$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80e67e53-7fb3-35dc-89e8-5c93705e25f4.roa File: 80e67e53-7fb3-35dc-89e8-5c93705e25f4.roa (raw, json) Hash identifier: l8j8QjIaxpWs7D+OknqH9pg9PkNxFcX8NbY3TSM/ma0= Subject key identifier: 89:D6:18:01:1C:34:6C:07:4E:E4:0F:5B:4A:4E:BB:D7:25:3A:2B:AF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1E3D63A15BFEE0815A80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80e67e53-7fb3-35dc-89e8-5c93705e25f4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1e:3d:63:a1:5b:fe:e0:81:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6892966a-1eaa-4d16-92c5-9621e278f1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:52:d8:a3:97:5b:34:81:18:6b:93:63:07: c8:bf:4c:ec:a1:67:9c:82:97:bf:e0:d3:17:ac:e9: 17:f0:94:40:02:ee:3f:41:99:11:40:9a:b7:88:e4: a7:77:db:0b:ec:f9:1c:27:dd:a3:de:72:7e:c2:92: dd:41:e8:c6:fd:1a:cb:5f:41:93:8d:26:c6:4e:10: 22:ef:f4:04:ee:0f:96:aa:b1:34:5c:1a:21:f3:4b: 22:79:98:9d:5b:2b:08:89:08:31:5a:aa:b3:12:b5: 67:2b:72:a2:76:fc:ca:26:22:7d:3a:fc:43:17:55: 43:9b:fb:0f:ab:2b:e3:26:3d:e3:7c:5c:d2:42:77: cc:95:e2:9e:0f:a5:57:fd:0d:4e:b5:96:ac:07:7d: 15:12:6f:8f:9c:9a:c8:60:c0:6f:d2:eb:c6:37:22: 0a:6c:bd:ec:d8:36:08:7a:71:44:dd:2a:82:b5:f6: d1:98:6b:99:e9:31:54:9e:e3:dd:c1:d0:e1:48:27: f8:fa:ae:83:3c:fc:53:23:45:1b:95:93:50:3f:8a: c4:1f:6f:83:70:dd:17:9e:2b:21:8f:41:fb:7a:14: 34:6d:8c:07:94:ba:43:90:d7:d2:20:ff:74:48:bb: 4f:32:3d:c1:71:8a:2a:fb:ec:90:4b:4d:e2:0d:26: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D6:18:01:1C:34:6C:07:4E:E4:0F:5B:4A:4E:BB:D7:25:3A:2B:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80e67e53-7fb3-35dc-89e8-5c93705e25f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:b0:fb:a2:34:35:4a:5e:d3:53:68:46:80:0d:3d:6b:45:7a: a7:78:0b:9e:13:f4:55:cb:27:03:df:06:04:58:79:ad:00:61: 65:05:2f:58:33:38:2f:f7:99:c9:df:5b:4b:22:9c:16:69:4a: a1:cb:36:3d:90:93:98:8a:55:a3:5e:86:c4:c8:52:2c:28:4c: 9d:fc:b0:61:85:09:c6:27:88:19:b2:5c:2c:d9:56:81:82:98: fd:7f:24:3e:6b:9c:b2:cb:53:d8:86:3c:be:0d:72:6a:bc:b7: fd:be:27:38:df:9d:29:60:6a:5b:03:aa:4c:a5:5f:eb:26:c8: 3e:f5:0b:ef:4e:97:30:cb:25:54:0d:eb:59:a9:26:9b:e0:45: 88:f0:08:41:4e:88:5f:fa:c5:e5:5e:4a:a8:8e:af:03:09:ea: a5:c2:fe:75:79:7d:32:32:77:65:1d:41:2a:ef:0a:76:10:b4: 0f:0a:ad:1e:4e:24:8d:66:84:55:65:6a:c8:95:e0:fd:c9:ce: 6e:20:79:c3:4c:66:07:c1:98:2c:3f:e3:c4:1a:fa:39:59:a8: 91:fc:14:56:78:9a:95:2e:e2:6a:1c:fe:8f:a1:9f:3f:7a:9c: c0:9e:0d:01:ea:c7:26:9a:72:ef:c1:bb:41:ee:38:44:6c:e8: c0:93:49:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeh49Y6Fb/uCBWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Njg5Mjk2NmEtMWVhYS00ZDE2LTkyYzUtOTYyMWUyNzhmMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRxS2KOXWzSBGGuTYwfIv0zsoWecgpe/4NMX rOkX8JRAAu4/QZkRQJq3iOSnd9sL7PkcJ92j3nJ+wpLdQejG/RrLX0GTjSbGThAi 7/QE7g+WqrE0XBoh80sieZidWysIiQgxWqqzErVnK3KidvzKJiJ9OvxDF1VDm/sP qyvjJj3jfFzSQnfMleKeD6VX/Q1OtZasB30VEm+PnJrIYMBv0uvGNyIKbL3s2DYI enFE3SqCtfbRmGuZ6TFUnuPdwdDhSCf4+q6DPPxTI0UblZNQP4rEH2+DcN0Xnish j0H7ehQ0bYwHlLpDkNfSIP90SLtPMj3BcYoq++yQS03iDSbfBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInWGAEcNGwHTuQPW0pOu9clOiuvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODBlNjdlNTMtN2ZiMy0z NWRjLTg5ZTgtNWM5MzcwNWUyNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKw+6I0NUpe01NoRoANPWtFeqd4C54T9FXLJwPfBgRYea0AYWUFL1gz OC/3mcnfW0sinBZpSqHLNj2Qk5iKVaNehsTIUiwoTJ38sGGFCcYniBmyXCzZVoGC mP1/JD5rnLLLU9iGPL4Ncmq8t/2+JzjfnSlgalsDqkylX+smyD71C+9OlzDLJVQN 61mpJpvgRYjwCEFOiF/6xeVeSqiOrwMJ6qXC/nV5fTIyd2UdQSrvCnYQtA8KrR5O JI1mhFVlasiV4P3Jzm4gecNMZgfBmCw/48Qa+jlZqJH8FFZ4mpUu4moc/o+hnz96 nMCeDQHqxyaacu/Bu0HuOERs6MCTSUg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:41 2026 by rpki-client