDWmOMbKitcyOVNkVMpbWt+Y dV1pT6q0oxL3gnbPKMOxkxDD/EqbYXZP4Iwa0OVn6A7g9lhWpTvPWcy4ZNX1jHa0 9l1tj0w9WROIryMP8oWoFNK2gpL0K1M= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:56 2026 by rpki-client