$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8245406e-c9af-32c4-8bfe-07765def09b9.roa File: 8245406e-c9af-32c4-8bfe-07765def09b9.roa (raw, json) Hash identifier: Lv517ioJA89PxCKlHMdF/OhSWqnKTJmAiaHgMQ/GJt8= Subject key identifier: B1:CC:C4:E8:15:87:D8:A9:82:78:DB:1A:AC:9D:2A:87:D6:32:EE:35 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A097AA05FE627CCBDB380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8245406e-c9af-32c4-8bfe-07765def09b9.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:09:7a:a0:5f:e6:27:cc:bd:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=32bec118-a16d-4faf-9c46-86bdfd42997c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:08:e9:35:10:e8:88:26:4a:c2:ff:b3:c8: b5:87:0b:25:30:f4:29:02:f7:a0:bd:e3:60:18:73: 95:e6:26:f4:aa:14:83:cd:6a:3d:20:43:75:ac:74: 15:66:90:ff:8b:1f:9f:3d:bd:47:94:2f:b5:b1:71: 10:d4:ad:43:ba:b1:a6:3b:cf:7c:1c:1f:9b:35:cf: 5f:c5:e5:da:6e:cb:ba:85:f6:b8:c9:73:fd:2f:6a: 70:4b:d9:de:e5:19:ca:08:ac:0b:39:ea:b3:a5:9d: 72:d8:cf:7d:be:86:e0:9a:46:c1:2f:1a:21:63:93: ef:66:16:12:86:93:b2:84:11:f2:77:0b:da:cc:5c: 04:38:6c:a6:93:a6:f5:0b:04:fc:ed:63:aa:68:28: 72:af:58:81:cd:90:2c:75:b3:d3:1b:6d:ff:a3:e5: fa:73:27:dd:f3:b8:57:05:9c:08:ca:d4:84:fe:08: 47:07:8e:7b:20:0d:ff:26:6e:b6:91:e2:02:1f:37: 53:36:ad:be:1f:de:e8:6e:fb:0d:10:28:27:40:68: d4:74:d5:a6:56:4c:30:7e:2d:2b:28:ad:49:88:5f: c2:83:83:1f:d4:7f:a6:ff:48:ba:df:c3:5b:62:8b: 35:c3:0f:d7:3d:d6:80:da:75:f0:1a:44:cd:88:84: cb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CC:C4:E8:15:87:D8:A9:82:78:DB:1A:AC:9D:2A:87:D6:32:EE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8245406e-c9af-32c4-8bfe-07765def09b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5d:54:04:b1:7b:02:c2:d6:39:d5:7f:3c:25:bc:c6:94:e3: 21:72:18:8e:04:fa:89:80:c1:78:13:25:73:25:77:1b:82:a6: 18:73:1c:89:7a:04:17:d3:e5:28:ef:77:8f:f0:dc:0a:c2:dc: 54:2f:8e:02:59:95:b2:0f:98:c7:6f:eb:db:b8:31:a3:3f:ad: e3:b6:1b:98:96:89:5e:96:1e:82:3e:08:f7:aa:b4:da:b4:62: 3e:c2:f2:6c:ae:7b:b3:29:8f:1f:f5:92:a1:3c:aa:e0:9c:be: b6:6d:94:87:92:83:0f:69:5b:96:33:7c:18:38:b8:b3:0b:eb: a0:3c:58:37:f3:a2:7f:1e:00:70:cf:c9:66:c6:19:0c:9a:37: 9c:f6:d3:e8:50:75:6d:58:c4:3e:de:b9:4a:6a:c3:0e:75:64: 0b:5f:9e:ef:38:8d:c6:01:10:38:3b:c4:b9:45:28:84:93:df: 50:7d:36:bd:da:e7:b0:52:91:e3:dd:a3:e5:0d:9a:00:67:c4: 4d:fb:8d:de:7f:7f:78:b9:4f:23:80:1b:72:72:5e:83:4e:3e: 6d:5b:68:fd:45:20:2e:01:d8:b7:14:f2:83:2c:ab:5e:4b:18: cb:9f:5c:da:fb:06:b4:c2:65:cc:34:8a:38:90:96:4f:ee:05: 82:b1:11:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegl6oF/mJ8y9s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzJiZWMxMTgtYTE2ZC00ZmFmLTljNDYtODZiZGZkNDI5OTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/cI6TUQ6IgmSsL/s8i1hwslMPQpAvegveNg GHOV5ib0qhSDzWo9IEN1rHQVZpD/ix+fPb1HlC+1sXEQ1K1DurGmO898HB+bNc9f xeXabsu6hfa4yXP9L2pwS9ne5RnKCKwLOeqzpZ1y2M99vobgmkbBLxohY5PvZhYS hpOyhBHydwvazFwEOGymk6b1CwT87WOqaChyr1iBzZAsdbPTG23/o+X6cyfd87hX BZwIytSE/ghHB457IA3/Jm62keICHzdTNq2+H97obvsNECgnQGjUdNWmVkwwfi0r KK1JiF/Cg4Mf1H+m/0i638NbYos1ww/XPdaA2nXwGkTNiITLCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHMxOgVh9ipgnjbGqydKofWMu41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODI0NTQwNmUtYzlhZi0z MmM0LThiZmUtMDc3NjVkZWYwOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFdVASxewLC1jnVfzwlvMaU4yFyGI4E+omAwXgTJXMldxuCphhzHIl6 BBfT5Sjvd4/w3ArC3FQvjgJZlbIPmMdv69u4MaM/reO2G5iWiV6WHoI+CPeqtNq0 Yj7C8myue7Mpjx/1kqE8quCcvrZtlIeSgw9pW5YzfBg4uLML66A8WDfzon8eAHDP yWbGGQyaN5z20+hQdW1YxD7euUpqww51ZAtfnu84jcYBEDg7xLlFKIST31B9Nr3a 57BSkePdo+UNmgBnxE37jd5/f3i5TyOAG3JyXoNOPm1baP1FIC4B2LcU8oMsq15L GMufXNr7BrTCZcw0ijiQlk/uBYKxEcY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:37:12 2026 by rpki-client