$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501dbfab-1dd1-3666-816f-7a6298a6eed5.roa File: 501dbfab-1dd1-3666-816f-7a6298a6eed5.roa (raw, json) Hash identifier: vRj6Ad3CbF+JP2vOT94aJo5pgceBdXcPOI8OlceO+/M= Subject key identifier: 60:21:C4:A8:23:77:D5:84:03:8A:64:71:3C:58:DF:22:E6:3A:E4:46 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379FC7CD6F783A5B92A9F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501dbfab-1dd1-3666-816f-7a6298a6eed5.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fc:7c:d6:f7:83:a5:b9:2a:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=35c10914-3e9f-4d86-9190-581c35e32b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:7d:b8:4a:db:b4:8a:4d:72:b1:cf:64:c2: 26:f1:83:66:7b:90:0c:77:b0:65:82:b2:48:63:a2: bc:13:c6:ef:0d:d3:44:ae:86:45:fb:a4:18:33:64: 09:6c:8b:50:16:b9:00:28:7e:5d:62:f8:64:5b:25: 93:38:af:58:4e:c9:78:c9:90:b8:e1:98:41:aa:cc: 50:95:5f:5f:b9:8d:27:51:6d:ef:b3:b5:28:43:b0: 3e:fa:2d:61:96:be:e7:dc:d7:89:12:8f:0d:e8:a4: 6a:25:b1:61:83:4f:fa:4f:c2:dd:57:76:db:31:11: 6d:39:75:da:40:70:0a:67:08:54:4f:09:3f:95:0c: e3:83:ec:70:4d:32:5b:f2:da:a6:09:30:34:57:a5: 01:da:c1:55:48:73:f7:a1:ea:fe:61:5f:33:e6:d6: 14:8d:40:7e:1e:e9:e4:18:46:7f:4f:e5:ca:3d:9a: 49:b8:dd:b8:9c:d0:b6:76:6b:20:f4:c4:35:41:cd: ec:55:38:7a:c8:45:67:1e:bd:12:f3:6b:d0:10:c9: 77:d2:05:4c:3f:bb:c7:32:f2:7f:df:27:43:12:1c: 31:42:62:e4:b1:3d:b4:2b:7f:75:fc:cd:24:8e:49: 10:75:d3:2f:7b:65:9f:4d:d1:0f:50:01:ca:4b:ce: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:21:C4:A8:23:77:D5:84:03:8A:64:71:3C:58:DF:22:E6:3A:E4:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501dbfab-1dd1-3666-816f-7a6298a6eed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:f3:4b:50:55:47:f7:69:7b:ab:41:17:e3:a5:86:52:b0:d9: 72:de:99:31:c7:46:c3:31:99:5d:e1:1a:fe:6b:f0:18:21:f4: 15:2f:fa:19:d7:c2:d8:ac:e5:e8:c8:fc:c2:84:20:46:01:c5: 5a:72:fd:b0:a2:69:be:00:5d:f7:a3:1e:9d:f0:23:92:cb:73: 87:3a:ec:f4:28:d3:b4:0b:7a:0b:f7:c2:d2:af:17:93:89:e1: 6a:ac:73:bc:73:33:d2:c2:c9:e4:e7:72:31:c9:12:cc:fe:bb: 9f:b8:23:6f:ae:04:85:ef:9d:de:13:65:63:da:a0:20:ec:3c: 58:d7:a3:95:b8:48:45:11:e0:ae:c8:ca:05:db:05:4f:2b:34: dd:d6:20:2e:09:fc:ec:15:35:be:3c:8d:d2:67:d2:09:a3:68: 7e:7b:00:33:47:96:3b:ce:76:52:e0:92:9d:30:32:99:cb:77: 6a:dc:7e:5c:93:5a:97:a9:b0:ad:03:22:e9:33:91:79:2c:99: 52:ef:40:31:fb:8d:fc:33:17:a8:ca:e5:17:b1:9a:85:51:b1: c3:9a:ef:2a:fc:a9:91:26:61:66:e2:8d:1f:20:b7:96:46:5a: 3c:c4:f4:4e:45:ea:3b:22:97:d7:af:d3:64:17:b3:a9:15:17: 9e:d3:67:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefx81veDpbkqnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzVjMTA5MTQtM2U5Zi00ZDg2LTkxOTAtNTgxYzM1ZTMyYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWZ9uErbtIpNcrHPZMIm8YNme5AMd7BlgrJI Y6K8E8bvDdNEroZF+6QYM2QJbItQFrkAKH5dYvhkWyWTOK9YTsl4yZC44ZhBqsxQ lV9fuY0nUW3vs7UoQ7A++i1hlr7n3NeJEo8N6KRqJbFhg0/6T8LdV3bbMRFtOXXa QHAKZwhUTwk/lQzjg+xwTTJb8tqmCTA0V6UB2sFVSHP3oer+YV8z5tYUjUB+Hunk GEZ/T+XKPZpJuN24nNC2dmsg9MQ1Qc3sVTh6yEVnHr0S82vQEMl30gVMP7vHMvJ/ 3ydDEhwxQmLksT20K391/M0kjkkQddMve2WfTdEPUAHKS860GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAhxKgjd9WEA4pkcTxY3yLmOuRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTAxZGJmYWItMWRkMS0z NjY2LTgxNmYtN2E2Mjk4YTZlZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnzS1BVR/dpe6tBF+OlhlKw2XLemTHHRsMxmV3hGv5r8Bgh9BUv+hnX wtis5ejI/MKEIEYBxVpy/bCiab4AXfejHp3wI5LLc4c67PQo07QLegv3wtKvF5OJ 4Wqsc7xzM9LCyeTncjHJEsz+u5+4I2+uBIXvnd4TZWPaoCDsPFjXo5W4SEUR4K7I ygXbBU8rNN3WIC4J/OwVNb48jdJn0gmjaH57ADNHljvOdlLgkp0wMpnLd2rcflyT WpepsK0DIukzkXksmVLvQDH7jfwzF6jK5RexmoVRscOa7yr8qZEmYWbijR8gt5ZG WjzE9E5F6jsil9ev02QXs6kVF57TZxY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:15:24 2026 by rpki-client