$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa File: 3f64db9d-d1d8-3530-a912-accd8e8cae42.roa (raw, json) Hash identifier: rnb0g/i35Pomg4jxX2/RYDgS9ZsFDZqJ1AlmN/mHZEA= Subject key identifier: 8B:52:8D:25:DB:E3:96:8A:EB:EB:96:C4:AB:10:46:3F:22:1C:56:05 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A0E25EA2296E2DF12EDD0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:0e:25:ea:22:96:e2:df:12:ed:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=20a4946d-dfac-4e39-8cd6-beae1f05717e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:76:78:cd:38:61:2b:f1:c8:4b:b6:5d:49:52: 39:4c:7e:15:40:fb:6f:60:fd:ee:8b:73:fb:2e:e0: 57:f1:65:d4:0c:4e:3f:ea:24:66:63:37:d0:5a:1a: 25:ea:33:9a:90:df:0f:70:a7:e4:d9:2b:05:77:21: 39:a3:a9:f1:d7:ff:7d:62:32:97:d7:97:ba:bf:41: 70:38:9b:aa:3a:14:b8:84:9d:a0:e7:56:26:bb:8f: a6:2d:7e:a9:2f:a1:49:22:14:78:0c:4b:2e:91:20: 2b:a7:f5:74:d1:71:a3:fc:c3:00:d1:90:f6:f7:30: 8e:57:76:33:e9:65:ce:76:46:c6:86:f1:9d:66:67: 69:13:c7:a8:03:0a:94:b2:95:97:81:d6:b5:ef:37: 6e:3a:1e:a8:6b:2d:11:4e:b0:2c:61:93:e7:1d:e5: 02:b4:87:16:ad:54:5b:76:93:d7:d8:72:97:98:02: 67:e4:a9:f4:e1:ba:29:ec:df:0f:ac:5d:4b:cc:fe: 78:cd:f0:cd:bb:e8:40:47:ad:4d:e5:35:88:ea:68: e8:b0:9e:76:e4:4e:e0:b5:7f:a4:ae:e1:79:b3:29: bf:90:9c:6a:1a:f8:dd:fd:57:e6:d3:6a:53:07:5c: a5:93:17:8a:b0:f4:e6:5f:53:53:7e:1a:4c:8f:3e: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:52:8D:25:DB:E3:96:8A:EB:EB:96:C4:AB:10:46:3F:22:1C:56:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:85:ca:ed:a7:79:37:c8:4c:53:40:c6:97:47:22:bb:3a:31: d4:3b:f2:b0:78:b3:56:9a:81:65:13:f8:90:37:0b:f0:5c:18: cc:be:fb:22:a7:86:70:05:70:67:84:41:67:28:c6:47:01:3e: 22:ae:9c:8c:9c:62:33:39:80:d5:eb:df:c4:ea:3e:e0:04:44: e3:78:74:09:8f:69:32:e0:93:b9:26:29:4a:40:1c:79:8d:b7: 3b:fd:a3:24:94:28:34:63:67:4a:8c:ab:67:89:83:18:42:c3: ce:a1:94:36:ec:d7:e8:4c:a0:41:64:b6:bc:2f:98:56:e4:8a: fb:9d:fb:54:7c:b9:22:1a:64:1b:84:cd:3c:d3:37:64:f4:f2: 07:82:28:8b:53:fa:39:a7:34:d7:e0:34:e3:b6:c7:bd:62:91: ca:f3:83:b4:43:b0:d2:1b:e0:fc:63:67:54:01:ee:9f:d1:61: 60:aa:4a:05:4d:68:91:6b:e0:ff:0e:0e:22:34:45:36:34:80: 71:97:3c:b8:6e:5b:b4:d1:19:bc:79:99:13:3d:d5:e2:b9:6d: 9e:7a:b6:de:32:48:5e:da:5a:a5:e1:64:fa:76:1c:9b:a9:71: bd:57:1c:03:33:f7:47:bf:e4:aa:d4:bb:0c:a2:f1:ea:c8:2a: 72:f7:81:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeg4l6iKW4t8S7dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjBhNDk0NmQtZGZhYy00ZTM5LThjZDYtYmVhZTFmMDU3MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXZ4zThhK/HIS7ZdSVI5TH4VQPtvYP3ui3P7 LuBX8WXUDE4/6iRmYzfQWhol6jOakN8PcKfk2SsFdyE5o6nx1/99YjKX15e6v0Fw OJuqOhS4hJ2g51Ymu4+mLX6pL6FJIhR4DEsukSArp/V00XGj/MMA0ZD29zCOV3Yz 6WXOdkbGhvGdZmdpE8eoAwqUspWXgda17zduOh6oay0RTrAsYZPnHeUCtIcWrVRb dpPX2HKXmAJn5Kn04bop7N8PrF1LzP54zfDNu+hAR61N5TWI6mjosJ525E7gtX+k ruF5sym/kJxqGvjd/Vfm02pTB1ylkxeKsPTmX1NTfhpMjz7C4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItSjSXb45aK6+uWxKsQRj8iHFYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Y2NGRiOWQtZDFkOC0z NTMwLWE5MTItYWNjZDhlOGNhZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+Fyu2neTfITFNAxpdHIrs6MdQ78rB4s1aagWUT+JA3C/BcGMy++yKn hnAFcGeEQWcoxkcBPiKunIycYjM5gNXr38TqPuAERON4dAmPaTLgk7kmKUpAHHmN tzv9oySUKDRjZ0qMq2eJgxhCw86hlDbs1+hMoEFktrwvmFbkivud+1R8uSIaZBuE zTzTN2T08geCKItT+jmnNNfgNOO2x71ikcrzg7RDsNIb4PxjZ1QB7p/RYWCqSgVN aJFr4P8ODiI0RTY0gHGXPLhuW7TRGbx5mRM91eK5bZ56tt4ySF7aWqXhZPp2HJup cb1XHAMz90e/5KrUuwyi8erIKnL3gVo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:39 2026 by rpki-client