$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa File: 820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa (raw, json) Hash identifier: qjTyZ3NawJeETw4znAY9L16OORyUflawioHbtK+TlH4= Subject key identifier: 69:DA:8C:F9:03:01:A8:C8:16:58:1D:27:65:B7:F8:F6:99:D1:50:DB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A513E702AC309103F2500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:51:3e:70:2a:c3:09:10:3f:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ae9d43b3-1391-49f0-8ab1-4268bc9f6260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7d:a0:85:d9:f4:22:ac:da:f9:a5:28:e4:c7: 01:5f:b7:7c:93:e4:5b:d5:67:36:c5:d0:dc:cd:a4: 20:62:62:00:34:f8:63:8e:7a:e6:d4:af:32:fe:68: 78:89:d2:12:d7:f7:fe:fc:4d:21:21:44:9e:a8:43: 0a:cb:48:77:26:61:66:c4:4b:f7:90:29:a2:99:45: d1:c5:3a:ca:55:43:15:3d:c3:3b:aa:b8:36:9c:93: 9c:df:66:84:bc:a5:e6:cc:a8:58:2f:67:b9:fa:f7: f0:8e:9a:4f:f5:d9:74:d7:f9:e4:28:a0:f9:17:d9: 55:e6:b9:65:c1:9d:11:05:99:86:ce:d6:0e:f4:f7: 2f:f7:79:d6:ff:c8:21:5a:4e:ec:b5:ff:61:c8:74: 70:9a:b8:a1:04:85:d4:31:46:12:66:dd:c5:c5:54: 8d:93:11:51:c9:97:27:32:de:2b:d0:c4:19:5f:f4: 12:8c:e4:b8:d7:2c:70:30:46:55:4b:e9:74:25:4b: fd:e7:e4:1f:c9:87:3c:5b:49:ea:fb:66:2b:47:f3: 9b:86:f3:4f:20:cc:47:aa:71:20:29:f0:ac:d6:52: 54:ad:35:88:ee:c0:f8:a3:77:80:29:c6:ac:ff:5e: 2d:6a:e4:b0:e0:60:7d:c2:56:d7:93:d7:57:51:ef: d1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DA:8C:F9:03:01:A8:C8:16:58:1D:27:65:B7:F8:F6:99:D1:50:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/820c17d5-ad31-3458-b9d6-ce0fe143a1bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b4:bf:e7:62:ea:45:c1:38:8e:e0:27:5d:43:77:ce:e0:d5: 31:1c:5b:89:b9:d7:be:0d:36:29:f5:bf:e0:5e:44:24:bc:a5: 81:70:19:9d:c8:bf:59:c5:a4:05:45:b1:89:de:4b:5b:87:76: dc:8d:ad:43:71:fb:9b:b7:61:04:9e:2c:71:8f:f9:2e:6e:50: 62:28:0e:e3:22:11:c6:2a:d9:44:69:d3:65:1b:6e:fc:3b:40: 0b:fc:25:a0:a6:6b:6b:67:b7:cb:0d:8f:cd:8f:63:d5:31:28: 48:b3:bf:88:6e:14:8d:60:46:f2:ee:da:05:3a:bf:12:5a:31: 5e:9d:7d:ab:4c:4e:f2:1f:d5:24:cc:6d:fa:81:9b:64:e6:ed: 04:c7:81:92:f2:0c:d1:6d:91:b8:21:e6:f6:31:c6:c9:12:a0: 17:e5:52:31:ee:30:a9:49:97:f9:df:46:f6:ab:9c:fe:3d:41: 4d:f9:0a:f7:17:16:1c:44:3b:2d:9e:e0:d7:2d:20:02:4e:b2: d9:12:d2:ae:c0:a5:2e:b9:76:1f:a7:9a:88:4d:e4:98:e9:67: 99:19:bd:d8:f3:3d:2b:e5:02:ba:f7:51:c0:d2:c7:18:44:63: 18:4a:19:26:cb:7b:9e:c7:48:0f:9f:20:dd:bb:18:b5:18:6e: 04:8d:a4:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelE+cCrDCRA/JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YWU5ZDQzYjMtMTM5MS00OWYwLThhYjEtNDI2OGJjOWY2MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH2ghdn0Iqza+aUo5McBX7d8k+Rb1Wc2xdDc zaQgYmIANPhjjnrm1K8y/mh4idIS1/f+/E0hIUSeqEMKy0h3JmFmxEv3kCmimUXR xTrKVUMVPcM7qrg2nJOc32aEvKXmzKhYL2e5+vfwjppP9dl01/nkKKD5F9lV5rll wZ0RBZmGztYO9Pcv93nW/8ghWk7stf9hyHRwmrihBIXUMUYSZt3FxVSNkxFRyZcn Mt4r0MQZX/QSjOS41yxwMEZVS+l0JUv95+QfyYc8W0nq+2YrR/ObhvNPIMxHqnEg KfCs1lJUrTWI7sD4o3eAKcas/14tauSw4GB9wlbXk9dXUe/RBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnajPkDAajIFlgdJ2W3+PaZ0VDbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODIwYzE3ZDUtYWQzMS0z NDU4LWI5ZDYtY2UwZmUxNDNhMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK0v+di6kXBOI7gJ11Dd87g1TEcW4m5174NNin1v+BeRCS8pYFwGZ3I v1nFpAVFsYneS1uHdtyNrUNx+5u3YQSeLHGP+S5uUGIoDuMiEcYq2URp02Ubbvw7 QAv8JaCma2tnt8sNj82PY9UxKEizv4huFI1gRvLu2gU6vxJaMV6dfatMTvIf1STM bfqBm2Tm7QTHgZLyDNFtkbgh5vYxxskSoBflUjHuMKlJl/nfRvarnP49QU35CvcX FhxEOy2e4NctIAJOstkS0q7ApS65dh+nmohN5JjpZ5kZvdjzPSvlArr3UcDSxxhE YxhKGSbLe57HSA+fIN27GLUYbgSNpPU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:21 2026 by rpki-client