$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa File: 4376d315-6a36-3312-aa90-2c446e1e3899.roa (raw, json) Hash identifier: fmt7aJEBGdu4cDMdzio8Qe0bdDON7mquEmImXvUskpw= Subject key identifier: 07:E0:55:E2:5C:4B:C2:11:36:FD:D0:93:BF:53:85:1A:B6:BF:C8:BD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A61C8395B91B208667CC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 65.22.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:61:c8:39:5b:91:b2:08:66:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=47f279de-3c37-467d-87d7-0e6adfb60aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:ab:db:f8:52:b8:28:32:2c:dd:bd:6d:04: 5e:fa:ed:70:e4:53:33:c3:0c:14:af:25:33:1f:3d: 10:29:7c:69:1b:05:9a:56:cb:f8:84:84:dc:20:03: 66:f2:f3:b4:ad:11:3c:a4:18:93:d8:af:90:d0:81: 9a:fe:54:e1:0d:41:15:f9:26:26:d2:86:aa:fd:ec: 7b:be:d7:91:1a:e3:00:22:70:fb:84:38:f2:b4:f5: 62:c7:b3:e6:63:1d:fe:8a:d8:f5:d6:77:d9:d0:94: 6c:89:e7:88:71:a0:0d:9e:15:b7:18:dc:7d:37:1a: 94:03:89:a6:25:7e:ad:50:68:59:4b:d6:7c:35:f8: ed:ae:17:65:11:b3:4e:5b:ed:14:4e:e7:ee:63:23: 1c:83:30:f7:68:d4:1b:28:4c:0f:38:99:09:32:9b: bb:46:74:3e:92:ba:d5:f2:7a:20:59:78:dc:44:47: 2a:13:1f:55:a1:ce:2e:3f:d5:13:ef:a0:66:a5:5b: 9e:7c:0a:d3:3b:fe:f6:0e:35:e7:27:85:2e:7b:85: 98:a8:4a:d8:e0:8a:56:86:b0:bd:f0:f4:82:ef:ab: 50:6c:6e:d7:99:f7:09:31:2a:37:48:a5:59:33:ed: ff:1c:d5:8e:c9:eb:7d:6e:df:d7:d9:3f:cd:8a:16: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E0:55:E2:5C:4B:C2:11:36:FD:D0:93:BF:53:85:1A:B6:BF:C8:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4376d315-6a36-3312-aa90-2c446e1e3899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:aa:c6:ad:44:4b:30:02:1f:b3:ac:f5:19:c6:f1:99:23:93: e6:b2:60:ee:67:5b:09:e6:7a:b3:ad:fe:c0:8a:f3:92:d4:cf: 6e:f0:f0:47:aa:6a:95:c6:35:8a:65:d1:59:3b:eb:a6:8b:9f: d9:81:65:d7:f7:ae:44:98:cb:b7:74:2d:05:83:d3:7e:2a:4d: 25:61:4f:c2:f5:f8:ce:6a:8c:ea:f4:b4:41:8f:95:e1:5f:5c: e5:d3:bb:2a:b1:6e:0d:3c:aa:c7:4b:2a:0d:38:79:9e:80:90: f8:58:b3:b6:c8:0f:a2:62:83:c8:8b:6b:12:55:01:19:fb:5b: 52:60:6c:c3:c9:32:b0:5c:18:7c:8e:4b:95:1e:ad:50:f0:2b: 3a:3b:74:b2:fd:44:15:ed:34:86:d1:1b:95:78:cb:3f:5b:2c: ab:a7:a2:b0:17:a2:d8:4a:88:24:f2:87:fb:01:ea:ba:11:62: d9:b0:4d:96:49:44:b1:b6:54:76:8c:6c:42:e4:95:e0:49:ac: ac:01:79:b2:f3:b2:4d:9b:22:4c:12:3e:60:12:67:89:89:90: 63:93:e7:6f:74:e6:1f:d5:1a:e0:f6:fe:0d:6f:12:75:86:16: 75:fd:0e:bd:67:56:e2:0f:e5:42:63:aa:c7:42:0c:84:e4:cd: 05:69:d1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemHIOVuRsghmfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDdmMjc5ZGUtM2MzNy00NjdkLTg3ZDctMGU2YWRmYjYwYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouSr2/hSuCgyLN29bQRe+u1w5FMzwwwUryUz Hz0QKXxpGwWaVsv4hITcIANm8vO0rRE8pBiT2K+Q0IGa/lThDUEV+SYm0oaq/ex7 vteRGuMAInD7hDjytPVix7PmYx3+itj11nfZ0JRsieeIcaANnhW3GNx9NxqUA4mm JX6tUGhZS9Z8NfjtrhdlEbNOW+0UTufuYyMcgzD3aNQbKEwPOJkJMpu7RnQ+krrV 8nogWXjcREcqEx9Voc4uP9UT76BmpVuefArTO/72DjXnJ4Uue4WYqErY4IpWhrC9 8PSC76tQbG7XmfcJMSo3SKVZM+3/HNWOyet9bt/X2T/NihbdKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfgVeJcS8IRNv3Qk79ThRq2v8i9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDM3NmQzMTUtNmEzNi0z MzEyLWFhOTAtMmM0NDZlMWUzODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKqxq1ESzACH7Os9RnG8Zkjk+ayYO5nWwnmerOt/sCK85LUz27w8Eeq apXGNYpl0Vk766aLn9mBZdf3rkSYy7d0LQWD034qTSVhT8L1+M5qjOr0tEGPleFf XOXTuyqxbg08qsdLKg04eZ6AkPhYs7bID6Jig8iLaxJVARn7W1JgbMPJMrBcGHyO S5UerVDwKzo7dLL9RBXtNIbRG5V4yz9bLKunorAXothKiCTyh/sB6roRYtmwTZZJ RLG2VHaMbELkleBJrKwBebLzsk2bIkwSPmASZ4mJkGOT52905h/VGuD2/g1vEnWG FnX9Dr1nVuIP5UJjqsdCDITkzQVp0Rs= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:34 2026 by rpki-client