$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa File: 85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa (raw, json) Hash identifier: 7PhnSi4kSXotYIYoANd2gfwibvTWvp1IdNzu3Bp+AKg= Subject key identifier: 9F:51:13:BB:AC:75:E5:DD:4A:91:1A:D0:81:52:A2:0D:F0:23:84:33 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A2A40BB570C3F3BCE6100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2a:40:bb:57:0c:3f:3b:ce:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=02d72f10-3dbe-49d5-857b-1b4c36af222a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:2d:fd:f6:f3:54:7b:33:4f:3e:ba:79:9e: 93:08:06:05:8e:51:c0:b4:bd:32:77:29:b0:d8:94: 65:79:c4:00:72:7d:d0:f9:68:1f:0e:4e:96:35:58: 5b:15:31:b5:90:88:22:90:fa:94:ac:6f:db:af:15: 4d:25:e5:3c:03:92:0c:2f:70:3d:90:0d:9a:82:e2: 8a:08:13:6b:04:24:94:85:34:97:9e:c4:f1:ce:39: 59:ef:64:7a:9a:8b:96:d1:1c:b6:48:3d:30:6d:f6: 04:8d:47:b9:5d:42:2f:5a:06:3f:d4:35:bc:30:09: d8:1b:98:02:0d:f3:84:c3:11:de:26:04:aa:ad:08: 2a:ac:1f:20:6f:4c:7d:77:99:a7:a9:ad:4e:b4:b7: e9:0b:4e:00:18:30:84:53:24:35:9f:b3:1c:dc:61: ce:3f:31:be:68:f1:e2:04:ad:dc:1d:ae:a2:38:ec: 5a:25:3f:74:2b:e5:ea:49:9d:4e:88:67:dd:a7:a2: 85:81:85:c8:83:71:28:0c:15:3c:34:d2:21:c0:1a: 7c:00:cd:79:ec:f4:00:96:7a:37:8c:f6:53:eb:23: 86:34:b5:e6:f1:cc:73:32:5c:4d:72:c9:74:66:1a: 46:b6:51:e7:28:b0:e4:7d:0d:bb:df:11:b9:5d:5a: 61:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:51:13:BB:AC:75:E5:DD:4A:91:1A:D0:81:52:A2:0D:F0:23:84:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/85b93d64-efbd-33f1-82c2-8feb585d0ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c4:0e:2c:1d:33:03:d1:39:82:f6:cf:f2:93:d5:c8:c0:a7: ed:9a:ae:40:b4:c7:00:48:27:8f:11:84:9a:a8:c4:df:ef:f7: dd:24:96:bf:57:c9:08:ef:52:44:93:5c:62:df:fe:2a:fc:d5: dc:df:1e:6d:0f:06:53:fd:92:eb:fd:10:5a:cf:aa:34:48:52: ad:c6:c1:91:4e:d9:eb:25:26:43:1f:a3:09:06:f0:fd:d9:93: 79:98:76:27:ea:38:18:5c:79:c7:d8:52:29:93:cb:c7:d1:68: 38:0f:ce:55:81:06:20:b2:27:b2:67:12:fa:1d:e7:a2:fd:b0: 35:6c:43:1b:fb:d8:6b:86:dd:c5:5d:94:2a:51:b7:ab:8b:50: 82:d1:43:2a:7a:0d:ac:1f:4b:09:e9:98:7d:a5:e2:13:2d:b7: b6:79:bb:10:92:c0:0e:1a:e3:1c:1d:6b:a0:60:3f:15:e0:06: a6:2f:bb:a9:58:64:d4:66:b4:5d:10:a3:06:7e:9f:87:0f:ab: 04:73:5e:d5:a7:f5:65:49:75:51:68:7e:6d:8e:be:1f:b1:23: f0:56:fa:ed:d5:c7:5a:ef:23:76:da:42:bf:8c:8d:13:7d:2a: d8:2e:cb:5a:41:34:2f:75:49:19:4d:63:f4:fd:79:28:57:58: 01:e9:2a:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeipAu1cMPzvOYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MDJkNzJmMTAtM2RiZS00OWQ1LTg1N2ItMWI0YzM2YWYyMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneQt/fbzVHszTz66eZ6TCAYFjlHAtL0ydymw 2JRlecQAcn3Q+WgfDk6WNVhbFTG1kIgikPqUrG/brxVNJeU8A5IML3A9kA2aguKK CBNrBCSUhTSXnsTxzjlZ72R6mouW0Ry2SD0wbfYEjUe5XUIvWgY/1DW8MAnYG5gC DfOEwxHeJgSqrQgqrB8gb0x9d5mnqa1OtLfpC04AGDCEUyQ1n7Mc3GHOPzG+aPHi BK3cHa6iOOxaJT90K+XqSZ1OiGfdp6KFgYXIg3EoDBU8NNIhwBp8AM157PQAlno3 jPZT6yOGNLXm8cxzMlxNcsl0ZhpGtlHnKLDkfQ273xG5XVph8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9RE7usdeXdSpEa0IFSog3wI4QzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODViOTNkNjQtZWZiZC0z M2YxLTgyYzItOGZlYjU4NWQwYWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDEDiwdMwPROYL2z/KT1cjAp+2arkC0xwBIJ48RhJqoxN/v990klr9X yQjvUkSTXGLf/ir81dzfHm0PBlP9kuv9EFrPqjRIUq3GwZFO2eslJkMfowkG8P3Z k3mYdifqOBhcecfYUimTy8fRaDgPzlWBBiCyJ7JnEvod56L9sDVsQxv72GuG3cVd lCpRt6uLUILRQyp6DawfSwnpmH2l4hMtt7Z5uxCSwA4a4xwda6BgPxXgBqYvu6lY ZNRmtF0QowZ+n4cPqwRzXtWn9WVJdVFofm2Ovh+xI/BW+u3Vx1rvI3baQr+MjRN9 Ktguy1pBNC91SRlNY/T9eShXWAHpKjs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:07 2026 by rpki-client