$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8491e89a-6ad1-3019-82e9-d0adc0afde9f.roa File: 8491e89a-6ad1-3019-82e9-d0adc0afde9f.roa (raw, json) Hash identifier: +D0c4fE+oxoXoxg6HNYwn75MjyzVBeIX3VQkjEZhCt4= Subject key identifier: 0B:B2:38:84:87:14:40:A0:5F:E6:2C:0D:4D:D9:7E:05:EE:CE:25:AD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A2B91546F31F8D72F75F0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8491e89a-6ad1-3019-82e9-d0adc0afde9f.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2b:91:54:6f:31:f8:d7:2f:75:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=7823032b-e6c3-4062-9077-fcae8f267bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ea:95:83:84:c4:59:90:d5:83:16:54:ec:2f: 7b:9d:9f:45:e4:f0:b0:dc:91:64:b5:40:75:a7:ce: 6b:58:d0:ca:42:1c:8a:ab:b6:e6:af:d0:af:ec:88: f6:2d:2e:47:ae:fd:c0:a3:b2:74:51:3a:25:3f:0f: 9f:40:26:b1:43:a1:06:7f:d1:30:0c:c5:05:9e:47: 48:c6:88:20:c1:b5:9f:4c:5c:e1:fe:cb:f1:0e:ea: b2:fa:2f:e1:6e:04:a8:d9:bf:57:01:cb:de:56:b0: 22:93:c5:83:1f:e1:ed:4c:99:cd:ab:2f:7f:02:a3: a9:09:fd:80:40:55:24:be:35:1a:96:a7:11:b0:60: 78:3c:33:f6:a1:ea:59:28:f7:a6:33:fc:69:91:8a: de:af:d5:c2:80:b1:f7:3c:8c:39:64:13:51:18:6d: e6:fb:1e:78:92:b9:da:27:c5:03:47:c3:95:f0:d3: 1b:99:d3:ff:70:0e:0f:84:17:a8:90:68:83:44:24: 50:46:6d:5c:07:98:38:d9:99:8e:4c:e1:9e:24:fa: 49:f9:c0:14:50:56:39:c8:57:e6:a6:d3:1c:38:99: 3f:c3:66:7d:81:ac:d7:ef:f9:3e:3b:20:0c:a0:c4: 23:13:58:73:f2:6a:99:83:b3:da:34:67:de:22:f5: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B2:38:84:87:14:40:A0:5F:E6:2C:0D:4D:D9:7E:05:EE:CE:25:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8491e89a-6ad1-3019-82e9-d0adc0afde9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:83:19:28:ce:fb:33:72:37:b6:0c:67:a4:5d:ad:dc:d5:6b: 9f:29:38:f7:8b:46:69:c6:23:e9:45:f6:f7:8f:78:1c:47:1c: 31:52:70:8b:63:e0:ff:e0:3c:89:86:cf:a0:a5:1a:3a:ba:3f: 7c:30:ba:1c:10:1f:dc:09:e2:f1:d0:99:6b:2e:af:31:70:ba: 61:94:14:b9:d9:6f:ba:9f:c0:3a:4d:31:ed:2a:7b:f0:00:2c: 7b:bd:e3:c0:77:a7:2a:dd:21:c1:18:c3:ed:33:67:14:64:77: 6f:98:18:d8:3d:71:4f:d3:2d:0c:90:f7:82:0e:14:c7:fd:50: e8:bd:dc:63:33:24:8a:a3:e8:71:32:f3:b2:b5:a1:c8:ce:04: 72:58:56:6c:79:37:a1:ab:15:49:6b:38:64:cb:f5:5f:cf:c4: 4d:d6:c7:2d:a0:53:3e:ef:d6:38:4a:4a:d4:ce:a0:fc:1f:8d: ad:10:49:f3:16:c8:3d:ec:f3:55:ef:61:96:66:7a:e9:29:c3: 97:a3:82:69:c6:e8:02:88:b8:6b:9d:55:c0:8a:2c:f1:ba:a3: e1:fc:3e:f2:cd:88:0c:5a:17:15:68:1c:9c:ec:1c:48:f8:7c: b6:fd:a2:bc:7a:7b:64:92:40:fb:46:39:68:79:25:b6:3a:e1: 63:5a:27:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiuRVG8x+NcvdfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NzgyMzAzMmItZTZjMy00MDYyLTkwNzctZmNhZThmMjY3YmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeqVg4TEWZDVgxZU7C97nZ9F5PCw3JFktUB1 p85rWNDKQhyKq7bmr9Cv7Ij2LS5Hrv3Ao7J0UTolPw+fQCaxQ6EGf9EwDMUFnkdI xoggwbWfTFzh/svxDuqy+i/hbgSo2b9XAcveVrAik8WDH+HtTJnNqy9/AqOpCf2A QFUkvjUalqcRsGB4PDP2oepZKPemM/xpkYrer9XCgLH3PIw5ZBNRGG3m+x54krna J8UDR8OV8NMbmdP/cA4PhBeokGiDRCRQRm1cB5g42ZmOTOGeJPpJ+cAUUFY5yFfm ptMcOJk/w2Z9gazX7/k+OyAMoMQjE1hz8mqZg7PaNGfeIvUoFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuyOISHFECgX+YsDU3ZfgXuziWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODQ5MWU4OWEtNmFkMS0z MDE5LTgyZTktZDBhZGMwYWZkZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuDGSjO+zNyN7YMZ6RdrdzVa58pOPeLRmnGI+lF9vePeBxHHDFScItj 4P/gPImGz6ClGjq6P3wwuhwQH9wJ4vHQmWsurzFwumGUFLnZb7qfwDpNMe0qe/AA LHu948B3pyrdIcEYw+0zZxRkd2+YGNg9cU/TLQyQ94IOFMf9UOi93GMzJIqj6HEy 87K1ocjOBHJYVmx5N6GrFUlrOGTL9V/PxE3Wxy2gUz7v1jhKStTOoPwfja0QSfMW yD3s81XvYZZmeukpw5ejgmnG6AKIuGudVcCKLPG6o+H8PvLNiAxaFxVoHJzsHEj4 fLb9orx6e2SSQPtGOWh5JbY64WNaJ9A= -----END CERTIFICATE-----Generated at Thu Mar 26 16:37:45 2026 by rpki-client