$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa File: 3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa (raw, json) Hash identifier: qZOkCEVPcVyMxWvWcOcdYn1oBlLbzLp0V5uqqVKNXDI= Subject key identifier: FD:8C:86:D0:96:C1:7E:7A:FE:A1:A9:44:2A:E7:75:01:A2:D2:23:5F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3AEFED5734AE77F7EF80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3a:ef:ed:57:34:ae:77:f7:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=92759ba1-8d1a-48c9-a2f6-2f8a00058c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:c2:84:29:25:28:49:c2:62:3e:39:8c:c5: ff:05:c2:09:ee:81:4f:b0:0f:d0:d0:2f:69:8c:cb: 88:3f:db:25:09:f2:1c:45:49:3a:f4:53:25:dc:d8: a9:12:14:d0:91:ea:1d:43:ac:68:93:1d:45:d6:f2: 79:59:c5:73:c6:39:be:fa:54:65:c5:0a:c3:29:e6: a4:a0:1c:05:2d:3d:81:fe:7c:9e:13:50:e4:bb:ea: 60:70:4a:18:8a:61:5e:64:a9:fd:7b:97:05:1a:f2: 64:65:a0:b6:90:84:d8:9e:6d:9f:fc:f4:e1:ff:68: 74:e7:3b:87:25:7a:03:bd:0c:ad:34:9d:7e:b6:c1: cf:03:1b:92:2c:d4:99:00:75:de:c2:a9:7d:ea:6c: 18:02:c7:8b:83:e3:df:82:c2:af:ed:22:97:45:39: 94:a2:ce:e9:75:12:60:4b:74:b9:1c:35:39:4b:77: 02:a2:e6:38:40:20:cd:32:ad:d0:a3:2e:5a:e9:7a: b3:64:a8:e9:84:53:ee:ce:87:66:05:38:3d:ab:1c: 00:1c:4b:04:33:de:3c:a9:4d:a6:df:b2:64:4f:d5: 53:ec:f0:ce:58:1f:8e:46:c3:88:f6:6f:30:3d:a0: 69:3a:bc:fc:26:d0:35:a6:14:6c:55:04:40:45:be: 40:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8C:86:D0:96:C1:7E:7A:FE:A1:A9:44:2A:E7:75:01:A2:D2:23:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3a2def13-2dce-3fa2-860a-e6001cc8a1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ca:63:69:d5:f8:bb:fd:ec:74:d9:b1:ab:37:d5:98:15:a2: 75:ed:c9:2a:54:98:de:a8:11:bf:4a:5d:21:bc:83:fe:bf:3f: e9:69:1b:d9:a4:36:06:85:3e:dc:1a:95:8d:cb:d3:16:bf:3a: a8:dc:b0:34:d1:cd:8d:97:ed:77:88:9c:6e:b4:12:70:04:c2: e4:80:0a:ce:42:78:ac:46:f9:f9:12:f4:28:c7:7f:d8:53:ad: 85:66:e5:64:75:2b:4b:9b:6d:f7:60:57:0a:8f:4b:44:14:9d: c5:56:59:25:f3:ef:e6:59:ce:ae:bd:93:68:dc:fc:d8:1f:2e: 94:71:86:0c:f4:7f:82:ad:d4:d0:01:8b:9f:d8:05:ff:6a:b9: 3b:a3:c4:73:fa:1a:7f:93:53:7e:a4:70:03:76:a6:09:00:de: 2b:52:74:90:b3:88:ff:6c:47:fb:74:4e:97:bd:f4:95:4e:32: 49:7e:dc:c5:5b:9c:a9:c4:84:be:dc:79:b7:33:75:ca:a1:88: bc:cc:24:cb:a6:7f:e7:bc:cc:e8:50:03:f6:76:bf:d6:fd:2d: bc:61:6f:41:6a:b2:80:00:c4:5d:01:cd:b5:f8:92:b8:41:90: 8f:b1:a8:dc:14:14:c2:4e:b0:49:79:f6:9d:09:4e:12:aa:fb: 7d:92:04:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejrv7Vc0rnf374AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTI3NTliYTEtOGQxYS00OGM5LWEyZjYtMmY4YTAwMDU4YzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQHChCklKEnCYj45jMX/BcIJ7oFPsA/Q0C9p jMuIP9slCfIcRUk69FMl3NipEhTQkeodQ6xokx1F1vJ5WcVzxjm++lRlxQrDKeak oBwFLT2B/nyeE1Dku+pgcEoYimFeZKn9e5cFGvJkZaC2kITYnm2f/PTh/2h05zuH JXoDvQytNJ1+tsHPAxuSLNSZAHXewql96mwYAseLg+PfgsKv7SKXRTmUos7pdRJg S3S5HDU5S3cCouY4QCDNMq3Qoy5a6XqzZKjphFPuzodmBTg9qxwAHEsEM948qU2m 37JkT9VT7PDOWB+ORsOI9m8wPaBpOrz8JtA1phRsVQRARb5AcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2MhtCWwX56/qGpRCrndQGi0iNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2EyZGVmMTMtMmRjZS0z ZmEyLTg2MGEtZTYwMDFjYzhhMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRblMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDKY2nV+Lv97HTZsas31ZgVonXtySpUmN6oEb9KXSG8g/6/P+lpG9mk NgaFPtwalY3L0xa/OqjcsDTRzY2X7XeInG60EnAEwuSACs5CeKxG+fkS9CjHf9hT rYVm5WR1K0ubbfdgVwqPS0QUncVWWSXz7+ZZzq69k2jc/NgfLpRxhgz0f4Kt1NAB i5/YBf9quTujxHP6Gn+TU36kcAN2pgkA3itSdJCziP9sR/t0Tpe99JVOMkl+3MVb nKnEhL7cebczdcqhiLzMJMumf+e8zOhQA/Z2v9b9Lbxhb0FqsoAAxF0BzbX4krhB kI+xqNwUFMJOsEl59p0JThKq+32SBB4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:19 2026 by rpki-client