$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9d460612-f5a9-3eb9-b486-a855994f3189.roa File: 9d460612-f5a9-3eb9-b486-a855994f3189.roa (raw, json) Hash identifier: NVezgKDwJyS/U1xw4mcRiqx3WGwNpnD9XoKVm8CbRq8= Subject key identifier: 63:BC:CC:05:C1:F9:BB:21:0A:24:41:1F:DC:9D:5A:A3:6D:D5:BE:A8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A483AB676D3FA8057EA80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9d460612-f5a9-3eb9-b486-a855994f3189.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:48:3a:b6:76:d3:fa:80:57:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=74f3a7f6-6328-4939-a7b1-566edd5fd12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:20:d8:8d:62:17:08:c7:7a:d2:17:b3:95:0c: 9b:5c:83:9c:11:33:04:7b:86:d6:a3:71:d1:21:4b: c8:b6:58:80:f2:20:3f:18:4c:23:e4:28:2e:5b:2a: 3f:b6:be:b4:2a:e2:c0:40:e3:af:c4:77:2f:e8:b7: db:7c:2c:b8:21:9a:fb:56:fc:b6:0e:98:d5:10:de: a0:ef:c4:c7:78:6d:ea:24:96:d4:5c:8c:6f:26:2b: d5:12:1e:6a:62:a9:36:d0:ce:74:1e:62:aa:a7:00: 6c:0c:5a:4d:f4:0a:9b:2d:d2:ec:ab:3c:7d:3d:a3: 62:51:03:3d:04:17:c7:2a:75:49:d7:3f:17:8f:88: 39:48:70:68:88:9f:3a:2c:38:ee:4f:2d:6c:c8:2c: 40:d8:18:6e:7a:95:fe:a3:9a:9d:7d:c2:91:60:62: 8f:2f:77:02:a4:47:45:c3:1d:1e:0a:b5:b3:8e:66: 9c:5d:57:57:ef:62:06:73:53:e6:ef:06:94:0c:fa: 8a:b9:09:9d:56:68:fe:40:ca:91:cb:71:bc:89:7d: 7b:cc:95:13:3a:9c:28:c9:d5:34:12:54:b5:4c:83: 57:95:af:df:a1:2d:2a:58:ec:49:ca:62:fe:bd:d1: 1f:c9:72:6c:68:2c:23:3b:b5:1d:e6:cb:fe:85:39: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BC:CC:05:C1:F9:BB:21:0A:24:41:1F:DC:9D:5A:A3:6D:D5:BE:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9d460612-f5a9-3eb9-b486-a855994f3189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a4:70:21:6e:9b:93:39:ed:2b:f4:b3:b9:bb:2b:9a:1c:81: 87:85:c9:c5:ed:91:d2:60:52:ac:63:f6:bd:b3:9c:c8:84:b0: a2:ec:e5:8b:6b:20:d5:47:8b:c1:6f:48:93:09:b3:f6:21:20: 66:25:e6:8a:ec:56:a3:e2:f1:a7:2f:de:63:e2:f8:59:c5:9a: 08:7d:36:58:6e:38:9d:15:bd:19:d5:0f:05:8d:17:03:4b:4b: 4f:2a:a0:3a:a8:8c:72:eb:0a:36:b6:d3:08:c9:a0:2f:b7:d1: 2f:0a:ea:fa:ee:4f:fc:6e:54:fc:83:b2:80:16:77:98:50:d2: dc:11:74:a1:d5:fd:7b:1c:e9:f9:09:09:7f:c0:f1:24:ce:00: 7d:46:8a:6a:66:24:6d:ac:86:59:46:41:1b:db:d0:7b:92:35: b7:89:5d:a3:c2:36:58:42:37:65:7d:0c:b0:ec:0c:c0:58:76: f2:f6:d7:37:c0:25:84:bf:54:de:d0:cf:94:8e:3d:eb:20:94: 0a:46:23:d7:88:b2:51:0f:7a:21:a4:dc:55:1e:fc:4b:b3:36: 60:99:5e:87:13:2f:9b:52:e9:e5:10:f2:ac:ff:ca:e0:15:3e: eb:ef:ef:54:07:00:68:cd:b5:17:aa:3d:58:04:6e:86:09:b2: 4e:1a:bf:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekg6tnbT+oBX6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NzRmM2E3ZjYtNjMyOC00OTM5LWE3YjEtNTY2ZWRkNWZkMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiDYjWIXCMd60hezlQybXIOcETMEe4bWo3HR IUvItliA8iA/GEwj5CguWyo/tr60KuLAQOOvxHcv6LfbfCy4IZr7Vvy2DpjVEN6g 78THeG3qJJbUXIxvJivVEh5qYqk20M50HmKqpwBsDFpN9AqbLdLsqzx9PaNiUQM9 BBfHKnVJ1z8Xj4g5SHBoiJ86LDjuTy1syCxA2BhuepX+o5qdfcKRYGKPL3cCpEdF wx0eCrWzjmacXVdX72IGc1Pm7waUDPqKuQmdVmj+QMqRy3G8iX17zJUTOpwoydU0 ElS1TINXla/foS0qWOxJymL+vdEfyXJsaCwjO7Ud5sv+hTn0OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGO8zAXB+bshCiRBH9ydWqNt1b6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWQ0NjA2MTItZjVhOS0z ZWI5LWI0ODYtYTg1NTk5NGYzMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSkcCFum5M57Sv0s7m7K5ocgYeFycXtkdJgUqxj9r2znMiEsKLs5Ytr INVHi8FvSJMJs/YhIGYl5orsVqPi8acv3mPi+FnFmgh9NlhuOJ0VvRnVDwWNFwNL S08qoDqojHLrCja20wjJoC+30S8K6vruT/xuVPyDsoAWd5hQ0twRdKHV/Xsc6fkJ CX/A8STOAH1GimpmJG2shllGQRvb0HuSNbeJXaPCNlhCN2V9DLDsDMBYdvL21zfA JYS/VN7Qz5SOPesglApGI9eIslEPeiGk3FUe/EuzNmCZXocTL5tS6eUQ8qz/yuAV Puvv71QHAGjNtReqPVgEboYJsk4av1g= -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:36 2026 by rpki-client