$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa File: 85637620-9689-35f2-8e85-75b58e890791.roa (raw, json) Hash identifier: C15xwQYDpQPuD/t9CvZFGS04dG8zw9yYzFTQ79uPiMI= Subject key identifier: D2:C4:2B:2F:1E:02:47:A2:26:9C:52:E8:D8:34:67:5F:FE:94:DC:F9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4495B539B198FF690FE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:44:95:b5:39:b1:98:ff:69:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9afcbbda-f5a7-4fd9-9c16-e410f9ea9b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dc:c5:88:d4:9a:e9:15:83:3b:9b:e5:1f:72: 37:4a:1b:c5:2b:bc:7a:65:9d:a2:c9:98:bc:f1:0e: 6c:62:c3:5b:9d:4f:15:65:89:46:87:9a:2e:78:09: 93:b8:f7:c4:6c:1d:1d:77:30:ac:f6:f7:76:34:6f: 97:75:56:1e:12:5a:8f:4d:fe:ee:b2:89:5a:e8:cd: 4f:c6:28:34:f1:6d:29:6d:10:76:a8:d1:70:f5:c9: 7e:6e:bd:2a:0a:ec:d9:52:8d:98:cd:ba:40:b1:3a: 44:57:b5:63:a2:56:10:4f:6c:2b:2a:1c:4d:69:1d: d6:ef:57:ef:ef:d5:46:03:2e:d1:85:d0:89:00:90: 9f:ce:6b:9f:5b:63:a0:c7:26:9e:81:5d:59:c5:23: 99:f0:71:f5:6b:ce:d2:11:7d:ba:5c:b4:42:3d:3c: 3b:72:2f:94:42:54:a5:8e:b7:7f:ff:b2:f2:ea:10: 6f:62:ba:6c:72:51:24:a1:36:47:e5:d9:5f:10:48: 84:b7:3c:e6:f7:38:ec:ae:bb:d0:b3:e9:43:26:53: 58:2b:46:da:6c:0a:28:49:fe:ca:41:de:8e:1b:36: 5e:fb:5c:b0:b3:91:ef:4f:d9:ff:1a:58:03:d3:5e: ba:5c:e0:0f:2f:c3:f6:15:b0:58:93:a1:51:48:e4: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C4:2B:2F:1E:02:47:A2:26:9C:52:E8:D8:34:67:5F:FE:94:DC:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85637620-9689-35f2-8e85-75b58e890791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:cb:12:02:1d:5a:53:51:d1:bf:b6:5e:4e:9c:af:f5:e3:89: c8:94:0d:73:e8:88:53:f0:35:95:da:f8:05:d5:dd:d6:49:21: bd:37:16:84:f2:35:d9:46:82:3b:b1:3f:78:9d:b8:fa:0c:05: 4c:5f:e7:20:6b:c0:38:41:03:02:f7:91:0c:16:05:34:fd:6e: 2c:96:05:e4:84:cd:47:da:bc:98:8e:ad:f8:45:b5:30:e7:20: 87:30:01:a0:05:b8:e6:2b:ee:d5:43:12:f5:12:20:f8:72:93: 70:a7:46:25:4d:58:ba:e4:51:bb:de:eb:fb:26:f1:6b:82:29: 76:fe:83:43:26:ae:df:6f:d8:e2:31:0a:b6:5b:44:90:7d:60: 78:6a:5e:0c:a3:64:c7:d4:42:ed:fd:bc:7e:c9:9b:48:34:04: e5:e4:7c:b9:fe:02:cc:ea:f4:b5:dc:be:fc:aa:7b:5c:99:42: e6:1e:d9:26:51:6b:7f:eb:6c:3a:da:9d:23:b3:d3:8b:e5:43: e8:2f:4e:d6:3a:af:e8:83:a3:67:20:6c:08:3f:cf:4c:a5:ee: 08:97:ef:66:a5:9f:76:2e:3b:38:97:ce:18:f4:6c:5b:a5:21: 0a:6f:6b:81:12:7a:54:da:39:16:a6:95:24:5f:78:87:42:cd: 5c:4c:01:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekSVtTmxmP9pD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OWFmY2JiZGEtZjVhNy00ZmQ5LTljMTYtZTQxMGY5ZWE5YjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtzFiNSa6RWDO5vlH3I3ShvFK7x6ZZ2iyZi8 8Q5sYsNbnU8VZYlGh5oueAmTuPfEbB0ddzCs9vd2NG+XdVYeElqPTf7usola6M1P xig08W0pbRB2qNFw9cl+br0qCuzZUo2YzbpAsTpEV7VjolYQT2wrKhxNaR3W71fv 79VGAy7RhdCJAJCfzmufW2OgxyaegV1ZxSOZ8HH1a87SEX26XLRCPTw7ci+UQlSl jrd//7Ly6hBvYrpsclEkoTZH5dlfEEiEtzzm9zjsrrvQs+lDJlNYK0babAooSf7K Qd6OGzZe+1yws5HvT9n/GlgD0166XOAPL8P2FbBYk6FRSOQImQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLEKy8eAkeiJpxS6Ng0Z1/+lNz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODU2Mzc2MjAtOTY4OS0z NWYyLThlODUtNzViNThlODkwNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnLEgIdWlNR0b+2Xk6cr/XjiciUDXPoiFPwNZXa+AXV3dZJIb03FoTy NdlGgjuxP3iduPoMBUxf5yBrwDhBAwL3kQwWBTT9biyWBeSEzUfavJiOrfhFtTDn IIcwAaAFuOYr7tVDEvUSIPhyk3CnRiVNWLrkUbve6/sm8WuCKXb+g0Mmrt9v2OIx CrZbRJB9YHhqXgyjZMfUQu39vH7Jm0g0BOXkfLn+Aszq9LXcvvyqe1yZQuYe2SZR a3/rbDranSOz04vlQ+gvTtY6r+iDo2cgbAg/z0yl7giX72aln3YuOziXzhj0bFul IQpva4ESelTaORamlSRfeIdCzVxMASk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:34 2026 by rpki-client