$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa File: 833cc317-acc3-3c41-aa3a-e9ecad388252.roa (raw, json) Hash identifier: w/72tJrLRH89vtSYKweGi6Vi7/50SGCSP22riMcxC8M= Subject key identifier: 29:E5:0F:CA:04:23:7F:15:65:E1:69:E2:DF:19:09:29:97:BD:D8:EF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A29E150DB9C21D5227680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:29:e1:50:db:9c:21:d5:22:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=830b918e-7295-4eff-94c4-0c41d60171bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7f:8c:69:38:bc:1e:47:18:84:42:1f:85:a8: b4:3f:e7:3b:c2:af:35:ab:67:42:46:55:86:06:6c: ae:36:d1:57:8d:a5:40:5f:6e:2d:cd:ae:12:04:6e: 2d:fe:4a:6f:97:d8:6a:66:ce:15:72:9d:ef:ce:6a: ef:5e:0d:b3:44:1b:ba:6c:7a:22:67:6b:30:01:08: 61:e5:60:93:2b:7b:75:2f:68:0a:3d:68:87:f1:af: ba:70:f8:7a:1e:75:9e:0a:d0:27:1c:08:53:9e:17: de:41:af:01:cc:90:e5:1b:69:ca:d6:d7:9e:dd:2b: c0:50:39:30:d5:a7:a0:bd:09:99:0d:ef:f4:03:1a: 56:e8:68:43:8d:1b:82:46:e7:bb:5a:7b:12:5b:e5: 19:46:38:8a:93:01:1a:11:88:6d:a9:66:28:be:e9: e3:1c:7b:72:ee:63:28:66:18:e3:ad:24:ce:2c:74: 49:a1:86:b6:8e:2a:b3:45:37:61:c5:4f:96:b7:7f: b8:78:1b:ca:aa:08:35:0a:66:cc:11:03:41:a2:e8: 69:4e:60:97:c3:91:3f:12:16:eb:2e:43:a8:88:1c: dd:5a:17:ef:69:1c:79:a4:66:1a:25:87:95:db:41: ff:1b:5f:c8:97:19:4a:1a:5e:be:63:4c:63:00:57: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:0F:CA:04:23:7F:15:65:E1:69:E2:DF:19:09:29:97:BD:D8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/833cc317-acc3-3c41-aa3a-e9ecad388252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:17:4f:ee:6e:b7:66:8e:5f:e3:74:14:7e:d3:f9:79:58:15: fe:7e:58:f0:67:59:04:c1:fb:5d:de:0c:ed:66:6a:fb:ca:91: 1c:fa:9e:fb:d5:3c:ce:c8:14:c3:cd:9e:82:a9:62:1f:16:17: 49:dc:18:35:f8:38:ee:1a:a2:0e:27:8f:de:a1:82:5b:9d:82: a5:5b:cc:8a:76:43:6d:2f:62:d4:a6:9b:ab:3f:29:87:75:14: 5b:b3:4f:b1:ed:00:51:fc:cf:b0:42:f6:57:38:09:f9:12:5c: 97:55:99:4a:17:0e:c1:13:77:2a:42:56:09:7b:78:ed:74:fb: 85:04:99:7d:9a:4e:f6:3b:1f:db:8c:84:e1:3b:0f:8e:b2:37: bf:64:f2:eb:01:9e:4e:22:e9:d9:21:3c:34:cc:33:61:1b:30: 67:b2:d3:79:51:49:56:fc:0a:2d:ac:56:90:51:7f:67:e3:cb: e9:34:f1:41:d1:b7:34:11:42:56:55:82:04:04:c4:80:6b:9f: 2c:53:78:5c:73:10:b3:cd:c5:5c:b0:61:d5:03:0f:ce:b5:74: 23:b4:9e:ca:e1:05:d0:81:66:f9:ec:36:89:b3:27:c2:19:dc: 83:fb:2b:6b:18:48:0e:e4:79:18:74:0c:64:71:80:c6:52:2a: 86:8b:72:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeinhUNucIdUidoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODMwYjkxOGUtNzI5NS00ZWZmLTk0YzQtMGM0MWQ2MDE3MWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8H+MaTi8HkcYhEIfhai0P+c7wq81q2dCRlWG BmyuNtFXjaVAX24tza4SBG4t/kpvl9hqZs4Vcp3vzmrvXg2zRBu6bHoiZ2swAQhh 5WCTK3t1L2gKPWiH8a+6cPh6HnWeCtAnHAhTnhfeQa8BzJDlG2nK1tee3SvAUDkw 1aegvQmZDe/0AxpW6GhDjRuCRue7WnsSW+UZRjiKkwEaEYhtqWYovunjHHty7mMo ZhjjrSTOLHRJoYa2jiqzRTdhxU+Wt3+4eBvKqgg1CmbMEQNBouhpTmCXw5E/Ehbr LkOoiBzdWhfvaRx5pGYaJYeV20H/G1/IlxlKGl6+Y0xjAFfiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnlD8oEI38VZeFp4t8ZCSmXvdjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODMzY2MzMTctYWNjMy0z YzQxLWFhM2EtZTllY2FkMzg4MjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAXT+5ut2aOX+N0FH7T+XlYFf5+WPBnWQTB+13eDO1mavvKkRz6nvvV PM7IFMPNnoKpYh8WF0ncGDX4OO4aog4nj96hgludgqVbzIp2Q20vYtSmm6s/KYd1 FFuzT7HtAFH8z7BC9lc4CfkSXJdVmUoXDsETdypCVgl7eO10+4UEmX2aTvY7H9uM hOE7D46yN79k8usBnk4i6dkhPDTMM2EbMGey03lRSVb8Ci2sVpBRf2fjy+k08UHR tzQRQlZVggQExIBrnyxTeFxzELPNxVywYdUDD861dCO0nsrhBdCBZvnsNomzJ8IZ 3IP7K2sYSA7keRh0DGRxgMZSKoaLcn0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:44 2026 by rpki-client