$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa File: 9957d7bb-4a48-379a-8699-0af885f6a4a3.roa (raw, json) Hash identifier: PE3Ovz8a1Jww0eMUbJVzjLC3hutJCpyzMhw1WA/tYMI= Subject key identifier: C6:FE:8D:20:9F:E4:27:2B:47:DE:DF:F6:B4:DD:E5:CA:A7:5F:90:2C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1C160FAA91E50B501200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1c:16:0f:aa:91:e5:0b:50:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=a5bfaf92-647b-46b1-bec7-1511654af604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:3b:06:2f:0f:21:ca:e6:78:5b:78:be:ce: 34:0d:a6:5c:75:99:7e:11:49:c3:cb:e7:62:7d:20: a1:a9:d5:fa:9d:b3:9e:ee:6a:6a:24:21:ea:a2:12: c5:bc:e0:da:3a:ee:92:d4:88:e0:d9:2a:e5:bb:e2: a2:34:d1:f5:83:f3:d2:e5:99:b2:31:c3:f5:0c:c8: 38:3c:c3:5d:9d:b8:e3:4d:81:2f:8e:65:ab:a0:5b: be:06:5c:f4:7d:f7:f4:29:b9:24:4b:b9:cf:bc:5f: 09:74:68:f3:13:fe:51:2b:87:6f:9b:37:c4:5e:b7: af:e1:79:36:28:2c:ae:1f:9f:26:8c:fb:a4:f7:e1: 1f:a2:fa:c5:96:39:46:a1:f7:48:78:38:51:5a:c1: 92:f7:ef:96:5c:e5:73:6e:2c:11:f0:fb:73:64:f9: 5c:80:fa:0c:56:29:18:13:31:a7:4e:7e:b4:68:f0: 23:3a:f9:31:0c:92:4c:79:ca:1e:39:c8:c4:75:d0: 3c:39:5b:cc:d2:ac:e6:a7:6b:57:00:31:c4:0f:94: 4b:6d:32:e0:83:46:14:c9:ca:61:fc:41:27:71:43: ff:bd:0f:78:ca:43:ae:1b:23:33:40:99:1b:84:06: 93:4d:0a:a8:22:a7:74:70:88:da:8b:76:3a:6a:84: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FE:8D:20:9F:E4:27:2B:47:DE:DF:F6:B4:DD:E5:CA:A7:5F:90:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9957d7bb-4a48-379a-8699-0af885f6a4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:9e:5c:78:cb:a8:73:7a:39:42:79:46:41:07:6f:b3:93:7c: 21:06:f6:0f:ff:f8:f3:e7:25:8b:2d:d4:e8:8b:d3:af:4a:35: e4:ec:b4:29:56:9b:cd:d0:56:ad:f5:11:eb:5f:ea:88:32:4c: 88:50:67:95:aa:39:dc:94:2a:bc:ec:4e:12:8c:68:bf:0a:da: 67:7b:9e:1c:07:30:a3:dc:2f:88:fe:37:df:92:ac:65:3f:a3: 4a:08:72:df:fc:ab:43:31:fe:49:45:14:62:22:c9:7b:4d:8f: c7:ba:eb:5b:97:6b:ca:ab:1e:1b:88:89:ec:ff:40:5d:6c:93: a3:c7:a5:dd:df:66:8b:08:2a:bd:22:da:6b:4d:cd:25:8f:f4: a3:c7:33:99:93:63:f3:40:91:16:01:fd:2c:8b:03:24:37:22: ec:1d:6e:cd:36:b9:7a:f0:38:94:69:cd:da:50:94:36:3a:9e: 3b:04:f1:72:b4:89:d3:6e:09:d3:1c:8c:c1:9d:d9:a3:da:76: 7b:47:b8:24:ef:8f:29:58:1e:9c:f7:ee:77:02:1a:a1:7c:b5: 65:5a:ef:b5:d9:b8:9a:bb:e7:05:0d:bb:01:51:50:45:bf:20: 51:f8:1e:dd:88:f1:b7:b4:78:3c:b0:c0:1d:33:05:bd:89:96: 78:77:c8:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehwWD6qR5QtQEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YTViZmFmOTItNjQ3Yi00NmIxLWJlYzctMTUxMTY1NGFmNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncU7Bi8PIcrmeFt4vs40DaZcdZl+EUnDy+di fSChqdX6nbOe7mpqJCHqohLFvODaOu6S1Ijg2Srlu+KiNNH1g/PS5ZmyMcP1DMg4 PMNdnbjjTYEvjmWroFu+Blz0fff0KbkkS7nPvF8JdGjzE/5RK4dvmzfEXrev4Xk2 KCyuH58mjPuk9+EfovrFljlGofdIeDhRWsGS9++WXOVzbiwR8PtzZPlcgPoMVikY EzGnTn60aPAjOvkxDJJMecoeOcjEddA8OVvM0qzmp2tXADHED5RLbTLgg0YUycph /EEncUP/vQ94ykOuGyMzQJkbhAaTTQqoIqd0cIjai3Y6aoQCJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb+jSCf5CcrR97f9rTd5cqnX5AsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTk1N2Q3YmItNGE0OC0z NzlhLTg2OTktMGFmODg1ZjZhNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJieXHjLqHN6OUJ5RkEHb7OTfCEG9g//+PPnJYst1OiL069KNeTstClW m83QVq31Eetf6ogyTIhQZ5WqOdyUKrzsThKMaL8K2md7nhwHMKPcL4j+N9+SrGU/ o0oIct/8q0Mx/klFFGIiyXtNj8e661uXa8qrHhuIiez/QF1sk6PHpd3fZosIKr0i 2mtNzSWP9KPHM5mTY/NAkRYB/SyLAyQ3Iuwdbs02uXrwOJRpzdpQlDY6njsE8XK0 idNuCdMcjMGd2aPadntHuCTvjylYHpz37ncCGqF8tWVa77XZuJq75wUNuwFRUEW/ IFH4Ht2I8be0eDywwB0zBb2Jlnh3yJ0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:10 2026 by rpki-client