$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a27bab4e-c1f0-3f94-832a-2e0ae9ad232b.roa File: a27bab4e-c1f0-3f94-832a-2e0ae9ad232b.roa (raw, json) Hash identifier: +xbtBXRixlrxMUbSbcdBTDPnDZPR/v69lucGsh0CfWw= Subject key identifier: DA:BE:BD:B5:28:C1:49:A7:F0:E6:80:DD:41:7B:03:90:65:FB:C5:61 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3D748154AFB283F01A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a27bab4e-c1f0-3f94-832a-2e0ae9ad232b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3d:74:81:54:af:b2:83:f0:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9cd5600a-712e-4f10-96a2-f3230d94cbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:e2:c0:b7:9e:4f:f6:11:6c:03:2f:d7:7f: b6:65:89:8a:73:bf:8e:e6:d2:e6:87:78:f9:b6:6c: 8c:7f:d5:f8:87:fd:9e:f2:84:e5:81:8a:85:39:a2: 07:d3:39:2d:75:fd:3b:99:9b:4f:b3:ce:4e:e3:42: 55:b3:97:8d:08:5b:c6:39:a3:84:9c:85:11:01:f0: 4c:98:05:66:72:5d:ca:08:31:f5:f2:bf:52:ec:70: 45:53:c3:28:d6:0c:88:72:1f:6c:81:2e:0d:33:f4: 1a:84:a0:14:89:a9:2b:36:f1:9b:f5:c2:0c:32:31: d2:ce:0c:c0:24:55:da:83:b2:3f:e2:be:5d:0a:a2: b7:ae:5e:10:0d:57:df:8e:ec:a6:f7:8d:20:df:a8: 45:c3:3b:cb:07:68:55:8a:df:30:29:68:5b:6e:ab: e4:70:56:29:c4:ec:58:a9:a5:b5:8f:46:e8:60:91: e9:0a:e0:cb:b9:79:5f:da:ba:44:bf:2a:d4:d8:a9: 17:7a:fc:8d:0e:20:d0:c2:73:f4:ad:f6:84:59:ba: c9:f6:da:c5:57:0f:8c:6d:ba:b8:fe:fa:7b:23:e1: e1:17:82:d5:17:c3:26:ae:34:a9:89:90:c1:b4:10: e0:0c:7d:a4:ff:94:c8:23:73:39:8b:11:78:da:f4: 7c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BE:BD:B5:28:C1:49:A7:F0:E6:80:DD:41:7B:03:90:65:FB:C5:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a27bab4e-c1f0-3f94-832a-2e0ae9ad232b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b6:55:a8:b1:4c:98:10:61:3f:4d:0b:a0:8b:74:8a:dd:9a: c1:fd:ac:c0:36:c5:40:5b:69:12:ca:1f:65:b4:ef:3c:83:62: b8:ee:ca:45:7b:b8:20:c2:c2:2e:cd:c0:7d:84:af:8d:52:66: d9:44:c8:a6:7a:35:d1:53:08:fb:68:54:c2:bd:74:ac:df:ab: 62:aa:1b:c6:18:63:58:c7:85:52:cb:4e:f7:1c:1f:3b:28:bc: d1:3a:dd:3b:b2:57:61:f0:95:69:f3:8c:22:0d:5f:05:24:8b: a3:bf:ec:59:07:ec:b9:e4:3e:de:9f:02:b9:d8:8e:78:f9:54: 76:ab:ab:64:38:50:7a:62:8a:8b:ed:25:3e:b6:16:ea:d2:82: 54:a7:97:aa:87:88:7b:b5:c5:1a:7f:73:fe:3f:c2:7d:06:26: 4a:82:7c:f3:50:80:d3:36:db:24:9a:af:12:ce:6f:72:47:b0: 95:ff:3a:70:ea:e7:d3:f9:5d:24:d8:31:c4:4c:95:a0:52:78: 0f:95:74:c2:7f:d9:40:d1:72:d1:84:64:de:56:50:5c:b1:89: 53:e6:4a:52:92:48:38:5f:d1:92:8b:e0:a6:da:4f:56:a7:f3: 33:ed:96:66:ac:a7:94:86:4b:da:24:bd:41:24:fd:0a:70:81: 58:ea:c2:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jej10gVSvsoPwGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OWNkNTYwMGEtNzEyZS00ZjEwLTk2YTItZjMyMzBkOTRjYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlTiwLeeT/YRbAMv13+2ZYmKc7+O5tLmh3j5 tmyMf9X4h/2e8oTlgYqFOaIH0zktdf07mZtPs85O40JVs5eNCFvGOaOEnIURAfBM mAVmcl3KCDH18r9S7HBFU8Mo1gyIch9sgS4NM/QahKAUiakrNvGb9cIMMjHSzgzA JFXag7I/4r5dCqK3rl4QDVffjuym940g36hFwzvLB2hVit8wKWhbbqvkcFYpxOxY qaW1j0boYJHpCuDLuXlf2rpEvyrU2KkXevyNDiDQwnP0rfaEWbrJ9trFVw+Mbbq4 /vp7I+HhF4LVF8MmrjSpiZDBtBDgDH2k/5TII3M5ixF42vR8OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq+vbUowUmn8OaA3UF7A5Bl+8VhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTI3YmFiNGUtYzFmMC0z Zjk0LTgzMmEtMmUwYWU5YWQyMzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu2VaixTJgQYT9NC6CLdIrdmsH9rMA2xUBbaRLKH2W07zyDYrjuykV7 uCDCwi7NwH2Er41SZtlEyKZ6NdFTCPtoVMK9dKzfq2KqG8YYY1jHhVLLTvccHzso vNE63TuyV2HwlWnzjCINXwUki6O/7FkH7LnkPt6fArnYjnj5VHarq2Q4UHpiiovt JT62FurSglSnl6qHiHu1xRp/c/4/wn0GJkqCfPNQgNM22ySarxLOb3JHsJX/OnDq 59P5XSTYMcRMlaBSeA+VdMJ/2UDRctGEZN5WUFyxiVPmSlKSSDhf0ZKL4KbaT1an 8zPtlmasp5SGS9okvUEk/QpwgVjqwh4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:23 2026 by rpki-client