$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa File: 37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa (raw, json) Hash identifier: uB5Ld8mzdbHydQeq4viwhYBureZH3IPkm8DP6FFKoNw= Subject key identifier: 27:28:F4:0E:3A:D7:3B:03:2F:65:B8:1C:85:25:68:82:9E:20:42:83 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A52B8C7CAE1AA37C349D0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:52:b8:c7:ca:e1:aa:37:c3:49:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=8eb42740-6b44-4f74-b37b-b6ca6df935a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:0f:0b:ab:02:43:71:8d:9d:7b:da:3c:86: af:75:5d:2f:88:4a:7a:19:91:78:f0:c4:61:c4:2f: 17:e5:40:93:e9:68:9d:66:a5:ed:d3:df:8f:53:8f: e1:f2:39:f3:d5:46:a5:2e:32:8c:b7:7d:a8:37:73: 48:a1:a0:c5:4c:85:c0:3e:26:17:fd:f9:60:3f:08: 9b:a3:c0:e2:cb:71:70:b0:d8:f4:e9:1b:0e:0c:82: 02:32:b1:2a:9d:3f:25:43:4e:6a:25:cd:e1:9f:84: 36:4b:10:11:c4:34:59:49:bc:32:f5:71:d5:59:d2: ae:a2:0f:25:40:37:3c:6c:2f:36:de:f3:3e:85:5b: 46:e2:7b:48:78:1a:57:4a:98:66:d5:7f:df:e3:d9: e1:23:4a:6d:8b:3c:b9:f3:42:48:b3:fc:07:c4:24: 21:0c:f5:9b:f0:9d:87:9d:d0:52:4c:16:6c:36:1e: 3a:06:cc:ab:de:a6:eb:c3:e6:6e:7d:e8:e3:82:12: 90:18:c1:b3:29:70:a7:f1:9c:03:84:b8:c4:55:ad: ec:82:23:57:53:cb:5f:2f:fd:c3:ca:4c:90:c2:e8: fd:3d:49:18:7b:b5:2e:7a:e3:4f:ea:fa:a4:80:8e: 3e:52:53:d2:a6:00:6a:cb:a2:78:f9:8c:23:ed:d4: 00:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:28:F4:0E:3A:D7:3B:03:2F:65:B8:1C:85:25:68:82:9E:20:42:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37a1fde8-6494-3a2d-8c2f-7fa67e5cb8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:96:4d:2b:d8:44:f9:75:87:85:d7:07:a0:bc:d7:93:5d:46: c5:4b:60:d7:37:f7:4e:da:68:21:e4:76:8a:59:27:d5:01:de: d9:cc:6a:20:47:f4:fd:ef:20:ac:db:e6:96:03:e8:31:1c:7f: c4:4f:72:20:8e:9f:d7:18:ae:ea:5b:1e:bb:79:01:9e:d4:ba: 63:79:44:03:01:61:bc:70:5f:88:8c:bb:7f:3e:30:b0:44:97: a5:28:50:9b:2e:16:29:a8:4e:62:c4:70:85:d7:99:d7:a1:37: 3f:16:76:ac:b2:e2:e1:39:42:7b:04:3e:f1:96:90:a1:46:53: 35:c7:79:6b:de:d2:d4:c8:9e:09:19:ba:b1:7f:8c:1b:2a:e9: 3e:51:7e:69:d9:5c:9e:90:da:c6:07:f4:32:57:d8:96:79:cd: 73:b8:7a:53:5c:cb:64:89:cd:60:f0:a7:9f:e7:d9:8f:aa:cf: cb:eb:ae:1e:11:30:c2:fc:2d:64:6f:1b:34:29:11:eb:76:15: e9:f6:7a:11:c3:92:b7:45:01:43:93:c9:82:0a:e6:72:9d:3e: 61:01:6d:1e:22:0e:34:99:88:a1:45:0d:a8:1a:6e:85:f5:1e: 25:6f:5f:7c:10:d3:95:07:31:85:33:d6:69:47:ec:46:13:50: 2b:c5:22:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelK4x8rhqjfDSdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OGViNDI3NDAtNmI0NC00Zjc0LWIzN2ItYjZjYTZkZjkzNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLQPC6sCQ3GNnXvaPIavdV0viEp6GZF48MRh xC8X5UCT6WidZqXt09+PU4/h8jnz1UalLjKMt32oN3NIoaDFTIXAPiYX/flgPwib o8Diy3FwsNj06RsODIICMrEqnT8lQ05qJc3hn4Q2SxARxDRZSbwy9XHVWdKuog8l QDc8bC823vM+hVtG4ntIeBpXSphm1X/f49nhI0ptizy580JIs/wHxCQhDPWb8J2H ndBSTBZsNh46Bsyr3qbrw+ZufejjghKQGMGzKXCn8ZwDhLjEVa3sgiNXU8tfL/3D ykyQwuj9PUkYe7UueuNP6vqkgI4+UlPSpgBqy6J4+Ywj7dQAqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCco9A461zsDL2W4HIUlaIKeIEKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzdhMWZkZTgtNjQ5NC0z YTJkLThjMmYtN2ZhNjdlNWNiOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyWTSvYRPl1h4XXB6C815NdRsVLYNc3907aaCHkdopZJ9UB3tnMaiBH 9P3vIKzb5pYD6DEcf8RPciCOn9cYrupbHrt5AZ7UumN5RAMBYbxwX4iMu38+MLBE l6UoUJsuFimoTmLEcIXXmdehNz8Wdqyy4uE5QnsEPvGWkKFGUzXHeWve0tTIngkZ urF/jBsq6T5RfmnZXJ6Q2sYH9DJX2JZ5zXO4elNcy2SJzWDwp5/n2Y+qz8vrrh4R MML8LWRvGzQpEet2Fen2ehHDkrdFAUOTyYIK5nKdPmEBbR4iDjSZiKFFDagaboX1 HiVvX3wQ05UHMYUz1mlH7EYTUCvFIs0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:26 2026 by rpki-client