$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa File: 9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa (raw, json) Hash identifier: O4enoH+8hyk8vP/rJ3GPm6L1O4Y/VFwOiyrNESwTUkI= Subject key identifier: 5B:E4:C5:F1:1A:7F:4D:C7:0F:F7:8D:77:AD:80:04:04:50:DF:CF:91 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A218FF283D01B30206880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:21:8f:f2:83:d0:1b:30:20:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=2f8e664c-044c-43c2-8245-eb61f29c3444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:20:84:bc:8e:10:8e:4f:f4:8a:d5:bb:4e:68: 63:a4:71:db:4a:c8:c8:82:0d:03:b5:c4:2c:d9:77: 6c:04:16:e9:d6:97:1d:ff:fc:0a:d3:19:f6:88:fd: 60:70:e8:48:e0:de:82:c1:5d:07:2e:60:96:18:d0: bc:dd:8f:d8:35:2f:bb:18:fd:35:af:c8:32:ff:51: c0:0e:61:a4:55:12:d3:26:40:7d:0b:a9:69:a3:a4: d0:a4:e1:15:19:e2:ca:f9:8f:16:b5:2d:c2:13:29: fd:14:39:c5:a4:c9:18:e2:61:64:c6:bf:09:b7:fd: a9:40:70:2d:86:f5:f2:b6:8f:32:4f:79:7a:81:a1: 38:4d:ef:e7:ea:47:a3:43:27:90:d1:44:a3:5d:d3: f8:5e:7d:37:7a:41:f8:27:3f:e6:4f:75:5c:16:6a: 99:fb:13:1a:63:86:ba:cd:bc:81:a4:25:94:ac:8c: 2d:a7:8a:75:bf:99:c5:8a:94:92:08:89:c9:e8:28: 91:9e:cf:95:6e:a2:49:56:e1:a0:9c:55:a0:14:32: e1:b8:3c:56:bb:26:1b:25:39:45:43:48:14:88:89: f7:f2:c5:f2:17:fc:fe:05:ec:43:69:54:3d:37:89: 6d:09:f9:06:7c:a4:99:73:75:2a:a9:38:61:ce:cd: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E4:C5:F1:1A:7F:4D:C7:0F:F7:8D:77:AD:80:04:04:50:DF:CF:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9f3bc8e2-56a3-3187-b3fc-9159252cdc33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:84:5b:81:68:33:f7:17:8e:86:2b:de:8f:ff:9c:d2:00:14: b3:9f:d9:87:cf:a1:4d:64:ef:1e:af:2b:aa:72:9c:7c:61:ea: 06:a8:05:e4:17:c8:4b:91:31:ed:61:2c:04:87:c3:33:4e:21: 76:bd:d8:96:0c:b7:c0:1f:fb:e7:a5:56:42:af:0f:d9:70:89: 48:9f:73:10:4c:3a:d9:a4:22:35:d4:ba:bf:9f:6c:5c:01:a9: e9:b8:02:88:20:f3:3b:15:7e:be:b0:1b:ca:01:3d:b7:cb:20: 74:4a:bb:4c:cf:af:6a:68:94:e4:de:7d:ce:bf:f6:4c:b3:b6: c5:55:8e:a3:0d:be:fe:1c:10:f7:cc:c5:d2:68:37:8a:c9:f1: ff:02:d0:96:c2:bd:f8:6f:ce:2a:68:34:07:fa:1d:0d:0c:fd: ac:72:08:17:00:fc:04:b5:a8:41:29:67:42:cb:03:77:90:01: db:8a:c7:a6:f7:24:f2:bd:d7:a9:d8:2b:e8:9c:9f:74:81:4f: 45:39:16:92:c2:b6:41:52:2c:1d:e5:ce:b6:14:66:7b:9f:1e: 48:7a:d3:03:6d:7a:aa:cf:c5:b8:70:4c:d7:44:27:71:5a:0e: 49:e0:12:3a:35:15:b0:9d:72:c2:2c:91:2a:d9:ae:72:f6:89: 0b:a5:0e:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiGP8oPQGzAgaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MmY4ZTY2NGMtMDQ0Yy00M2MyLTgyNDUtZWI2MWYyOWMzNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCCEvI4Qjk/0itW7TmhjpHHbSsjIgg0DtcQs 2XdsBBbp1pcd//wK0xn2iP1gcOhI4N6CwV0HLmCWGNC83Y/YNS+7GP01r8gy/1HA DmGkVRLTJkB9C6lpo6TQpOEVGeLK+Y8WtS3CEyn9FDnFpMkY4mFkxr8Jt/2pQHAt hvXyto8yT3l6gaE4Te/n6kejQyeQ0USjXdP4Xn03ekH4Jz/mT3VcFmqZ+xMaY4a6 zbyBpCWUrIwtp4p1v5nFipSSCInJ6CiRns+VbqJJVuGgnFWgFDLhuDxWuyYbJTlF Q0gUiIn38sXyF/z+BexDaVQ9N4ltCfkGfKSZc3UqqThhzs05AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvkxfEaf03HD/eNd62ABARQ38+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWYzYmM4ZTItNTZhMy0z MTg3LWIzZmMtOTE1OTI1MmNkYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2EW4FoM/cXjoYr3o//nNIAFLOf2YfPoU1k7x6vK6pynHxh6gaoBeQX yEuRMe1hLASHwzNOIXa92JYMt8Af++elVkKvD9lwiUifcxBMOtmkIjXUur+fbFwB qem4Aogg8zsVfr6wG8oBPbfLIHRKu0zPr2polOTefc6/9kyztsVVjqMNvv4cEPfM xdJoN4rJ8f8C0JbCvfhvzipoNAf6HQ0M/axyCBcA/AS1qEEpZ0LLA3eQAduKx6b3 JPK916nYK+icn3SBT0U5FpLCtkFSLB3lzrYUZnufHkh60wNteqrPxbhwTNdEJ3Fa DkngEjo1FbCdcsIskSrZrnL2iQulDrk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:06 2026 by rpki-client