$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8da7dcfb-64be-3132-960a-a55c216d4d4a.roa File: 8da7dcfb-64be-3132-960a-a55c216d4d4a.roa (raw, json) Hash identifier: HsTr6mB0bav1r2BOfuDN6ApjCXiroXwVizNX7D0/Tgc= Subject key identifier: 38:95:94:EF:AF:BA:83:3E:74:B3:2B:24:0E:43:7C:59:69:B7:B5:C5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A431F2679A5D6B8B8D100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8da7dcfb-64be-3132-960a-a55c216d4d4a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:43:1f:26:79:a5:d6:b8:b8:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=90905316-8bb8-46a1-b086-aff496d7f806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:6f:2d:0b:31:5a:fb:2f:b6:e7:01:d6:2c: 68:42:da:92:b9:6c:67:08:de:4f:67:ed:e0:02:79: 83:b8:61:1f:11:4e:d9:7a:d8:3a:dd:8c:3b:28:0e: 54:54:9f:bb:7f:05:df:d1:ee:09:69:e8:22:9b:95: f8:95:b0:59:6a:34:92:d1:95:79:cb:ee:6a:4a:12: d6:8a:f6:6d:7d:b3:08:29:a3:a3:5c:6f:6a:fa:47: 12:2f:ee:57:3d:12:73:b8:ae:69:17:23:de:1d:61: bc:40:46:4b:3b:ac:f9:02:d5:c8:fa:b3:b0:1f:59: 30:00:69:8e:6b:94:68:8f:20:c8:02:1e:94:b5:01: 5d:40:93:08:69:2c:95:08:7d:d1:ce:33:87:b7:58: 4b:32:54:8b:24:65:3d:6e:69:2d:82:25:27:3e:0b: 50:fe:96:1f:7e:6e:cf:2a:a6:3f:13:56:a9:5e:f6: 6c:4e:ac:67:67:ec:10:76:1c:83:5d:2b:35:d4:c7: 35:88:f0:f4:53:b5:6f:ea:a0:09:5c:96:f3:a0:ab: 60:4f:35:6c:28:68:0e:35:fe:97:ed:3e:ad:e0:f3: 41:bf:f8:a7:19:63:2d:09:f0:0a:77:c6:83:66:e5: 9a:fa:c7:bf:f3:a3:cc:9e:0c:10:67:1c:f4:c5:50: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:95:94:EF:AF:BA:83:3E:74:B3:2B:24:0E:43:7C:59:69:B7:B5:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8da7dcfb-64be-3132-960a-a55c216d4d4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:22:2f:26:c5:00:6a:f1:30:82:e8:4f:dd:bb:42:e4:4c:d6: 44:22:bb:dc:6d:60:fe:7d:bd:ed:08:bd:73:56:77:af:d4:cc: 95:79:90:c7:b3:71:a6:57:6c:4f:06:5d:5a:09:e9:b3:d7:ee: a4:2d:46:fa:17:16:39:fc:1c:3f:b5:07:8b:73:09:89:3d:1c: 3f:22:35:8c:5a:5e:16:09:b5:a6:ce:93:e5:c2:a4:cd:c3:ec: 28:da:22:a5:cb:c5:ee:dc:36:17:9e:6e:cd:6e:c7:b4:ce:7d: d4:2a:38:dd:11:48:c7:82:23:95:c7:76:37:6b:fd:e5:81:a3: 85:52:14:a2:27:bf:b5:cd:dc:5a:a8:ae:29:3b:63:1b:46:33: 52:57:9f:c6:71:11:24:e4:5d:68:c4:d2:e9:a7:ec:b0:0d:31: 8c:e9:b1:70:5d:10:36:03:80:e2:fb:04:99:a1:b9:d2:c8:6b: 09:49:b9:2b:06:36:d9:c1:7b:5b:87:6f:97:e2:5c:de:bf:d4: 8b:fa:46:ec:4e:99:0d:2f:b6:89:7e:e1:45:28:66:0e:3c:95: 01:41:1e:83:fd:42:b7:ff:0b:9e:fe:8b:7c:e5:bb:de:ad:80: e3:1e:e1:49:3b:59:84:d4:c8:8a:5e:5b:ab:bc:d1:af:21:c7: a2:1b:11:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekMfJnml1ri40QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTA5MDUzMTYtOGJiOC00NmExLWIwODYtYWZmNDk2ZDdmODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiBvLQsxWvsvtucB1ixoQtqSuWxnCN5PZ+3g AnmDuGEfEU7Zetg63Yw7KA5UVJ+7fwXf0e4Jaegim5X4lbBZajSS0ZV5y+5qShLW ivZtfbMIKaOjXG9q+kcSL+5XPRJzuK5pFyPeHWG8QEZLO6z5AtXI+rOwH1kwAGmO a5RojyDIAh6UtQFdQJMIaSyVCH3RzjOHt1hLMlSLJGU9bmktgiUnPgtQ/pYffm7P KqY/E1apXvZsTqxnZ+wQdhyDXSs11Mc1iPD0U7Vv6qAJXJbzoKtgTzVsKGgONf6X 7T6t4PNBv/inGWMtCfAKd8aDZuWa+se/86PMngwQZxz0xVCdtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiVlO+vuoM+dLMrJA5DfFlpt7XFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGRhN2RjZmItNjRiZS0z MTMyLTk2MGEtYTU1YzIxNmQ0ZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsiLybFAGrxMILoT927QuRM1kQiu9xtYP59ve0IvXNWd6/UzJV5kMez caZXbE8GXVoJ6bPX7qQtRvoXFjn8HD+1B4tzCYk9HD8iNYxaXhYJtabOk+XCpM3D 7CjaIqXLxe7cNheebs1ux7TOfdQqON0RSMeCI5XHdjdr/eWBo4VSFKInv7XN3Fqo rik7YxtGM1JXn8ZxESTkXWjE0umn7LANMYzpsXBdEDYDgOL7BJmhudLIawlJuSsG NtnBe1uHb5fiXN6/1Iv6RuxOmQ0vtol+4UUoZg48lQFBHoP9Qrf/C57+i3zlu96t gOMe4Uk7WYTUyIpeW6u80a8hx6IbEX8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:01 2026 by rpki-client