$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4725fcfe-b6f5-3187-a026-4e534e121a37.roa File: 4725fcfe-b6f5-3187-a026-4e534e121a37.roa (raw, json) Hash identifier: hXLlaRbvQq8B75EwPI1KfrhPAg7lntKzesjahegQj4Y= Subject key identifier: 05:42:85:9F:F7:D3:CF:1C:23:E5:E5:15:7D:37:2F:73:AA:8B:6F:84 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A728F475181232E0D8F40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4725fcfe-b6f5-3187-a026-4e534e121a37.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 65.22.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:72:8f:47:51:81:23:2e:0d:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=d4f13ea2-7927-4d6f-8634-06ebc4bb0697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:ae:9f:7c:d3:e7:68:dc:25:81:03:ef:50: e3:5a:47:ef:0b:4c:89:61:aa:d9:30:df:a3:68:64: ef:49:7e:fe:74:4f:44:e4:63:19:cf:1c:d3:7c:20: 8c:33:a0:65:a8:81:78:39:ae:5b:19:aa:7c:c0:64: cf:19:9a:c3:e9:65:ab:49:d6:eb:e8:e3:00:24:31: 5f:8b:ab:e3:ef:c8:ab:73:81:b8:3e:0f:8f:10:d9: f5:8a:07:25:94:5a:ea:41:df:b0:8f:b9:9c:d1:52: 84:83:30:b8:93:e1:38:9f:77:13:20:cd:0b:1a:6e: 1f:27:07:1d:a4:cd:14:87:ad:9f:8b:e7:16:55:38: aa:57:57:e5:0a:db:60:2f:c2:45:00:43:4c:d9:db: 17:4a:56:79:e2:3e:0a:76:f7:3d:da:e2:90:f1:20: d5:46:d1:7d:0c:86:73:65:7f:ba:62:84:02:18:6f: 96:dd:1c:56:78:d8:eb:05:26:dd:d1:0d:39:72:cd: ba:5e:a3:88:e2:41:8c:da:ca:ad:78:a4:7e:53:c6: 9c:13:06:af:45:aa:6f:7f:41:1a:d9:45:ba:b7:69: 79:67:ad:06:7e:3e:01:77:81:55:6b:4f:ed:34:b7: 1f:b8:0a:56:f2:e6:71:6c:b0:38:5e:a4:75:b8:13: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:42:85:9F:F7:D3:CF:1C:23:E5:E5:15:7D:37:2F:73:AA:8B:6F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4725fcfe-b6f5-3187-a026-4e534e121a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ed:1e:59:9c:01:c5:6a:49:94:32:9b:d0:18:0c:74:ab:ba: fa:e2:35:07:5f:82:28:b1:e3:4c:4c:2c:e2:6e:9f:c2:a5:04: 05:0e:ef:b2:b1:91:93:66:46:dd:b0:14:03:5e:e4:eb:53:ca: e5:16:b7:cb:df:44:58:9e:1f:45:c5:86:b1:50:e4:91:7b:eb: 0c:70:f0:d9:e9:5b:8a:47:2f:4a:c4:30:90:88:3f:1a:bd:ed: 3d:ca:40:fa:71:5c:fd:10:92:b8:76:73:59:52:fe:9f:19:31: d9:3d:65:b5:5a:52:17:90:29:c0:18:2b:5c:15:4c:f2:03:bc: de:74:66:0d:23:9f:4e:cb:89:33:89:a8:88:8d:13:95:45:37: a7:ea:0e:29:61:af:ad:aa:74:14:92:21:07:3a:c3:ec:6c:de: 41:23:c5:a3:ed:25:6d:fa:23:b9:a4:a2:2e:b8:e1:36:10:44: fb:fd:0b:07:43:bd:f6:c4:92:7d:08:37:36:2b:be:2e:68:41: ce:bb:0a:e8:bd:07:ab:e7:68:97:be:22:e4:d8:03:23:5e:91: 7b:4f:59:43:f3:0d:ab:db:44:95:6e:d2:45:9f:37:34:18:9d: 95:c2:6b:c6:7d:b5:43:d7:47:8d:44:db:52:3d:8d:34:ad:f9: 5a:ab:f4:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jenKPR1GBIy4Nj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDRmMTNlYTItNzkyNy00ZDZmLTg2MzQtMDZlYmM0YmIwNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxGun3zT52jcJYED71DjWkfvC0yJYarZMN+j aGTvSX7+dE9E5GMZzxzTfCCMM6BlqIF4Oa5bGap8wGTPGZrD6WWrSdbr6OMAJDFf i6vj78irc4G4Pg+PENn1igcllFrqQd+wj7mc0VKEgzC4k+E4n3cTIM0LGm4fJwcd pM0Uh62fi+cWVTiqV1flCttgL8JFAENM2dsXSlZ54j4Kdvc92uKQ8SDVRtF9DIZz ZX+6YoQCGG+W3RxWeNjrBSbd0Q05cs26XqOI4kGM2sqteKR+U8acEwavRapvf0Ea 2UW6t2l5Z60Gfj4Bd4FVa0/tNLcfuApW8uZxbLA4XqR1uBOzqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVChZ/3088cI+XlFX03L3Oqi2+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDcyNWZjZmUtYjZmNS0z MTg3LWEwMjYtNGU1MzRlMTIxYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHtHlmcAcVqSZQym9AYDHSruvriNQdfgiix40xMLOJun8KlBAUO77Kx kZNmRt2wFANe5OtTyuUWt8vfRFieH0XFhrFQ5JF76wxw8NnpW4pHL0rEMJCIPxq9 7T3KQPpxXP0Qkrh2c1lS/p8ZMdk9ZbVaUheQKcAYK1wVTPIDvN50Zg0jn07LiTOJ qIiNE5VFN6fqDilhr62qdBSSIQc6w+xs3kEjxaPtJW36I7mkoi644TYQRPv9CwdD vfbEkn0INzYrvi5oQc67Cui9B6vnaJe+IuTYAyNekXtPWUPzDavbRJVu0kWfNzQY nZXCa8Z9tUPXR41E21I9jTSt+Vqr9Go= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:11 2026 by rpki-client