$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa File: 73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa (raw, json) Hash identifier: tYASJcPXbOkQymlQZ+uWoanFA7uf1XHYAdSGDx3u2W4= Subject key identifier: FD:C2:A7:7C:DB:39:62:1B:37:2A:99:81:86:51:17:73:77:C0:E6:8D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3DD60E66D4B923B8A840 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3d:d6:0e:66:d4:b9:23:b8:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=c8f21a94-ebc8-4165-b6b3-036a9f435e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:82:a9:26:65:93:a3:c2:77:3b:a4:13:a3:50: 69:0c:07:37:20:fe:74:3d:68:d4:c0:37:ff:cc:af: d2:ab:ee:ed:f1:6c:fb:6b:72:79:78:f4:1c:2e:d5: 15:7a:e2:52:f9:bb:da:53:28:a6:8b:23:6c:45:c6: d9:ce:42:da:f9:1e:de:87:91:c6:65:32:17:42:22: 3c:a0:6d:12:71:2f:19:e6:ae:79:c9:56:f1:b7:f1: ec:9c:ae:61:fb:18:82:54:a1:da:81:55:ef:4d:60: ce:6e:4c:51:ce:4c:0e:c5:5f:55:4b:d3:8f:ca:8e: e9:84:41:b6:78:1d:7a:d5:97:62:b7:9b:f5:71:89: 92:72:11:0e:28:49:8d:3b:8a:31:ae:cf:9d:29:d0: 1c:aa:73:da:01:00:16:03:c7:5c:a3:11:49:21:ce: bb:e0:7a:35:7a:ee:43:e9:39:b6:6f:b4:1b:ad:35: 63:a1:80:53:30:34:94:2f:fa:30:f7:2f:25:19:56: 35:eb:29:54:b6:bd:2a:2f:11:18:c9:50:97:ba:d8: 7f:c8:26:39:97:a6:c9:3b:6f:79:f3:0f:4f:43:b2: e3:b0:3a:58:43:12:34:40:a2:f4:cc:86:23:a3:74: e3:00:21:51:d9:86:04:8a:01:36:af:ba:91:1d:fd: 84:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C2:A7:7C:DB:39:62:1B:37:2A:99:81:86:51:17:73:77:C0:E6:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/73c20a25-3c79-316f-b710-7ec4a8ad6fff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ef:00:f4:33:79:81:bc:f4:67:c6:87:de:57:76:0a:be:88: 92:45:fd:c1:9e:72:8e:00:fd:be:50:b0:0a:3b:28:54:8a:c1: 02:f4:1f:eb:61:2b:e1:0e:57:44:37:67:be:e1:f9:de:10:80: 17:ce:aa:47:e9:33:af:68:b4:39:83:60:db:2a:ac:34:86:38: ea:ff:96:b1:95:4a:c5:da:af:d0:81:88:a8:4a:84:06:4b:73: 71:fa:71:bf:e8:8c:ae:b1:33:76:df:c8:29:4c:51:fb:a3:c3: 79:f4:8c:61:93:3b:72:a2:27:49:25:ca:23:c7:e4:89:6f:e6: fe:4e:e0:31:6a:a2:c0:ff:f1:7c:81:b0:6b:ff:f2:1e:81:df: 75:6f:e0:a4:95:f8:e5:a9:a5:79:41:06:da:82:d3:d5:b1:f4: 21:ae:3e:75:f6:9e:5e:eb:41:c4:95:25:fb:d8:93:28:6b:15: 99:66:bf:29:59:c2:47:a7:47:1f:7b:77:6d:b5:77:75:90:c5: dc:f5:e0:74:09:c1:da:ab:96:61:a1:8d:41:3d:f9:3c:8b:d1: 45:c3:71:d4:f2:92:f9:d1:7b:48:50:97:4d:51:32:51:bd:e1: cb:aa:d3:8e:17:98:9a:15:c5:1d:27:45:07:d5:c0:a8:66:00: fb:3d:29:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jej3WDmbUuSO4qEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YzhmMjFhOTQtZWJjOC00MTY1LWI2YjMtMDM2YTlmNDM1ZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4KpJmWTo8J3O6QTo1BpDAc3IP50PWjUwDf/ zK/Sq+7t8Wz7a3J5ePQcLtUVeuJS+bvaUyimiyNsRcbZzkLa+R7eh5HGZTIXQiI8 oG0ScS8Z5q55yVbxt/HsnK5h+xiCVKHagVXvTWDObkxRzkwOxV9VS9OPyo7phEG2 eB161Zdit5v1cYmSchEOKEmNO4oxrs+dKdAcqnPaAQAWA8dcoxFJIc674Ho1eu5D 6Tm2b7QbrTVjoYBTMDSUL/ow9y8lGVY16ylUtr0qLxEYyVCXuth/yCY5l6bJO295 8w9PQ7LjsDpYQxI0QKL0zIYjo3TjACFR2YYEigE2r7qRHf2EUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3Cp3zbOWIbNyqZgYZRF3N3wOaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzNjMjBhMjUtM2M3OS0z MTZmLWI3MTAtN2VjNGE4YWQ2ZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/vAPQzeYG89GfGh95Xdgq+iJJF/cGeco4A/b5QsAo7KFSKwQL0H+th K+EOV0Q3Z77h+d4QgBfOqkfpM69otDmDYNsqrDSGOOr/lrGVSsXar9CBiKhKhAZL c3H6cb/ojK6xM3bfyClMUfujw3n0jGGTO3KiJ0klyiPH5Ilv5v5O4DFqosD/8XyB sGv/8h6B33Vv4KSV+OWppXlBBtqC09Wx9CGuPnX2nl7rQcSVJfvYkyhrFZlmvylZ wkenRx97d221d3WQxdz14HQJwdqrlmGhjUE9+TyL0UXDcdTykvnRe0hQl01RMlG9 4cuq044XmJoVxR0nRQfVwKhmAPs9KfA= -----END CERTIFICATE-----Generated at Fri Mar 27 00:03:28 2026 by rpki-client