$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9b1612ac-f530-3a97-bc6a-5a638ded7f28.roa File: 9b1612ac-f530-3a97-bc6a-5a638ded7f28.roa (raw, json) Hash identifier: KgmlOIdF3qX9VTQb9K/05fXfRBZhRqwJVbSf0XVjKFg= Subject key identifier: 4F:DE:83:1E:B9:93:8D:75:B9:ED:02:7D:5D:7C:EB:10:2C:6F:4E:B1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A2A1F1825B7CCEFA367C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9b1612ac-f530-3a97-bc6a-5a638ded7f28.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2a:1f:18:25:b7:cc:ef:a3:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e80ca360-3c41-452c-9ccd-61f164519824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:64:60:51:32:fe:d9:57:50:a2:3a:b4:71:be: e1:54:2e:87:f6:6c:f6:92:00:b5:c6:c5:73:ba:4a: a3:93:9a:a7:35:47:36:9e:ce:ee:8d:2d:53:5e:d5: 10:e2:f9:fe:f3:0c:a7:f0:83:51:3c:05:1b:16:0a: 1e:82:fd:ad:a0:42:ec:51:2f:9c:43:eb:42:94:95: 73:84:93:08:cb:ae:8b:34:4d:55:f8:07:40:be:1b: b7:8e:62:71:59:ab:30:d8:5e:97:15:da:3f:36:f4: 33:95:96:9e:6f:54:ae:f0:5e:52:f1:d4:3b:2c:cb: 0b:08:7b:10:f5:87:db:28:03:c2:2c:ea:54:72:5a: 3b:57:3b:4d:7f:94:4e:53:1b:56:94:c5:5f:d4:ea: 8e:b1:18:20:07:d5:75:e8:79:eb:41:9a:3c:4b:09: cd:5b:6a:63:30:8f:bd:27:ea:ea:e3:62:ca:be:cf: 0f:3b:0c:51:70:23:05:11:e6:13:d3:89:ad:02:74: 6d:c8:a8:1a:06:c6:53:b3:33:36:2d:b8:58:e6:de: a0:e7:5d:3a:c6:98:61:34:8d:bc:9a:62:d6:c3:39: 26:1e:f1:9a:a3:0e:fc:af:2f:56:7c:31:b6:f9:fa: c7:4f:9f:80:17:50:b5:e2:07:3d:3d:97:f3:c7:d8: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DE:83:1E:B9:93:8D:75:B9:ED:02:7D:5D:7C:EB:10:2C:6F:4E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9b1612ac-f530-3a97-bc6a-5a638ded7f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:00:46:1a:1b:83:d1:1c:5b:83:29:64:7b:08:49:6a:73:81: 4d:6a:2c:84:4b:be:f1:80:94:af:2f:fd:d3:f4:d3:d8:f5:3b: 16:9d:15:e6:30:66:19:ff:74:c5:ee:a5:cf:e8:c2:4f:43:d7: 8d:d5:29:c9:5b:c5:35:8a:f6:46:00:0e:a8:e6:db:1c:7b:6f: 8a:4d:13:46:7c:56:12:4c:49:c1:45:f8:8e:b3:01:93:17:60: 82:f6:3b:8d:25:ee:ac:56:9b:d5:38:2a:54:70:34:af:db:a7: fa:56:d4:b2:f3:a3:0b:7e:94:86:19:ad:14:3a:2b:f3:96:7d: d4:f5:9f:f7:92:bf:79:60:08:12:60:5b:6a:db:e8:b2:f6:fa: b2:c8:ab:dd:30:af:85:2f:8c:c2:60:4a:3c:f9:dc:9b:3f:e3: 48:e5:56:d4:2e:b3:dd:e7:1f:ca:03:30:f9:fa:da:26:ef:ef: d4:83:2b:4b:88:47:57:b9:a0:56:a5:bf:d9:4d:ec:43:e2:c5: 5b:91:41:a7:c8:97:50:38:bd:37:45:8c:26:c7:14:7a:0e:21: e2:d5:38:40:d9:2d:90:04:32:b7:04:30:5b:5a:ae:c7:05:26: 09:2d:4e:0f:3a:e3:3e:58:6c:a8:b5:9e:d4:7a:e9:aa:c2:37: 5f:8e:10:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiofGCW3zO+jZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTgwY2EzNjAtM2M0MS00NTJjLTljY2QtNjFmMTY0NTE5ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGRgUTL+2VdQojq0cb7hVC6H9mz2kgC1xsVz ukqjk5qnNUc2ns7ujS1TXtUQ4vn+8wyn8INRPAUbFgoegv2toELsUS+cQ+tClJVz hJMIy66LNE1V+AdAvhu3jmJxWasw2F6XFdo/NvQzlZaeb1Su8F5S8dQ7LMsLCHsQ 9YfbKAPCLOpUclo7VztNf5ROUxtWlMVf1OqOsRggB9V16HnrQZo8SwnNW2pjMI+9 J+rq42LKvs8POwxRcCMFEeYT04mtAnRtyKgaBsZTszM2LbhY5t6g5106xphhNI28 mmLWwzkmHvGaow78ry9WfDG2+frHT5+AF1C14gc9PZfzx9j2zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/egx65k411ue0CfV186xAsb06xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWIxNjEyYWMtZjUzMC0z YTk3LWJjNmEtNWE2MzhkZWQ3ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0ARhobg9EcW4MpZHsISWpzgU1qLIRLvvGAlK8v/dP009j1OxadFeYw Zhn/dMXupc/owk9D143VKclbxTWK9kYADqjm2xx7b4pNE0Z8VhJMScFF+I6zAZMX YIL2O40l7qxWm9U4KlRwNK/bp/pW1LLzowt+lIYZrRQ6K/OWfdT1n/eSv3lgCBJg W2rb6LL2+rLIq90wr4UvjMJgSjz53Js/40jlVtQus93nH8oDMPn62ibv79SDK0uI R1e5oFalv9lN7EPixVuRQafIl1A4vTdFjCbHFHoOIeLVOEDZLZAEMrcEMFtarscF JgktTg864z5YbKi1ntR66arCN1+OENc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:59 2026 by rpki-client