$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4d63ab30-aa27-3669-84ae-b496cb926295.roa File: 4d63ab30-aa27-3669-84ae-b496cb926295.roa (raw, json) Hash identifier: iNsqg1KODFO+7mynp77m2C2BWFNlAcepK2SA5kgsN4c= Subject key identifier: 09:49:C1:E9:B5:DE:BD:AA:0F:9F:1F:A4:E5:9A:8F:9C:BC:47:4A:D6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4B9445008A96C89EF818 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4d63ab30-aa27-3669-84ae-b496cb926295.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4b:94:45:00:8a:96:c8:9e:f8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=7b893084-2cab-4b09-bccc-0fee21df821d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:31:82:3b:14:3f:79:9a:e8:0d:45:14:ce:61: 74:2e:84:b5:ca:ed:8f:9e:72:61:5d:f1:83:87:43: 39:55:98:c2:0a:3a:c4:5e:0a:64:c9:b3:02:6a:54: 26:bf:84:79:76:de:b7:82:4e:6f:3a:d4:b3:0e:70: cc:38:56:28:eb:f0:70:10:e2:c2:98:4b:54:8f:59: 0a:d2:63:0d:36:4b:8e:3a:12:6e:1e:93:99:b7:ff: 79:ed:7a:47:98:bc:1d:a6:bb:07:75:79:c7:f9:11: 09:37:f4:4a:4f:0e:e7:81:59:4d:3a:7c:bf:a2:70: 70:71:2f:1c:85:19:b2:00:4d:f8:3a:47:3d:0d:96: 5e:2e:32:31:ae:46:7b:e7:5c:d4:86:cf:a7:56:c8: 4c:e2:71:91:a9:9a:13:a5:ca:41:b6:3f:12:ca:7d: 40:f6:62:f6:b9:25:5b:e6:3f:ff:18:ce:ba:fb:b6: 4e:bf:5d:5a:58:1f:75:ac:2c:96:df:c5:98:ed:27: e3:44:e6:3d:56:cb:2f:86:a2:6a:f2:f7:f5:1b:6a: 1a:46:46:e7:fe:de:3a:a5:69:d2:40:e2:bc:4c:e6: 26:a4:91:05:de:e0:c2:4c:45:0f:2e:3c:67:b4:61: 69:7d:37:52:c6:30:15:b9:c9:b1:d0:38:a0:c8:7f: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:49:C1:E9:B5:DE:BD:AA:0F:9F:1F:A4:E5:9A:8F:9C:BC:47:4A:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4d63ab30-aa27-3669-84ae-b496cb926295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:95:2f:b1:de:b6:51:2d:88:ca:d6:38:9f:88:49:27:89:b4: 39:84:4a:45:9b:18:ab:54:cb:67:14:0c:d5:f7:63:79:a3:cc: ea:f6:c9:5e:c2:60:fb:91:c4:fb:ae:96:88:40:61:99:b1:ba: 3d:d5:67:8c:ac:58:21:2c:9c:a9:36:e5:e9:9b:36:ba:64:f5: f3:21:f3:4d:5a:37:37:f4:b0:25:ff:9a:fb:0a:e8:ed:50:14: 65:b8:e1:22:6f:44:ce:9a:40:0f:91:ee:a0:b4:2a:ab:4d:89: b9:de:1b:84:a6:88:f7:87:97:f4:28:37:07:1c:a2:02:57:65: bf:a1:a8:f2:5f:63:93:ad:6c:7d:74:5e:c4:48:32:4d:4e:5a: 7c:75:86:ca:ff:d5:5b:6a:00:0e:a4:ed:3b:75:08:88:83:35: c5:90:21:03:ca:64:2e:1d:70:17:97:a6:9c:a3:60:60:ca:49: 96:c8:7a:e3:f4:6e:78:30:fb:5f:53:48:e3:80:88:48:01:26: 8c:ea:59:db:7e:27:cc:7f:eb:d4:3e:cc:60:5b:9a:b8:ee:8d: c4:6e:c8:30:8f:47:55:ea:63:a2:60:c1:a7:cf:3c:be:ed:ab: 6a:77:92:04:1d:63:db:f5:b9:a6:9e:62:65:11:88:9e:07:e5: 80:ad:e5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekuURQCKlsie+BgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk N2I4OTMwODQtMmNhYi00YjA5LWJjY2MtMGZlZTIxZGY4MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzGCOxQ/eZroDUUUzmF0LoS1yu2PnnJhXfGD h0M5VZjCCjrEXgpkybMCalQmv4R5dt63gk5vOtSzDnDMOFYo6/BwEOLCmEtUj1kK 0mMNNkuOOhJuHpOZt/957XpHmLwdprsHdXnH+REJN/RKTw7ngVlNOny/onBwcS8c hRmyAE34Okc9DZZeLjIxrkZ751zUhs+nVshM4nGRqZoTpcpBtj8Syn1A9mL2uSVb 5j//GM66+7ZOv11aWB91rCyW38WY7SfjROY9VssvhqJq8vf1G2oaRkbn/t46pWnS QOK8TOYmpJEF3uDCTEUPLjxntGFpfTdSxjAVucmx0DigyH8/TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlJwem13r2qD58fpOWaj5y8R0rWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGQ2M2FiMzAtYWEyNy0z NjY5LTg0YWUtYjQ5NmNiOTI2Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeVL7HetlEtiMrWOJ+ISSeJtDmESkWbGKtUy2cUDNX3Y3mjzOr2yV7C YPuRxPuulohAYZmxuj3VZ4ysWCEsnKk25embNrpk9fMh801aNzf0sCX/mvsK6O1Q FGW44SJvRM6aQA+R7qC0KqtNibneG4SmiPeHl/QoNwccogJXZb+hqPJfY5OtbH10 XsRIMk1OWnx1hsr/1VtqAA6k7Tt1CIiDNcWQIQPKZC4dcBeXppyjYGDKSZbIeuP0 bngw+19TSOOAiEgBJozqWdt+J8x/69Q+zGBbmrjujcRuyDCPR1XqY6JgwafPPL7t q2p3kgQdY9v1uaaeYmURiJ4H5YCt5SI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:58 2026 by rpki-client