$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6d87e6bc-2296-3c9d-b105-558f88df0a3c.roa File: 6d87e6bc-2296-3c9d-b105-558f88df0a3c.roa (raw, json) Hash identifier: ltQcMsJR0blSI7MTQiHIRtXg/Wg4dqsHz3K22aOLy/E= Subject key identifier: C5:DF:03:BE:1B:A5:98:2D:29:AE:4C:D0:8D:F8:DB:10:E0:3B:A7:13 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A42ED497209672B712E80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6d87e6bc-2296-3c9d-b105-558f88df0a3c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:42:ed:49:72:09:67:2b:71:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ee1ec346-4e1d-4214-8bb4-991289ca6ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c7:28:46:4a:9d:b1:ce:2b:ea:24:34:25:98: 02:eb:44:a4:79:7b:d7:82:d2:fc:db:24:e8:c0:ed: 0a:67:6d:6a:17:39:4c:83:a9:eb:24:22:6d:d5:8a: f7:fc:dd:48:26:e5:f4:9f:a4:7f:84:df:86:67:f6: a9:3a:56:6a:c2:2e:99:17:f0:57:96:1b:11:fb:e3: e3:61:c9:4d:29:3b:5d:9d:cc:5a:10:4f:ee:cf:c2: ff:4c:69:4a:79:8d:31:91:4c:2e:70:99:82:37:97: 4f:b3:77:f8:25:d5:b5:c0:f5:53:70:36:4e:c1:73: f1:cc:90:d9:ae:cb:9b:e2:f6:d6:58:2a:33:b7:8e: 3c:dc:e6:89:86:7f:b4:38:b3:31:58:a7:21:71:f8: 5a:22:0b:2c:6a:29:48:f3:42:f1:66:a5:d6:d5:a7: c1:16:df:ac:d6:75:1f:90:af:26:0c:4c:90:a1:eb: 96:c0:2c:fd:26:52:0a:84:a2:cd:4e:ff:55:34:ac: 4b:bf:42:df:05:5a:dc:b4:63:5b:02:44:9e:db:2e: d9:93:d8:a6:9f:7d:01:a2:fc:bf:e3:1d:15:c4:b8: 56:43:53:2d:70:71:09:62:5c:c3:b8:cc:87:84:ff: fe:22:a5:7e:2d:fd:ba:bb:bc:6a:86:72:ac:06:43: 5f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DF:03:BE:1B:A5:98:2D:29:AE:4C:D0:8D:F8:DB:10:E0:3B:A7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6d87e6bc-2296-3c9d-b105-558f88df0a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0c:ec:df:61:f8:62:90:06:ae:09:31:1d:37:d4:03:da:88: b9:31:d0:a4:b2:fc:35:f2:d6:b0:92:48:3c:e3:4b:d4:76:6d: 2f:2d:1c:cc:0e:a1:60:e8:42:b1:40:05:7a:aa:82:7b:c4:77: f9:df:d3:72:56:3f:7f:76:6d:e6:b7:84:97:06:d2:1c:b6:09: a2:4c:75:fe:9d:0f:7e:c9:25:93:9a:07:44:04:c5:5e:07:dc: 73:95:1f:23:7d:d9:f6:87:f0:63:55:71:3e:ad:e2:2d:8c:1b: 94:74:24:e2:bf:06:74:ce:a0:9e:e1:8d:c8:4a:ea:d7:df:8f: 26:bd:37:6b:5d:ed:29:db:26:e2:52:c1:13:c4:27:e8:c6:bd: 48:fe:61:b1:63:35:55:31:7a:6d:da:de:ed:93:19:c8:4d:a1: e1:1d:9d:1e:8c:8c:c2:3e:f1:c8:4c:55:d8:9e:52:64:29:f0: de:29:e8:f3:ce:15:5f:12:fd:45:8f:28:f7:d7:6e:b1:2c:32: 23:e8:e4:de:da:02:e9:2b:ab:e6:f6:b1:59:0a:f1:41:bf:23: 3d:78:09:0a:7c:46:b3:bd:7c:9c:a4:d9:d3:54:78:10:e0:3e: 41:ee:be:59:6a:b8:67:b3:1f:b4:79:fe:ba:69:e7:e6:80:61: ef:cb:ab:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekLtSXIJZytxLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZWUxZWMzNDYtNGUxZC00MjE0LThiYjQtOTkxMjg5Y2E2ZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ccoRkqdsc4r6iQ0JZgC60SkeXvXgtL82yTo wO0KZ21qFzlMg6nrJCJt1Yr3/N1IJuX0n6R/hN+GZ/apOlZqwi6ZF/BXlhsR++Pj YclNKTtdncxaEE/uz8L/TGlKeY0xkUwucJmCN5dPs3f4JdW1wPVTcDZOwXPxzJDZ rsub4vbWWCozt4483OaJhn+0OLMxWKchcfhaIgssailI80LxZqXW1afBFt+s1nUf kK8mDEyQoeuWwCz9JlIKhKLNTv9VNKxLv0LfBVrctGNbAkSe2y7Zk9imn30Bovy/ 4x0VxLhWQ1MtcHEJYlzDuMyHhP/+IqV+Lf26u7xqhnKsBkNfWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXfA74bpZgtKa5M0I342xDgO6cTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmQ4N2U2YmMtMjI5Ni0z YzlkLWIxMDUtNTU4Zjg4ZGYwYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEM7N9h+GKQBq4JMR031APaiLkx0KSy/DXy1rCSSDzjS9R2bS8tHMwO oWDoQrFABXqqgnvEd/nf03JWP392bea3hJcG0hy2CaJMdf6dD37JJZOaB0QExV4H 3HOVHyN92faH8GNVcT6t4i2MG5R0JOK/BnTOoJ7hjchK6tffjya9N2td7SnbJuJS wRPEJ+jGvUj+YbFjNVUxem3a3u2TGchNoeEdnR6MjMI+8chMVdieUmQp8N4p6PPO FV8S/UWPKPfXbrEsMiPo5N7aAukrq+b2sVkK8UG/Iz14CQp8RrO9fJyk2dNUeBDg PkHuvllquGezH7R5/rpp5+aAYe/Lq8s= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:30 2026 by rpki-client