$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa File: 8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa (raw, json) Hash identifier: grJiu0MV520ykYyQQZ/NVwEFHhAudlXFsldVokoNUWs= Subject key identifier: 6E:D8:4E:B1:9E:DA:37:80:E4:FE:8A:37:25:AC:E6:49:A5:FF:24:D9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A52A7FA27CBE423D97200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:52:a7:fa:27:cb:e4:23:d9:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=2deded30-e010-4526-b94e-3f69a8e2aeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:33:00:87:0a:bf:28:3e:69:32:61:4d:fd:ff: a3:c4:77:94:40:0b:b7:01:45:0b:b1:84:0e:19:e5: 05:c8:35:7b:0a:5e:d9:4c:6e:4d:fb:fb:36:b6:22: fa:83:3d:ed:ab:8c:ae:46:8a:33:59:61:60:ca:f2: 05:1a:6a:da:4c:88:a9:75:c9:a6:53:a6:35:31:af: 45:9f:70:58:45:c8:ae:32:96:4a:b5:30:25:6f:83: 60:60:b9:d7:f3:5b:97:78:af:04:7b:df:73:13:a1: d2:8b:58:88:ae:55:55:5c:db:b5:e2:43:fd:74:a5: 19:8c:03:0c:e2:84:66:86:40:a0:f7:f6:13:5c:98: 17:83:51:76:63:d9:a6:21:25:f1:7b:e5:9b:b4:af: 81:38:d7:7b:c1:a1:7d:82:74:9d:81:a0:19:85:10: eb:7f:54:8d:9f:b6:2a:3e:c9:ea:9b:e2:5d:39:73: 8c:17:52:d8:95:2a:0b:28:99:31:ca:7a:6d:b5:27: b2:a2:17:55:cf:ad:0d:25:e4:34:65:59:aa:f7:c4: 99:74:e6:57:03:cb:7a:29:78:67:80:a2:20:2d:8c: 7d:e9:7b:da:af:78:27:13:8e:ad:f6:bf:3f:3b:2c: 93:58:ce:94:c1:87:e0:29:f6:42:0e:3e:86:7d:1c: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D8:4E:B1:9E:DA:37:80:E4:FE:8A:37:25:AC:E6:49:A5:FF:24:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fe3fdb0-ddfd-393e-a357-5313360c93a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:de:f0:42:77:09:4d:20:b0:34:35:0f:75:48:6d:f9:2b:b2: 69:27:0e:ab:e2:aa:20:89:3a:d0:7b:32:fe:eb:e3:8b:a2:2c: 5f:7e:51:c1:f8:73:76:21:2f:ef:c5:72:43:c4:78:7b:8f:4c: 5b:f2:94:c5:25:25:d6:6d:62:e0:e0:59:c4:5e:9b:25:49:d5: aa:9a:76:94:83:d7:74:c8:e7:c3:b4:69:c5:48:8b:d5:77:9a: 25:79:f0:54:a4:80:70:e9:24:93:19:57:aa:59:20:2e:bc:3d: 8a:89:a9:6f:86:a3:97:d9:c2:b1:0b:49:b3:3b:30:59:2d:d2: af:c9:8b:4c:3a:50:50:59:1f:78:a5:81:57:ac:16:65:29:41: 0d:05:24:85:51:09:31:64:b1:eb:08:65:c3:bf:a1:02:22:05: b5:80:0a:cc:24:47:a1:68:98:5d:49:e8:98:09:bd:fd:3a:e5: 24:f2:79:88:73:a8:28:88:2f:8c:d9:f3:da:2a:6a:68:44:6c: a9:79:34:13:06:c7:1f:eb:b4:f1:24:b4:b1:67:fc:a8:79:c4: b2:c7:31:bf:3a:70:87:da:15:78:c9:69:16:01:30:6e:72:14: 97:58:47:0e:ca:2f:f4:eb:a2:dc:96:fa:82:61:b2:4b:c8:42: 77:9c:b6:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelKn+ifL5CPZcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MmRlZGVkMzAtZTAxMC00NTI2LWI5NGUtM2Y2OWE4ZTJhZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzMAhwq/KD5pMmFN/f+jxHeUQAu3AUULsYQO GeUFyDV7Cl7ZTG5N+/s2tiL6gz3tq4yuRoozWWFgyvIFGmraTIipdcmmU6Y1Ma9F n3BYRciuMpZKtTAlb4NgYLnX81uXeK8Ee99zE6HSi1iIrlVVXNu14kP9dKUZjAMM 4oRmhkCg9/YTXJgXg1F2Y9mmISXxe+WbtK+BONd7waF9gnSdgaAZhRDrf1SNn7Yq Psnqm+JdOXOMF1LYlSoLKJkxynpttSeyohdVz60NJeQ0ZVmq98SZdOZXA8t6KXhn gKIgLYx96Xvar3gnE46t9r8/OyyTWM6UwYfgKfZCDj6GfRy12wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7YTrGe2jeA5P6KNyWs5kml/yTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGZlM2ZkYjAtZGRmZC0z OTNlLWEzNTctNTMxMzM2MGM5M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfe8EJ3CU0gsDQ1D3VIbfkrsmknDqviqiCJOtB7Mv7r44uiLF9+UcH4 c3YhL+/FckPEeHuPTFvylMUlJdZtYuDgWcRemyVJ1aqadpSD13TI58O0acVIi9V3 miV58FSkgHDpJJMZV6pZIC68PYqJqW+Go5fZwrELSbM7MFkt0q/Ji0w6UFBZH3il gVesFmUpQQ0FJIVRCTFksesIZcO/oQIiBbWACswkR6FomF1J6JgJvf065STyeYhz qCiIL4zZ89oqamhEbKl5NBMGxx/rtPEktLFn/Kh5xLLHMb86cIfaFXjJaRYBMG5y FJdYRw7KL/TrotyW+oJhskvIQnectlM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:29 2026 by rpki-client