$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa File: 3cb5c865-56bc-36bb-9781-6328ac6934e4.roa (raw, json) Hash identifier: iufK+u2KPU6GQ+BpddURxKRrkxB0rTKOQDxmYJqDLrY= Subject key identifier: 10:CF:BA:BD:B2:16:55:45:C6:AA:5C:20:FD:61:19:25:22:D2:FB:A7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A08B438871C0876FCC100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:08:b4:38:87:1c:08:76:fc:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ae7dc081-9c31-4850-8849-a44472a53a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:88:46:a0:9d:93:fc:42:2c:17:9d:93:a5: 49:f9:a3:86:8d:6f:f8:57:58:8a:8d:ff:45:e8:d4: 77:59:13:04:e5:92:bd:d6:89:65:2f:33:f4:66:de: 4c:cf:c7:0e:f5:4e:9e:9a:0a:79:4b:15:a4:26:05: 9c:f8:c9:51:88:5e:a4:0f:f4:50:69:e2:03:cc:ff: 9e:e2:5a:54:bf:73:8c:2c:d6:28:82:2a:69:b8:c5: 1e:29:fc:29:0b:d8:22:4d:90:c2:0f:b8:5e:01:ae: 98:e1:e7:06:9e:96:b6:f2:ce:0b:03:1a:c2:c8:fd: ef:63:12:00:db:ef:5c:6a:ff:29:6a:38:6a:ce:b9: 4c:62:22:1d:26:e9:51:0d:bd:81:90:b5:2f:d9:a8: 38:cb:4c:10:54:34:cd:7f:7f:b3:aa:68:2c:0b:2b: dc:99:e7:f4:72:f6:ad:28:25:38:33:56:87:b6:93: 22:dd:5f:cd:d1:89:6a:bb:96:d5:3e:cb:11:74:42: 89:95:88:73:52:63:3d:27:b2:c1:f1:a1:6e:94:0e: 8d:43:e4:79:2a:b4:75:97:c9:d1:93:7b:e1:d5:3b: 2f:a6:b4:8c:ad:df:92:fa:ff:64:da:6b:6b:39:f3: 55:49:fa:d1:d0:c6:a3:0b:6f:41:3a:d7:6e:48:57: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CF:BA:BD:B2:16:55:45:C6:AA:5C:20:FD:61:19:25:22:D2:FB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:de:fc:7b:46:eb:08:14:14:a1:78:2f:02:c3:13:4d:62:a3: 46:45:5e:64:80:65:ef:9d:5d:14:fc:fa:40:52:44:b3:80:a3: 1a:81:70:c7:f1:4d:35:dc:a8:19:97:d0:71:8d:7d:c0:1a:6f: eb:c4:c8:4f:9a:4f:d9:53:db:dd:e7:41:36:e4:9b:26:e7:bf: d4:c4:1d:7b:e1:88:0b:e6:a9:fd:28:bd:4d:87:77:ac:18:f7: 8c:71:64:09:b7:06:d2:b5:84:b9:36:b6:87:9b:dd:b4:51:3b: 9c:b8:b2:e0:3b:6c:d2:ca:00:a2:86:00:b7:fe:a7:25:64:d6: 01:dc:dc:40:e1:87:b3:33:bc:f5:fc:42:c4:33:04:9a:58:11: 60:41:51:bc:c4:c7:64:eb:d6:08:03:a3:80:a6:d5:c3:dd:5b: 1e:95:9a:37:90:27:2c:87:61:cf:62:51:6a:a6:8d:25:2f:dd: d6:94:31:32:a7:7e:aa:2f:14:06:a6:45:62:f6:95:bf:89:db: 61:ba:63:2e:6b:db:71:4c:b4:32:ee:66:c3:0c:14:71:69:bf: 9e:ec:47:6d:e6:33:b8:f2:19:ae:49:eb:58:01:09:a7:27:31: ee:5f:f3:f2:f8:d9:58:af:2e:56:4f:8b:ad:55:e1:e2:b8:ec: de:31:12:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegi0OIccCHb8wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YWU3ZGMwODEtOWMzMS00ODUwLTg4NDktYTQ0NDcyYTUzYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDyIRqCdk/xCLBedk6VJ+aOGjW/4V1iKjf9F 6NR3WRME5ZK91ollLzP0Zt5Mz8cO9U6emgp5SxWkJgWc+MlRiF6kD/RQaeIDzP+e 4lpUv3OMLNYogippuMUeKfwpC9giTZDCD7heAa6Y4ecGnpa28s4LAxrCyP3vYxIA 2+9cav8pajhqzrlMYiIdJulRDb2BkLUv2ag4y0wQVDTNf3+zqmgsCyvcmef0cvat KCU4M1aHtpMi3V/N0Ylqu5bVPssRdEKJlYhzUmM9J7LB8aFulA6NQ+R5KrR1l8nR k3vh1TsvprSMrd+S+v9k2mtrOfNVSfrR0MajC29BOtduSFfYDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDPur2yFlVFxqpcIP1hGSUi0vunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NiNWM4NjUtNTZiYy0z NmJiLTk3ODEtNjMyOGFjNjkzNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXe/HtG6wgUFKF4LwLDE01io0ZFXmSAZe+dXRT8+kBSRLOAoxqBcMfx TTXcqBmX0HGNfcAab+vEyE+aT9lT293nQTbkmybnv9TEHXvhiAvmqf0ovU2Hd6wY 94xxZAm3BtK1hLk2toeb3bRRO5y4suA7bNLKAKKGALf+pyVk1gHc3EDhh7MzvPX8 QsQzBJpYEWBBUbzEx2Tr1ggDo4Cm1cPdWx6VmjeQJyyHYc9iUWqmjSUv3daUMTKn fqovFAamRWL2lb+J22G6Yy5r23FMtDLuZsMMFHFpv57sR23mM7jyGa5J61gBCacn Me5f8/L42VivLlZPi61V4eK47N4xEj4= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:19 2026 by rpki-client