$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa File: 3de969ab-1b6a-3c75-99c4-6b44162fead1.roa (raw, json) Hash identifier: NaIrsIjxUyIFUUu8hO3yfPtSpOHV1NdQdLofnOkZ8ow= Subject key identifier: 83:7C:ED:5D:61:42:A1:8B:6B:09:58:12:F9:AF:24:2F:19:1B:B6:0F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1AB6337E0BA36CA51B24 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1a:b6:33:7e:0b:a3:6c:a5:1b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=bc8ecd66-637c-4e35-9840-b05b4a9d2e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:41:ed:ec:9e:0d:9e:6c:20:96:2a:12:04: bb:43:80:43:80:5d:32:85:3d:ed:d1:1b:76:6d:3b: 7d:19:69:2d:52:56:5c:82:2f:a2:a2:94:8a:4f:89: fb:04:0b:f3:66:9c:4f:de:21:1b:d0:ba:a6:5b:1a: 89:51:6e:1f:c6:50:77:4a:95:4d:dc:1f:bf:ba:a0: 37:bf:6c:82:17:ce:20:cc:dd:29:d1:2a:b0:a6:b8: 26:b0:c1:f3:fe:f2:c8:5e:ac:ef:b8:7b:2b:e2:3a: 3b:9c:d0:46:b0:f9:5c:ab:7d:b8:50:f5:88:9c:44: 63:37:10:69:4b:45:fe:ca:c1:60:1d:60:22:fe:18: 38:ee:74:b6:67:f2:f2:79:72:28:69:7c:19:d9:40: 8b:f1:93:02:4c:7b:92:fd:73:ae:0e:04:5a:c5:0f: 67:51:4c:37:c1:28:fe:24:a0:6b:5f:b2:50:e2:98: 05:3b:f0:15:11:88:ce:b1:56:4a:04:f7:aa:d1:61: 1c:06:20:6b:d9:ba:d4:4d:d8:b0:51:7c:08:28:42: f0:6e:cb:01:ec:1a:c5:d8:79:12:f6:26:9a:24:bd: 80:e1:fc:de:87:78:77:84:1f:f2:4a:ea:60:bb:3b: ec:85:bf:94:19:f4:99:54:2c:2a:de:93:19:3c:b7: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7C:ED:5D:61:42:A1:8B:6B:09:58:12:F9:AF:24:2F:19:1B:B6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3de969ab-1b6a-3c75-99c4-6b44162fead1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:77:c3:d1:1f:98:a7:f8:f1:16:7c:18:e9:48:54:6f:21:f3: 9e:89:28:68:7b:ec:db:a3:2a:82:2d:e0:b1:9d:2f:dd:d5:05: 3d:9b:6a:f0:85:1c:d2:0b:7c:5a:ef:67:61:74:29:56:72:d3: b8:74:98:b0:1c:f0:f3:83:b9:4b:b8:ec:3f:06:bf:6f:6e:ff: 23:36:08:e4:6e:58:ba:2a:6a:07:22:88:80:2b:6e:a3:9d:56: 6d:92:d7:a6:fd:4c:11:5e:5f:e7:15:a4:ff:57:ea:cd:8a:55: 2d:f5:08:1f:96:a3:02:4a:85:3c:1b:09:48:f8:56:2f:0a:62: a7:19:03:5c:73:a9:2e:e3:0c:cf:23:9f:2e:45:2f:cf:be:5d: 6b:e0:44:6b:71:91:d7:c1:e5:2b:a6:c5:be:5f:6d:fa:da:a9: 3c:c6:23:6a:39:d1:15:cf:03:e9:9c:b7:16:62:c5:98:45:25: 49:2f:c6:16:0f:51:98:26:e1:29:15:05:2a:88:b7:99:b5:f5: ed:23:f5:95:62:8e:04:d3:da:3a:da:52:38:09:8f:44:dc:02: 54:de:4f:3f:9b:d8:0d:c1:af:0d:bf:85:1a:1d:f4:33:07:65: c5:46:c0:32:6c:b8:43:d6:9e:bc:4a:02:58:fb:92:0a:33:86: 18:7f:af:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehq2M34Lo2ylGyQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YmM4ZWNkNjYtNjM3Yy00ZTM1LTk4NDAtYjA1YjRhOWQyZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxExB7eyeDZ5sIJYqEgS7Q4BDgF0yhT3t0Rt2 bTt9GWktUlZcgi+iopSKT4n7BAvzZpxP3iEb0LqmWxqJUW4fxlB3SpVN3B+/uqA3 v2yCF84gzN0p0SqwprgmsMHz/vLIXqzvuHsr4jo7nNBGsPlcq324UPWInERjNxBp S0X+ysFgHWAi/hg47nS2Z/LyeXIoaXwZ2UCL8ZMCTHuS/XOuDgRaxQ9nUUw3wSj+ JKBrX7JQ4pgFO/AVEYjOsVZKBPeq0WEcBiBr2brUTdiwUXwIKELwbssB7BrF2HkS 9iaaJL2A4fzeh3h3hB/ySupguzvshb+UGfSZVCwq3pMZPLdCZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIN87V1hQqGLawlYEvmvJC8ZG7YPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2RlOTY5YWItMWI2YS0z Yzc1LTk5YzQtNmI0NDE2MmZlYWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx3w9EfmKf48RZ8GOlIVG8h856JKGh77NujKoIt4LGdL93VBT2bavCF HNILfFrvZ2F0KVZy07h0mLAc8PODuUu47D8Gv29u/yM2CORuWLoqagciiIArbqOd Vm2S16b9TBFeX+cVpP9X6s2KVS31CB+WowJKhTwbCUj4Vi8KYqcZA1xzqS7jDM8j ny5FL8++XWvgRGtxkdfB5Sumxb5fbfraqTzGI2o50RXPA+mctxZixZhFJUkvxhYP UZgm4SkVBSqIt5m19e0j9ZVijgTT2jraUjgJj0TcAlTeTz+b2A3Brw2/hRod9DMH ZcVGwDJsuEPWnrxKAlj7kgozhhh/r8A= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:19 2026 by rpki-client