$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa File: 3952f2df-c9da-34fd-b192-2e69549fdba1.roa (raw, json) Hash identifier: sb+wtA3meDsZrILcx5dA37lDh2l3XXrkATijbUftkGw= Subject key identifier: D2:31:4A:61:65:99:9E:51:56:5F:DE:6E:E0:28:5D:E1:AD:A4:64:4B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A53AB188DE6FFA5CED9C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:53:ab:18:8d:e6:ff:a5:ce:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=c0b1f281-98cf-4955-9806-a3c3e0c11912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:be:4e:44:3c:ff:1a:0d:c3:c0:2b:f7:f7: cc:fa:ea:1d:cb:75:cf:ee:0e:d0:25:86:9e:16:aa: 7b:1e:3f:f3:9b:54:e9:5d:24:06:4e:45:4d:46:9f: 77:74:61:f7:91:01:99:e8:0b:14:78:1f:f1:f9:d9: f8:44:4a:f4:a0:0b:ba:bb:1b:b7:f6:fd:ac:3a:fe: c0:49:8f:f4:bc:56:3d:cb:28:de:9e:1b:ff:88:b3: 07:e8:aa:0a:04:83:80:20:d8:5c:f8:f8:33:36:69: d9:b3:49:df:8a:f8:84:32:d3:03:13:e8:bb:21:36: d0:3c:aa:f6:9f:e9:95:03:14:54:64:80:db:15:70: 8c:85:c5:94:a9:2c:73:ac:0e:3f:3f:88:21:62:d9: 2a:d7:6f:04:67:4c:23:39:49:80:9d:1d:6b:e8:d4: bc:98:15:02:bf:2b:41:16:91:23:ff:0d:7d:a4:e1: 49:12:83:a8:25:0f:bc:d4:c8:9c:67:c7:21:32:62: 2e:1b:6a:1d:8f:a1:a7:95:04:86:60:49:c9:33:fc: 5e:6f:15:08:83:49:c4:47:45:c7:3f:50:e9:b3:3b: bb:32:56:5c:6f:4a:88:3b:84:d4:a3:b0:bc:3d:d4: 4a:a7:b2:0b:f0:72:31:e1:fe:9d:65:58:cb:78:0d: 41:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:31:4A:61:65:99:9E:51:56:5F:DE:6E:E0:28:5D:E1:AD:A4:64:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3952f2df-c9da-34fd-b192-2e69549fdba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:94:88:0d:ce:59:24:73:44:3b:d9:7f:18:c2:29:c7:1f:53: cb:be:a6:3a:bc:b3:d6:c8:94:7c:3b:92:4f:d5:3a:50:00:2e: 48:2f:9d:43:1b:d5:5f:0d:5f:03:bb:80:ac:6c:b2:4d:ee:79: f1:a1:2a:cc:5a:a6:0b:24:72:82:a5:16:25:fc:00:cc:05:2a: f7:82:6f:8f:ca:1f:9a:15:74:1b:65:e9:f8:41:63:52:b6:3b: f6:ad:dd:78:61:3b:e7:2c:0b:50:a6:32:5b:8d:4e:14:e1:79: 65:fe:1f:b3:aa:96:62:87:61:ba:78:de:b0:83:45:93:cf:11: d4:4f:7a:db:c4:21:c4:6b:8f:3b:24:23:0a:75:f9:f8:ac:23: 36:f2:ca:3b:3f:8f:70:3c:ed:9b:b3:0f:45:31:a2:a6:e7:a7: 61:b8:bd:c4:0c:26:9b:4d:d7:29:ac:08:b5:c4:f2:2d:6b:21: d1:17:15:ca:43:7e:b0:5e:fa:31:6c:f0:61:51:0b:ca:7f:a0: c4:11:06:97:fe:64:00:ef:3c:53:50:e0:2f:37:be:53:0f:fe: de:c2:a8:f6:77:54:eb:4c:9a:c6:83:f8:f0:df:d0:80:35:19: 3a:4f:04:40:2f:03:94:49:fb:db:36:5b:90:63:9a:3c:09:14: 0a:6b:4a:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelOrGI3m/6XO2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YzBiMWYyODEtOThjZi00OTU1LTk4MDYtYTNjM2UwYzExOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHq+TkQ8/xoNw8Ar9/fM+uody3XP7g7QJYae Fqp7Hj/zm1TpXSQGTkVNRp93dGH3kQGZ6AsUeB/x+dn4REr0oAu6uxu39v2sOv7A SY/0vFY9yyjenhv/iLMH6KoKBIOAINhc+PgzNmnZs0nfiviEMtMDE+i7ITbQPKr2 n+mVAxRUZIDbFXCMhcWUqSxzrA4/P4ghYtkq128EZ0wjOUmAnR1r6NS8mBUCvytB FpEj/w19pOFJEoOoJQ+81MicZ8chMmIuG2odj6GnlQSGYEnJM/xebxUIg0nER0XH P1Dpszu7MlZcb0qIO4TUo7C8PdRKp7IL8HIx4f6dZVjLeA1B/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIxSmFlmZ5RVl/ebuAoXeGtpGRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzk1MmYyZGYtYzlkYS0z NGZkLWIxOTItMmU2OTU0OWZkYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2UiA3OWSRzRDvZfxjCKccfU8u+pjq8s9bIlHw7kk/VOlAALkgvnUMb 1V8NXwO7gKxssk3uefGhKsxapgskcoKlFiX8AMwFKveCb4/KH5oVdBtl6fhBY1K2 O/at3XhhO+csC1CmMluNThTheWX+H7OqlmKHYbp43rCDRZPPEdRPetvEIcRrjzsk Iwp1+fisIzbyyjs/j3A87ZuzD0Uxoqbnp2G4vcQMJptN1ymsCLXE8i1rIdEXFcpD frBe+jFs8GFRC8p/oMQRBpf+ZADvPFNQ4C83vlMP/t7CqPZ3VOtMmsaD+PDf0IA1 GTpPBEAvA5RJ+9s2W5BjmjwJFAprSgM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:18 2026 by rpki-client