$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/852f197f-8ee8-3b2f-be94-916f32fe7e25.roa File: 852f197f-8ee8-3b2f-be94-916f32fe7e25.roa (raw, json) Hash identifier: CcEgNom9sxRGZDnLwkQszBGFepUP/u4Q/Zn5m4OFtjM= Subject key identifier: F4:37:E1:12:A7:B4:99:F4:D9:01:40:6F:7F:F2:D3:E9:63:84:1F:63 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A53FD7DF728E085871DB8 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/852f197f-8ee8-3b2f-be94-916f32fe7e25.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:53:fd:7d:f7:28:e0:85:87:1d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=770ab6a8-5938-404e-8103-8cb78bc423a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:bb:0e:98:5f:3d:5b:f4:9c:3f:c5:99:a2: 0d:f4:24:95:66:60:35:bb:3a:e8:e2:c7:1f:03:f2: 92:3c:d6:4b:d0:ef:3d:80:11:9f:c3:4b:2c:5a:11: 1c:ea:80:84:fa:35:03:69:30:00:7f:2b:1b:4f:b7: d0:28:16:de:a1:01:f1:fa:90:3f:0d:3b:1a:9a:0a: 5d:97:2e:6a:56:97:68:24:29:15:fe:19:9b:d0:c7: ce:f7:2f:78:45:ae:2a:98:59:a7:f7:8a:00:86:cb: 5e:a0:71:ea:c0:71:5f:3d:a3:8a:0e:fa:46:b5:bb: d8:6f:c1:16:3d:c5:bc:a8:eb:22:44:c8:22:0e:0c: a5:52:94:82:f2:dd:e3:3d:0d:8a:21:03:14:ad:be: 17:5f:ef:d6:9c:e5:ed:65:3c:a8:69:2a:34:00:ce: 19:7d:21:02:ed:cf:b2:f0:b3:03:0e:93:33:1b:ee: bd:dd:8c:e5:3f:7d:6e:7f:89:95:30:ae:3d:6e:b6: 52:70:e6:58:d1:11:17:04:af:b1:38:59:22:db:58: 24:a9:19:8d:5c:08:94:93:5f:87:a9:48:39:8d:67: f0:15:57:3c:26:66:c7:86:b9:da:99:96:36:1d:77: a9:d3:c2:e6:5b:4d:37:b9:09:53:58:1c:48:f8:96: 94:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:37:E1:12:A7:B4:99:F4:D9:01:40:6F:7F:F2:D3:E9:63:84:1F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/852f197f-8ee8-3b2f-be94-916f32fe7e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:01:bb:0c:1e:58:06:60:ea:e5:f5:43:e1:88:2b:62:cd:bd: 61:53:be:e5:ba:d6:5c:32:30:f4:38:64:84:0e:ef:e4:ec:33: 29:ec:66:b9:2e:7d:cd:59:55:81:9a:88:8b:a5:9b:2b:73:ee: 24:b6:6a:9b:44:69:b6:e0:cc:e7:78:06:cc:39:c8:f7:0e:73: 20:37:42:e9:05:f9:86:29:42:2e:02:04:68:c5:4f:7b:58:64: d6:12:d4:d0:54:f9:0f:d5:3e:9a:ce:7a:31:2a:55:50:77:56: 49:39:b6:bc:bc:33:d4:27:e0:5a:f5:41:ad:20:73:eb:f9:04: 4a:94:c0:55:e7:d8:1c:90:1c:81:39:07:73:d2:fe:1f:24:08: 77:20:7f:7c:34:6c:99:54:52:7c:0f:a4:40:b8:58:cc:d7:ef: 82:81:29:13:4f:11:c7:9b:db:21:03:23:cd:40:8c:53:42:b1: 71:6c:6b:80:37:e8:22:57:31:09:62:24:cd:a8:09:a6:fd:6f: 68:a3:81:4b:e5:14:aa:78:54:8f:1d:09:53:71:14:ae:88:35: 52:48:e2:ff:d2:ff:ef:ca:28:5c:96:d7:58:50:ef:30:2f:97: 34:d7:5f:49:c0:bd:85:d5:e2:65:8a:52:6a:6b:5b:40:72:ec: 9b:e2:93:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelP9ffco4IWHHbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NzcwYWI2YTgtNTkzOC00MDRlLTgxMDMtOGNiNzhiYzQyM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQe7DphfPVv0nD/FmaIN9CSVZmA1uzro4scf A/KSPNZL0O89gBGfw0ssWhEc6oCE+jUDaTAAfysbT7fQKBbeoQHx+pA/DTsamgpd ly5qVpdoJCkV/hmb0MfO9y94Ra4qmFmn94oAhsteoHHqwHFfPaOKDvpGtbvYb8EW PcW8qOsiRMgiDgylUpSC8t3jPQ2KIQMUrb4XX+/WnOXtZTyoaSo0AM4ZfSEC7c+y 8LMDDpMzG+693YzlP31uf4mVMK49brZScOZY0REXBK+xOFki21gkqRmNXAiUk1+H qUg5jWfwFVc8JmbHhrnamZY2HXep08LmW003uQlTWBxI+JaUPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ34RKntJn02QFAb3/y0+ljhB9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODUyZjE5N2YtOGVlOC0z YjJmLWJlOTQtOTE2ZjMyZmU3ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkBuwweWAZg6uX1Q+GIK2LNvWFTvuW61lwyMPQ4ZIQO7+TsMynsZrku fc1ZVYGaiIulmytz7iS2aptEabbgzOd4Bsw5yPcOcyA3QukF+YYpQi4CBGjFT3tY ZNYS1NBU+Q/VPprOejEqVVB3Vkk5try8M9Qn4Fr1Qa0gc+v5BEqUwFXn2ByQHIE5 B3PS/h8kCHcgf3w0bJlUUnwPpEC4WMzX74KBKRNPEceb2yEDI81AjFNCsXFsa4A3 6CJXMQliJM2oCab9b2ijgUvlFKp4VI8dCVNxFK6INVJI4v/S/+/KKFyW11hQ7zAv lzTXX0nAvYXV4mWKUmprW0By7Jvik9c= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:46 2026 by rpki-client