$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa File: 3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa (raw, json) Hash identifier: Hjfx6yQaUWjJ/DtEXJVhln41vq+qll+G473k1CV9+JE= Subject key identifier: DF:F6:9C:2E:93:1A:2B:2C:0D:CE:2E:C3:73:F1:F2:C5:8C:5E:15:C4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A00DE6CE115BCF95E5700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:00:de:6c:e1:15:bc:f9:5e:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=7cdb7f85-77aa-474a-9ec3-e16835737b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5c:ec:da:f5:4c:b4:77:48:45:3e:f9:a5:48: 0f:c9:c6:cb:a4:a5:0e:3f:4a:0b:0b:b7:e5:33:6f: 91:9c:47:3b:9a:75:36:5f:08:93:95:41:74:8f:15: 31:f5:4d:41:22:e6:04:37:8b:0e:e5:e1:55:3b:1e: aa:62:20:f1:10:78:75:45:f4:d6:ce:25:da:9e:19: e7:a8:a5:c1:0e:64:3b:56:b4:70:29:7e:b7:c4:97: bf:ef:ea:7b:97:bc:e9:9c:4b:e1:12:e8:64:fa:74: f9:6d:35:66:b2:87:b7:51:a4:77:81:63:6c:78:2d: 41:41:a4:d9:b0:99:ce:b2:61:d3:c1:93:df:4c:7d: 7f:69:e1:4a:8d:fe:c9:1f:9a:a1:3a:c5:39:44:2c: 31:65:6f:d0:e2:ab:28:5c:cd:1c:b9:c8:48:f6:a1: 72:2c:b4:e1:0f:d7:ce:4c:8f:57:f6:fc:b2:05:08: 19:d7:89:93:a1:49:07:f2:1e:bd:46:d9:d3:98:bd: 9b:0a:d4:0d:f5:a1:a4:3e:ab:0d:1e:e5:27:42:72: ca:86:e0:75:96:2b:fe:82:52:bc:43:e9:af:2e:2f: 13:06:95:37:bb:b9:e3:2c:f1:c6:e0:e2:22:64:d3: 4f:72:bc:d0:0b:06:1e:12:7d:ab:76:87:f8:0c:c9: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F6:9C:2E:93:1A:2B:2C:0D:CE:2E:C3:73:F1:F2:C5:8C:5E:15:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3c69b9a0-33d9-3687-a0c5-07564aedd30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a5:fa:e2:69:28:29:3e:50:59:7c:15:b6:b2:b2:d1:fb:d0: ed:2d:bd:35:06:36:d1:20:b2:ab:f9:52:71:bd:28:87:a8:c4: 5b:d1:c7:87:f5:61:d8:f6:ca:ba:25:c5:3e:5f:74:b1:c9:13: 89:41:0c:57:aa:89:26:58:0d:6a:93:0e:eb:cb:f7:4a:25:6e: 8b:ad:3a:04:f0:a8:49:4c:a7:14:bc:0c:e3:96:31:2c:75:b8: 4a:5c:95:9d:c0:b0:9d:2c:62:d6:1f:4c:02:fb:75:d8:48:bd: 72:1f:9a:43:6d:b5:42:dc:1b:8e:11:f8:af:84:df:d8:2b:1a: 20:f7:28:5b:b7:57:77:b4:bd:cb:d0:33:5b:e5:90:c5:82:15: bb:ec:04:51:1c:69:ea:9f:57:2f:f2:25:15:94:37:ac:d8:e1: fc:5e:31:55:44:fa:70:3d:48:5e:e5:9b:14:61:41:d2:a4:99: e5:51:62:5f:ca:5c:5a:47:23:b9:6f:03:c6:a5:21:3d:4d:f4: ff:6a:21:98:49:78:90:28:26:e7:33:76:90:ec:a2:cc:87:e9: ed:75:91:a6:23:0d:14:3e:2c:b8:a8:d2:86:b7:b8:0e:84:97: 8d:9d:92:5c:35:13:f8:db:75:fd:0a:96:2f:d1:8c:cf:b0:a2: f5:1e:38:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegDebOEVvPleVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk N2NkYjdmODUtNzdhYS00NzRhLTllYzMtZTE2ODM1NzM3Yjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVzs2vVMtHdIRT75pUgPycbLpKUOP0oLC7fl M2+RnEc7mnU2XwiTlUF0jxUx9U1BIuYEN4sO5eFVOx6qYiDxEHh1RfTWziXanhnn qKXBDmQ7VrRwKX63xJe/7+p7l7zpnEvhEuhk+nT5bTVmsoe3UaR3gWNseC1BQaTZ sJnOsmHTwZPfTH1/aeFKjf7JH5qhOsU5RCwxZW/Q4qsoXM0cuchI9qFyLLThD9fO TI9X9vyyBQgZ14mToUkH8h69RtnTmL2bCtQN9aGkPqsNHuUnQnLKhuB1liv+glK8 Q+mvLi8TBpU3u7njLPHG4OIiZNNPcrzQCwYeEn2rdof4DMl2aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/2nC6TGissDc4uw3Px8sWMXhXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2M2OWI5YTAtMzNkOS0z Njg3LWEwYzUtMDc1NjRhZWRkMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACal+uJpKCk+UFl8FbaystH70O0tvTUGNtEgsqv5UnG9KIeoxFvRx4f1 Ydj2yrolxT5fdLHJE4lBDFeqiSZYDWqTDuvL90olboutOgTwqElMpxS8DOOWMSx1 uEpclZ3AsJ0sYtYfTAL7ddhIvXIfmkNttULcG44R+K+E39grGiD3KFu3V3e0vcvQ M1vlkMWCFbvsBFEcaeqfVy/yJRWUN6zY4fxeMVVE+nA9SF7lmxRhQdKkmeVRYl/K XFpHI7lvA8alIT1N9P9qIZhJeJAoJuczdpDsosyH6e11kaYjDRQ+LLio0oa3uA6E l42dklw1E/jbdf0Kli/RjM+wovUeOKQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:37:15 2026 by rpki-client