$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa File: 8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa (raw, json) Hash identifier: 8EVqo2NmaBhpC8qWHBZQsQyFjCiLZdXXsCl4UafDs3M= Subject key identifier: 83:30:E7:10:0C:82:19:35:14:53:21:AE:12:1A:9E:97:B9:7F:A3:B4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A5C544F46C71E66568CC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:5c:54:4f:46:c7:1e:66:56:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=40ebfb4f-9c96-4439-b088-f2eb24b10541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b6:f9:ec:42:aa:14:63:cc:80:f5:0b:ab:db: f5:1b:88:34:f3:c9:6b:82:d6:ce:0a:8f:46:38:cd: db:43:c4:93:99:24:01:ea:45:8d:e6:04:14:e4:d9: b0:8a:de:ee:c9:f6:28:f0:7d:99:38:ed:9e:05:aa: 24:96:d0:b6:4b:0c:14:77:da:1a:68:85:18:6e:47: 91:48:c0:bd:94:4a:6f:5a:ae:65:8f:c5:7c:7a:34: a9:95:e3:4f:e9:45:07:af:a9:96:0e:f0:da:7e:79: 09:d6:30:a5:0b:62:ee:43:f9:c9:43:58:65:18:3c: 92:41:75:5a:52:e8:80:f7:e6:8a:37:3e:99:2e:00: 5d:38:4e:1f:5d:2a:71:9f:bb:da:70:c0:1b:2b:54: ff:14:f9:68:81:3b:01:7b:0d:61:f1:69:5d:d2:e9: c5:e9:21:fd:39:f3:03:ea:85:01:f3:26:c9:38:fd: ad:29:93:da:58:3a:75:52:ef:2c:a9:85:3a:86:6d: 75:3a:1e:a9:bd:f6:33:72:81:99:94:b0:df:9a:2f: e8:54:a2:1d:cb:ee:4b:92:ec:31:41:d3:16:2b:b8: 60:3b:51:9c:50:8d:69:16:ea:d4:8e:26:50:3b:c0: 1b:a1:a9:17:58:f3:e5:1f:08:a5:e9:5f:59:c0:8f: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:30:E7:10:0C:82:19:35:14:53:21:AE:12:1A:9E:97:B9:7F:A3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e932e68-6a15-3864-9ce4-05ad0eb894c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:71:4e:ca:dd:ad:89:12:73:21:3b:17:5f:e3:c4:5d:9c:7c: a1:f7:0f:dc:21:ae:10:c8:b5:a8:52:67:4f:88:0c:ff:d9:0f: 23:33:34:b4:20:4e:db:c0:d3:9d:28:df:91:e3:e5:30:38:54: 8c:e7:ec:89:ba:e6:e2:4d:39:1c:c4:dc:3f:46:07:1f:a2:ea: 51:c1:9e:6b:fa:bc:f3:44:c7:dc:cd:1f:56:d2:8d:8d:55:15: 82:70:9e:b7:51:52:70:35:b5:f8:9d:12:09:fc:46:e8:a8:8f: 8f:b9:b3:28:49:a8:f5:9b:a7:4b:04:64:8a:1b:98:5a:4d:0f: ff:69:2b:e3:94:d1:0f:a5:19:4b:7e:7a:ec:5f:e4:3c:de:3b: 98:72:e2:33:f2:15:29:f8:43:d5:41:8a:86:64:0e:e2:c4:e5: 1d:67:ec:b9:a9:46:0b:4e:73:29:36:96:9c:b9:69:43:5c:fd: 6a:25:ae:c8:fa:10:f9:38:ec:aa:b8:30:e4:c2:6b:1c:d4:07: 55:c7:a1:ec:36:9c:92:d6:0f:13:d6:11:a9:bf:71:bf:07:63: e5:5b:25:71:77:3d:8f:4d:de:4e:98:f0:41:a0:65:5c:68:f7: a5:a3:71:11:d3:f9:58:4b:b1:49:b9:9d:49:5b:8d:00:f0:b9: 37:e9:b8:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelxUT0bHHmZWjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDBlYmZiNGYtOWM5Ni00NDM5LWIwODgtZjJlYjI0YjEwNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7b57EKqFGPMgPULq9v1G4g088lrgtbOCo9G OM3bQ8STmSQB6kWN5gQU5Nmwit7uyfYo8H2ZOO2eBaokltC2SwwUd9oaaIUYbkeR SMC9lEpvWq5lj8V8ejSpleNP6UUHr6mWDvDafnkJ1jClC2LuQ/nJQ1hlGDySQXVa UuiA9+aKNz6ZLgBdOE4fXSpxn7vacMAbK1T/FPlogTsBew1h8Wld0unF6SH9OfMD 6oUB8ybJOP2tKZPaWDp1Uu8sqYU6hm11Oh6pvfYzcoGZlLDfmi/oVKIdy+5Lkuwx QdMWK7hgO1GcUI1pFurUjiZQO8AboakXWPPlHwil6V9ZwI/YzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMw5xAMghk1FFMhrhIanpe5f6O0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGU5MzJlNjgtNmExNS0z ODY0LTljZTQtMDVhZDBlYjg5NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFxTsrdrYkScyE7F1/jxF2cfKH3D9whrhDItahSZ0+IDP/ZDyMzNLQg TtvA050o35Hj5TA4VIzn7Im65uJNORzE3D9GBx+i6lHBnmv6vPNEx9zNH1bSjY1V FYJwnrdRUnA1tfidEgn8Ruioj4+5syhJqPWbp0sEZIobmFpND/9pK+OU0Q+lGUt+ euxf5DzeO5hy4jPyFSn4Q9VBioZkDuLE5R1n7LmpRgtOcyk2lpy5aUNc/Wolrsj6 EPk47Kq4MOTCaxzUB1XHoew2nJLWDxPWEam/cb8HY+VbJXF3PY9N3k6Y8EGgZVxo 96WjcRHT+VhLsUm5nUlbjQDwuTfpuN8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:20 2026 by rpki-client