$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f083e9c-7995-3f8b-8d6a-18f033cb6436.roa File: 3f083e9c-7995-3f8b-8d6a-18f033cb6436.roa (raw, json) Hash identifier: CckHqzjkFQ+PTFPygxjIA+fAzBtw1qFLKt0MVgVrv7k= Subject key identifier: B0:17:A2:13:6B:B1:E2:8F:CA:E0:0A:F0:F5:DD:09:71:8D:F2:33:6D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A0D28C212051C79733CC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f083e9c-7995-3f8b-8d6a-18f033cb6436.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:0d:28:c2:12:05:1c:79:73:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=c20be847-d4f5-45b7-9585-ae01f63831af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:54:73:3e:9b:41:0b:9d:d2:5b:74:e5:c9: 3f:c6:d6:86:a6:cc:40:2c:f2:74:15:7d:60:01:b6: c7:04:00:73:0c:d0:27:27:c8:25:14:65:67:fe:85: d6:78:1f:ea:68:8d:9f:cc:a1:18:31:d6:d5:74:16: 29:26:58:22:38:b8:b7:d6:f3:72:80:2d:1e:90:a3: 8d:e5:e2:96:d5:ff:dc:7a:e5:4b:a7:2f:81:7b:04: 83:b1:5a:d3:fe:de:a6:24:1c:18:7d:35:b2:ed:da: f2:6c:6c:c6:92:88:f1:dc:15:81:b8:e9:37:f7:73: 00:ff:d9:3e:d2:7f:c2:a1:ff:64:b3:b2:3d:51:24: 6c:f5:b9:9b:3f:f3:16:d9:92:51:1e:f8:bb:65:01: 39:cb:da:d9:80:7c:f8:10:6f:b1:c6:57:74:c7:ac: cc:ec:02:39:36:74:a7:03:ad:55:03:8c:c4:1a:45: 55:e2:be:53:96:26:29:0f:38:b0:b5:3b:b4:5a:19: 11:70:23:ce:25:a6:fd:3f:c1:79:1e:be:9f:a0:d8: 80:15:fd:13:bd:3d:01:bf:ca:37:ad:1a:da:21:b6: 6d:dd:6b:fd:f1:4e:0f:db:88:3f:c2:8f:0d:69:f0: 24:5e:40:f1:51:98:61:a4:db:ad:22:00:80:7e:7a: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:17:A2:13:6B:B1:E2:8F:CA:E0:0A:F0:F5:DD:09:71:8D:F2:33:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f083e9c-7995-3f8b-8d6a-18f033cb6436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:25:09:f5:ac:32:bf:6d:3c:84:2f:20:79:32:bc:83:f6:4b: 6f:f8:6e:02:26:26:fd:f8:63:e9:29:4e:35:f4:91:f4:20:10: 4f:49:24:85:17:5f:11:99:45:5a:82:97:5a:84:a3:77:92:47: 79:20:93:ff:b3:67:cb:d5:04:0e:a0:70:87:98:b4:69:cb:55: 97:1f:3a:eb:05:74:33:4a:67:01:7e:b4:ae:69:2f:7c:a9:66: 9f:bf:2d:32:19:b6:c7:d8:9e:6b:b7:2d:0a:4b:72:41:c5:95: cb:1d:9e:8f:91:ed:b5:2a:6f:e4:3a:f5:0c:15:31:48:dd:67: 3a:30:56:52:a6:2f:95:33:8a:30:76:4e:4b:4e:8b:e0:d8:95: ff:f4:0d:15:78:e0:33:6c:32:cb:9e:d0:89:91:3f:6a:11:e2: 33:eb:c0:1e:ea:de:90:6f:14:4d:11:a9:d4:98:0f:2c:d2:77: 58:52:1d:26:a6:d3:78:0e:1f:30:73:d8:e7:23:08:8a:06:4f: d4:67:be:70:49:c1:f3:63:b6:e8:65:65:93:a3:34:97:dd:64: 3b:40:20:8f:81:36:8d:1d:14:1b:44:e3:3d:80:e0:18:39:81: 88:e4:ec:cb:cf:25:01:b5:0b:13:38:c5:50:1e:51:ac:91:90: 2b:b3:4f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeg0owhIFHHlzPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YzIwYmU4NDctZDRmNS00NWI3LTk1ODUtYWUwMWY2MzgzMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0dUcz6bQQud0lt05ck/xtaGpsxALPJ0FX1g AbbHBABzDNAnJ8glFGVn/oXWeB/qaI2fzKEYMdbVdBYpJlgiOLi31vNygC0ekKON 5eKW1f/ceuVLpy+BewSDsVrT/t6mJBwYfTWy7drybGzGkojx3BWBuOk393MA/9k+ 0n/Cof9ks7I9USRs9bmbP/MW2ZJRHvi7ZQE5y9rZgHz4EG+xxld0x6zM7AI5NnSn A61VA4zEGkVV4r5TliYpDziwtTu0WhkRcCPOJab9P8F5Hr6foNiAFf0TvT0Bv8o3 rRraIbZt3Wv98U4P24g/wo8NafAkXkDxUZhhpNutIgCAfnpC4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAXohNrseKPyuAK8PXdCXGN8jNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2YwODNlOWMtNzk5NS0z ZjhiLThkNmEtMThmMDMzY2I2NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKglCfWsMr9tPIQvIHkyvIP2S2/4bgImJv34Y+kpTjX0kfQgEE9JJIUX XxGZRVqCl1qEo3eSR3kgk/+zZ8vVBA6gcIeYtGnLVZcfOusFdDNKZwF+tK5pL3yp Zp+/LTIZtsfYnmu3LQpLckHFlcsdno+R7bUqb+Q69QwVMUjdZzowVlKmL5UzijB2 TktOi+DYlf/0DRV44DNsMsue0ImRP2oR4jPrwB7q3pBvFE0RqdSYDyzSd1hSHSam 03gOHzBz2OcjCIoGT9RnvnBJwfNjtuhlZZOjNJfdZDtAII+BNo0dFBtE4z2A4Bg5 gYjk7MvPJQG1CxM4xVAeUayRkCuzT3Q= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:48 2026 by rpki-client