$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61e8ffb2-94af-303a-99d6-bbd8fd22c981.roa File: 61e8ffb2-94af-303a-99d6-bbd8fd22c981.roa (raw, json) Hash identifier: kxHphubMtlTFg12rgd9xQrqYzuAGjnvtgRh9bDQMJC4= Subject key identifier: 8F:C6:96:CB:D4:16:EA:97:4C:8E:F2:DE:D0:4C:FD:0A:9E:92:49:D4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A512BFF0E01C20E6C8880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61e8ffb2-94af-303a-99d6-bbd8fd22c981.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:51:2b:ff:0e:01:c2:0e:6c:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6971c1ed-d64f-40a2-82ab-df7e51acd7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:70:12:8b:97:19:81:a0:f7:74:22:19:ba:52: b5:bf:96:3a:c1:2f:4f:69:3a:3f:d4:be:ed:3d:53: ae:5c:71:da:df:94:b0:b9:ad:26:a1:ea:45:b0:0d: 44:0e:18:bc:dc:79:24:bb:4d:e5:e0:8d:27:9f:45: a4:27:ce:a8:ec:e6:eb:72:2b:16:13:55:c2:55:ec: 6d:a1:ed:69:b0:1e:9f:31:89:0b:2c:20:99:15:78: ae:83:63:87:8f:26:7b:86:39:4c:79:6d:25:a2:fe: b6:d0:e5:20:a3:42:4a:d5:01:36:0f:a9:ec:9f:63: 92:7e:58:d9:8a:4f:4f:b1:cb:5f:a8:19:f7:27:14: d9:96:31:5f:dd:64:7a:77:fb:e7:6d:3f:64:2a:39: c0:76:1b:ee:52:73:22:07:16:0e:19:ac:ca:f0:0a: e8:2d:36:20:d5:1f:97:c5:a6:48:2d:ef:05:7a:12: 67:24:1c:e0:cd:e4:73:9e:aa:6b:db:68:ea:70:1d: d5:d4:72:21:b1:85:a3:0d:72:5f:7f:e9:52:a1:87: 56:ae:1f:1c:c5:57:6e:9a:bd:a0:0d:ef:ef:31:f0: 55:14:47:9f:27:db:25:83:3e:00:40:15:90:1b:83: 4f:8a:1e:75:60:b6:e0:a4:9f:52:2f:0d:95:a8:70: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C6:96:CB:D4:16:EA:97:4C:8E:F2:DE:D0:4C:FD:0A:9E:92:49:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61e8ffb2-94af-303a-99d6-bbd8fd22c981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:33:7a:8a:e9:5f:13:37:14:84:7c:3a:1d:67:28:bf:cc:67: 86:29:74:7c:2c:54:28:43:6e:62:98:a7:dd:c2:35:e0:aa:e9: fb:2b:b8:3a:07:b5:75:aa:f1:7e:22:55:93:de:f0:17:10:92: 02:22:1b:b1:21:ab:94:51:26:82:a7:11:8d:bf:d6:6a:e1:4f: df:99:c2:d1:8d:0f:7f:37:49:cb:e0:73:c5:23:c2:6e:10:af: bb:fd:44:e2:8d:29:a9:ac:66:8f:d5:57:32:50:87:72:ee:75: 8e:0e:28:eb:97:d0:31:52:7c:bf:1b:57:69:2e:88:f4:b6:31: a9:9a:2b:f7:7f:25:a7:8c:54:24:11:c3:76:e3:6d:cc:43:f7: 57:89:bf:1f:cd:35:46:36:29:33:58:60:42:cc:5f:e0:d5:f1: 02:6b:7c:89:19:4a:25:e3:85:18:b4:68:96:47:05:6b:b6:ac: 33:88:86:20:d8:aa:1d:cb:0d:32:71:e8:8e:eb:d3:0d:28:77: e9:9b:69:38:88:2d:1d:dd:b6:ee:95:53:3d:75:84:ca:57:77: d3:47:7c:cb:a5:04:af:56:7a:00:42:89:e7:6e:d2:6c:0e:bb: bb:57:71:d5:1a:19:56:b3:e2:8b:8b:37:b6:70:d9:1f:9d:a2: 13:00:15:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelEr/w4Bwg5siIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Njk3MWMxZWQtZDY0Zi00MGEyLTgyYWItZGY3ZTUxYWNkN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnASi5cZgaD3dCIZulK1v5Y6wS9PaTo/1L7t PVOuXHHa35Swua0moepFsA1EDhi83Hkku03l4I0nn0WkJ86o7ObrcisWE1XCVext oe1psB6fMYkLLCCZFXiug2OHjyZ7hjlMeW0lov620OUgo0JK1QE2D6nsn2OSfljZ ik9PsctfqBn3JxTZljFf3WR6d/vnbT9kKjnAdhvuUnMiBxYOGazK8AroLTYg1R+X xaZILe8FehJnJBzgzeRznqpr22jqcB3V1HIhsYWjDXJff+lSoYdWrh8cxVdumr2g De/vMfBVFEefJ9slgz4AQBWQG4NPih51YLbgpJ9SLw2VqHDaOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/GlsvUFuqXTI7y3tBM/QqekknUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjFlOGZmYjItOTRhZi0z MDNhLTk5ZDYtYmJkOGZkMjJjOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACozeorpXxM3FIR8Oh1nKL/MZ4YpdHwsVChDbmKYp93CNeCq6fsruDoH tXWq8X4iVZPe8BcQkgIiG7Ehq5RRJoKnEY2/1mrhT9+ZwtGND383Scvgc8Ujwm4Q r7v9ROKNKamsZo/VVzJQh3LudY4OKOuX0DFSfL8bV2kuiPS2MamaK/d/JaeMVCQR w3bjbcxD91eJvx/NNUY2KTNYYELMX+DV8QJrfIkZSiXjhRi0aJZHBWu2rDOIhiDY qh3LDTJx6I7r0w0od+mbaTiILR3dtu6VUz11hMpXd9NHfMulBK9WegBCiedu0mwO u7tXcdUaGVaz4ouLN7Zw2R+dohMAFRs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:33 2026 by rpki-client