$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e9ec0a7-44e1-3e6c-b2ba-7b1fa36bcd00.roa File: 6e9ec0a7-44e1-3e6c-b2ba-7b1fa36bcd00.roa (raw, json) Hash identifier: PxicjNdeSPCF0PvjMF/A/pROu62p+GUAYIiyBbzGRxM= Subject key identifier: 0D:ED:B1:B8:1D:17:1F:B4:0B:71:E6:DD:84:71:18:13:CF:A2:1B:5C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A2811D11B45FEC8812E00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e9ec0a7-44e1-3e6c-b2ba-7b1fa36bcd00.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:28:11:d1:1b:45:fe:c8:81:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=1e9d9eaf-697d-4a8f-bb9e-a603f8767229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:80:6b:36:43:cf:b7:53:e2:a0:50:da:b2:be: b2:71:18:25:e6:55:37:8d:9b:ad:85:3c:0c:27:fd: 01:53:ba:66:e3:88:a3:6d:3d:9f:31:91:34:db:b7: b4:3c:2f:3d:c0:6e:3e:03:10:87:46:cd:d7:6b:a4: 61:06:0f:10:d9:3f:cf:db:2b:b1:1c:f0:6f:b5:ab: 36:1d:e0:b7:35:a8:36:81:2e:14:d4:11:21:53:29: 42:f7:6e:40:0f:51:c3:46:05:55:42:fe:5f:b2:64: 46:95:42:a3:7c:86:10:51:07:b6:f9:c9:9d:44:2b: 7c:cf:80:d3:26:ce:94:43:a8:0b:31:1a:b6:a7:a0: c2:f8:4c:e4:ef:73:22:08:85:86:80:4e:7b:6e:2b: 52:2a:6e:ec:53:ea:ab:1e:b0:b9:ca:f3:fb:dc:b6: a6:57:7d:bf:11:a1:4d:82:9b:02:19:5f:83:e6:3f: 02:d3:c2:bc:87:bc:4f:77:1c:68:c2:67:8d:34:f6: c7:a5:7b:dc:cf:bd:9b:80:d8:6e:68:eb:66:e8:23: af:b6:df:3e:78:eb:81:6c:10:fa:95:ce:10:13:55: b8:2d:95:db:b3:73:5d:2d:a8:20:52:82:8a:2d:af: cd:8b:08:20:89:5e:43:37:e2:9f:3b:1e:d0:dd:02: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:ED:B1:B8:1D:17:1F:B4:0B:71:E6:DD:84:71:18:13:CF:A2:1B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e9ec0a7-44e1-3e6c-b2ba-7b1fa36bcd00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:67:d4:93:10:3f:d5:f4:a7:37:8c:70:59:21:41:7f:a5:dc: e8:6b:39:86:47:19:80:2d:c4:82:f9:d0:9b:e8:b4:1d:f0:a3: 3c:3c:07:2a:e9:26:73:7f:b7:2f:41:c7:94:cd:19:c0:91:0a: b7:48:0d:84:48:bc:8b:80:c2:6d:2b:22:ad:e5:34:b0:a7:df: c7:9d:d3:03:9c:c7:9d:1d:28:2c:2c:1a:4a:5e:fb:7a:cc:9c: 17:23:33:a9:b3:62:60:7d:b5:8c:6f:ba:83:5f:aa:09:91:04: ec:4d:9f:87:4f:00:81:2b:91:52:5b:98:51:6c:95:39:1f:93: 37:bd:e1:89:b5:d5:14:3a:a0:d9:ce:cd:5c:78:63:2b:8f:a0: 4e:e3:91:0b:cd:da:e8:34:e8:f3:f5:3d:49:93:d5:6f:83:c3: 3a:5f:73:a7:5c:d8:8f:c1:73:7f:b5:cb:fc:ce:88:c1:ad:c2: 04:a5:0b:99:71:bc:02:c2:56:62:02:d3:d3:9d:61:04:48:26: ac:d1:57:4b:ba:3c:75:4b:94:02:3c:74:2a:00:f0:56:f1:4d: cc:7a:fe:72:e3:58:d3:d2:ac:7a:ef:eb:68:ac:12:60:45:48: 52:3e:49:9f:81:e1:c3:f8:9c:4e:d4:b3:38:47:61:34:cd:e4: 8d:a5:52:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeigR0RtF/siBLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MWU5ZDllYWYtNjk3ZC00YThmLWJiOWUtYTYwM2Y4NzY3MjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4BrNkPPt1PioFDasr6ycRgl5lU3jZuthTwM J/0BU7pm44ijbT2fMZE027e0PC89wG4+AxCHRs3Xa6RhBg8Q2T/P2yuxHPBvtas2 HeC3Nag2gS4U1BEhUylC925AD1HDRgVVQv5fsmRGlUKjfIYQUQe2+cmdRCt8z4DT Js6UQ6gLMRq2p6DC+Ezk73MiCIWGgE57bitSKm7sU+qrHrC5yvP73LamV32/EaFN gpsCGV+D5j8C08K8h7xPdxxowmeNNPbHpXvcz72bgNhuaOtm6COvtt8+eOuBbBD6 lc4QE1W4LZXbs3NdLaggUoKKLa/NiwggiV5DN+KfOx7Q3QIqqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3tsbgdFx+0C3Hm3YRxGBPPohtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmU5ZWMwYTctNDRlMS0z ZTZjLWIyYmEtN2IxZmEzNmJjZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1n1JMQP9X0pzeMcFkhQX+l3OhrOYZHGYAtxIL50JvotB3wozw8Byrp JnN/ty9Bx5TNGcCRCrdIDYRIvIuAwm0rIq3lNLCn38ed0wOcx50dKCwsGkpe+3rM nBcjM6mzYmB9tYxvuoNfqgmRBOxNn4dPAIErkVJbmFFslTkfkze94Ym11RQ6oNnO zVx4YyuPoE7jkQvN2ug06PP1PUmT1W+Dwzpfc6dc2I/Bc3+1y/zOiMGtwgSlC5lx vALCVmIC09OdYQRIJqzRV0u6PHVLlAI8dCoA8FbxTcx6/nLjWNPSrHrv62isEmBF SFI+SZ+B4cP4nE7UszhHYTTN5I2lUrs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:27 2026 by rpki-client