$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa File: 4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa (raw, json) Hash identifier: zbAvh/hVZaspPWbQ9MQE5kipv8b4mftNf6b/sbC7y9E= Subject key identifier: FC:E9:C1:60:0E:CC:33:7B:7B:42:94:3B:EB:90:BF:FB:E1:8F:25:0A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A07A86BA231669BFD9380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:07:a8:6b:a2:31:66:9b:fd:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9ab00753-69d8-4a1a-9f47-917c8c296f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:76:bc:9c:e9:d3:58:b8:46:4f:e3:e4:22: a5:de:4b:04:e0:e5:ad:8e:97:0e:d7:98:6b:ef:73: 66:90:fe:fa:0e:5a:a5:a6:3c:b6:99:93:93:03:ac: 03:ea:4e:84:09:1c:f0:d6:98:d5:b1:66:cd:27:57: 9b:c2:94:d8:2d:05:3f:09:84:dc:4c:b4:41:fb:06: d3:f5:82:6c:f2:12:50:91:03:fc:9c:c8:4f:65:e3: d2:49:f3:6e:69:f6:2b:81:44:a7:32:13:9a:7e:6d: 11:c5:cc:2e:84:14:f9:2c:20:84:a5:09:a6:1c:5f: 16:55:aa:ca:7c:85:fd:5b:04:7c:f7:c9:27:cd:1c: 08:90:9f:3c:cf:b7:ad:0d:7b:98:0a:7a:18:cd:8a: da:fd:bb:f2:16:75:87:40:e4:2a:c6:26:a4:2a:88: 86:59:77:fe:4a:18:a4:07:f4:89:c3:b4:ad:22:bf: 67:df:11:fc:c5:cd:77:92:d3:2b:52:ed:37:01:14: 7c:20:8a:3d:45:e2:e9:3f:b7:59:8f:30:85:f3:87: 67:53:58:46:d3:0d:37:c3:3f:71:4d:d4:0b:31:7f: 53:02:4a:eb:4f:be:65:b9:9e:e1:8c:67:38:96:d4: d5:19:0c:43:2d:4f:15:70:55:4f:cd:47:91:17:45: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E9:C1:60:0E:CC:33:7B:7B:42:94:3B:EB:90:BF:FB:E1:8F:25:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4bd2f013-6568-39e8-9ce3-1a1068f281b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a7:3e:cc:02:a6:59:4c:30:f4:a3:f5:5c:87:17:c4:80:f3: a8:59:3c:e7:d4:36:fc:8c:e7:80:5f:61:d3:d0:b7:a8:3a:11: 48:ff:06:fa:eb:f2:69:07:8e:ef:f6:0d:11:df:81:6f:65:eb: ac:fb:bd:99:b7:e1:88:72:74:e7:d7:c2:5b:32:3e:8f:28:69: d5:6a:56:17:22:63:4b:06:22:5e:8c:01:f1:44:0b:ac:ca:ec: 70:72:fd:f6:ed:b4:91:c3:e2:48:71:6b:d2:b0:57:df:0c:a7: 0b:88:c3:54:50:e8:55:d8:69:ae:fe:2c:d9:3d:89:6b:23:4d: c3:2d:33:31:87:18:d3:98:fe:20:d9:c8:5b:f2:2e:d2:04:21: a3:b1:a3:d6:9d:c5:99:aa:d8:e0:99:bf:3d:8b:b6:7d:bf:ee: 92:c9:b7:41:34:40:4e:bc:74:99:86:27:a9:a3:9a:61:66:cb: 0e:6e:ef:0b:d4:98:2e:e6:58:c7:ac:22:bd:bc:6a:26:16:fa: 0e:46:c9:0f:ac:7b:ba:2f:57:17:02:a4:fd:72:36:8f:93:3f: c1:74:34:dc:51:e4:25:eb:ed:fe:bb:9f:75:4e:f4:6d:2d:c2: 15:d6:f3:e8:45:c7:bb:a1:86:75:df:7c:27:4b:07:fa:7a:0e: 54:1d:00:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegeoa6IxZpv9k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OWFiMDA3NTMtNjlkOC00YTFhLTlmNDctOTE3YzhjMjk2ZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr12vJzp01i4Rk/j5CKl3ksE4OWtjpcO15hr 73NmkP76Dlqlpjy2mZOTA6wD6k6ECRzw1pjVsWbNJ1ebwpTYLQU/CYTcTLRB+wbT 9YJs8hJQkQP8nMhPZePSSfNuafYrgUSnMhOafm0RxcwuhBT5LCCEpQmmHF8WVarK fIX9WwR898knzRwIkJ88z7etDXuYCnoYzYra/bvyFnWHQOQqxiakKoiGWXf+Shik B/SJw7StIr9n3xH8xc13ktMrUu03ARR8IIo9ReLpP7dZjzCF84dnU1hG0w03wz9x TdQLMX9TAkrrT75luZ7hjGc4ltTVGQxDLU8VcFVPzUeRF0WcEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzpwWAOzDN7e0KUO+uQv/vhjyUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGJkMmYwMTMtNjU2OC0z OWU4LTljZTMtMWExMDY4ZjI4MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+nPswCpllMMPSj9VyHF8SA86hZPOfUNvyM54BfYdPQt6g6EUj/Bvrr 8mkHju/2DRHfgW9l66z7vZm34YhydOfXwlsyPo8oadVqVhciY0sGIl6MAfFEC6zK 7HBy/fbttJHD4khxa9KwV98MpwuIw1RQ6FXYaa7+LNk9iWsjTcMtMzGHGNOY/iDZ yFvyLtIEIaOxo9adxZmq2OCZvz2Ltn2/7pLJt0E0QE68dJmGJ6mjmmFmyw5u7wvU mC7mWMesIr28aiYW+g5GyQ+se7ovVxcCpP1yNo+TP8F0NNxR5CXr7f67n3VO9G0t whXW8+hFx7uhhnXffCdLB/p6DlQdAIU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:23 2026 by rpki-client