$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37fb047b-5012-3f7c-b83e-f1839b19285b.roa File: 37fb047b-5012-3f7c-b83e-f1839b19285b.roa (raw, json) Hash identifier: tbBaTb6PkrQTCdHGz2JElb92rwN69tP8B8vzdLjiWlQ= Subject key identifier: 16:02:B3:AD:88:8A:AE:54:C7:15:A1:10:73:2F:A0:D5:BC:9E:39:89 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A2A613FF97D0C8662E780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37fb047b-5012-3f7c-b83e-f1839b19285b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2a:61:3f:f9:7d:0c:86:62:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=7468adca-0c00-4274-94d0-c64a518b448b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1a:cf:bf:61:8a:64:fc:08:fd:d3:6d:09:2a: b7:c1:72:69:1c:e0:2a:f8:43:1f:c5:46:53:86:88: 11:25:80:20:44:5c:42:06:da:fd:f7:dc:06:0f:c0: 60:3d:5f:5a:d9:4f:5f:7e:b1:77:b8:7f:2c:d2:79: d1:3a:e9:83:12:41:f7:38:f8:4c:30:af:ee:e1:b9: d3:2c:33:57:37:b0:da:27:3b:c6:9e:e0:de:08:19: 9f:f7:1a:23:a9:19:19:5e:a1:95:5c:8b:a7:1a:54: 51:03:97:1c:05:f5:a9:3a:55:53:66:3d:1d:48:e9: 23:d6:4d:c1:b0:26:33:dc:5c:74:81:ac:65:29:0e: d2:ee:db:01:d5:87:8d:af:42:6f:a8:bd:a7:07:03: 09:b1:19:db:01:1d:ea:7b:f3:8c:e3:7d:cc:73:05: d9:b0:ee:b7:28:65:dd:56:ba:1b:03:bc:ec:49:22: a6:c8:e5:e4:d3:ed:ef:cf:bd:b7:1b:1a:ba:3e:b5: af:2a:8b:3c:f4:ee:88:c2:ea:67:af:c1:f5:b9:85: 65:76:f8:78:5d:a4:79:75:0c:9d:ab:99:68:e4:b2: 43:aa:7e:03:52:37:18:2a:30:9f:9e:f3:d1:9d:57: e9:e2:37:e8:c6:3b:67:71:c0:23:35:51:81:00:53: f9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:02:B3:AD:88:8A:AE:54:C7:15:A1:10:73:2F:A0:D5:BC:9E:39:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/37fb047b-5012-3f7c-b83e-f1839b19285b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:9e:d1:d3:1d:97:cb:2c:9d:35:e7:c8:ab:30:55:b9:fe:00: b7:79:dc:5e:72:9f:06:bf:d3:6d:f0:89:62:48:18:a6:90:39: 86:25:e0:60:0c:c3:ba:76:f9:c1:28:cf:d0:84:73:d6:c2:5a: 79:f3:8e:ca:29:43:13:aa:dc:fd:1b:23:3b:b0:45:ca:e0:d0: 1f:af:39:50:95:c5:0c:e1:51:60:52:52:43:ef:3f:05:f2:74: a6:c3:97:e0:96:9c:15:aa:9f:9b:69:2d:b4:9e:96:41:d8:55: 60:8e:34:eb:a1:c7:6d:a2:70:45:4d:d5:72:ce:97:60:6f:12: 17:af:2a:ed:76:40:ee:ec:ca:a0:d6:99:04:65:59:e5:f6:f5: eb:c2:64:3a:74:5e:5d:67:0a:07:19:85:26:be:de:32:b0:68: 36:44:49:c0:82:69:8f:96:af:9e:2b:30:0d:a7:96:84:d0:55: ca:a1:2c:69:6e:12:17:1d:61:6c:ce:3b:e3:cc:6d:78:20:bc: 32:f3:df:59:cf:d3:c0:c4:ba:b7:82:34:da:d3:1d:e4:c7:6a: 6e:3d:5e:17:86:9a:d2:90:e5:6c:11:9a:b9:68:68:c0:ac:2a: 70:42:ec:db:4f:c4:e9:90:c6:50:29:1e:82:f2:3d:53:f9:4c: a3:1e:22:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiphP/l9DIZi54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NzQ2OGFkY2EtMGMwMC00Mjc0LTk0ZDAtYzY0YTUxOGI0NDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xrPv2GKZPwI/dNtCSq3wXJpHOAq+EMfxUZT hogRJYAgRFxCBtr999wGD8BgPV9a2U9ffrF3uH8s0nnROumDEkH3OPhMMK/u4bnT LDNXN7DaJzvGnuDeCBmf9xojqRkZXqGVXIunGlRRA5ccBfWpOlVTZj0dSOkj1k3B sCYz3Fx0gaxlKQ7S7tsB1YeNr0JvqL2nBwMJsRnbAR3qe/OM433McwXZsO63KGXd VrobA7zsSSKmyOXk0+3vz723Gxq6PrWvKos89O6Iwupnr8H1uYVldvh4XaR5dQyd q5lo5LJDqn4DUjcYKjCfnvPRnVfp4jfoxjtnccAjNVGBAFP5twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYCs62Iiq5UxxWhEHMvoNW8njmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzdmYjA0N2ItNTAxMi0z ZjdjLWI4M2UtZjE4MzliMTkyODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOe0dMdl8ssnTXnyKswVbn+ALd53F5ynwa/023wiWJIGKaQOYYl4GAM w7p2+cEoz9CEc9bCWnnzjsopQxOq3P0bIzuwRcrg0B+vOVCVxQzhUWBSUkPvPwXy dKbDl+CWnBWqn5tpLbSelkHYVWCONOuhx22icEVN1XLOl2BvEhevKu12QO7syqDW mQRlWeX29evCZDp0Xl1nCgcZhSa+3jKwaDZEScCCaY+Wr54rMA2nloTQVcqhLGlu EhcdYWzOO+PMbXggvDLz31nP08DEureCNNrTHeTHam49XheGmtKQ5WwRmrloaMCs KnBC7NtPxOmQxlApHoLyPVP5TKMeIkA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:41:46 2026 by rpki-client