$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa File: a32b982b-80c0-30f4-9738-db8d8a2a0644.roa (raw, json) Hash identifier: U/FQTBOedOOFmf4hvCXJCAS084XjPLRp0HC75odi0+0= Subject key identifier: FE:E5:DB:D8:AC:45:3E:36:BE:CF:80:35:74:41:42:36:CA:6B:D8:A9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A2784D617AB9EF9871900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:27:84:d6:17:ab:9e:f9:87:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9807853a-b76c-4ea2-a6ab-fea20a7bf6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:23:bc:7a:8e:6a:6a:16:8f:86:73:11:1c: e6:9b:b4:f7:83:24:60:2f:58:84:1a:66:ac:bb:de: 47:1a:52:03:d1:66:d2:24:82:f7:9a:ff:a2:b7:31: 55:05:5f:1e:a4:26:bc:56:6d:4f:c1:43:dc:82:41: eb:7a:05:a8:38:67:8c:01:a9:a8:09:56:94:aa:1b: ce:0f:68:ff:77:bf:2c:86:ad:2d:0f:e2:77:5c:e8: 9d:20:34:73:87:ad:64:0b:02:4e:d1:ca:35:bb:8c: b3:78:3a:12:a9:f5:30:6a:dd:56:9b:07:79:91:cc: f4:eb:65:fb:19:cb:1a:d7:03:03:fb:00:66:19:c4: f9:cb:1a:df:7b:b0:03:bc:7f:02:be:e2:85:f5:6d: 0d:ee:91:a6:ac:9d:04:74:2b:52:a2:75:69:9f:15: bb:fe:72:40:91:dc:9f:ce:7c:36:37:7a:72:c8:fe: 11:04:2d:1e:80:8d:67:28:96:6b:15:53:a4:fc:4d: 50:39:5b:46:1a:b1:46:69:97:e2:c8:60:c2:80:17: f8:9b:b2:1f:13:f0:ec:f2:89:42:66:b0:a4:b3:34: 47:d2:7c:c9:5a:3f:12:a8:2a:c2:ed:93:d6:d9:58: 2c:eb:d8:c1:b7:e7:77:84:6f:52:f0:2c:c7:31:6b: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E5:DB:D8:AC:45:3E:36:BE:CF:80:35:74:41:42:36:CA:6B:D8:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:89:7c:4b:08:5b:ad:45:75:24:bc:59:27:92:fe:18:cb:07: d5:69:b3:eb:b1:59:ab:54:e4:a4:93:c2:cf:99:c8:6a:65:37: 7b:aa:a2:88:97:fb:b3:11:0a:00:fe:73:fe:bb:6c:48:56:01: 89:78:a6:fe:82:ef:4b:68:07:8a:54:9f:1a:78:aa:f0:48:56: 9a:3c:e5:33:45:c3:7f:06:ca:8e:3d:c4:ee:41:0b:1d:fc:01: 95:25:95:1f:11:18:e0:7d:f1:c4:ae:36:f2:c7:4a:ef:77:84: fe:c2:d8:ae:44:56:fd:0f:53:fc:c5:2a:81:73:af:ac:84:00: 0d:48:2f:ee:29:15:41:f2:4e:a5:59:3b:60:a3:3e:63:93:bd: 04:42:da:37:2b:12:24:48:94:03:84:d6:0e:5f:11:3c:ec:19: f3:7d:eb:65:a3:47:7d:58:69:dd:a2:38:53:1c:71:0a:09:43: ab:10:9d:8b:07:60:67:90:d8:d2:b6:a7:7b:81:10:45:21:13: 2d:a4:7e:30:3f:8c:64:68:b8:b8:3c:6e:6a:26:4d:c3:c5:dc: ab:fd:84:7b:b8:7c:61:a0:47:d3:f9:c5:e3:6e:16:01:45:05: 1d:88:1d:02:f5:4e:c3:90:a5:bd:46:cb:30:db:c8:60:39:0a: b9:d8:6e:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeieE1hernvmHGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTgwNzg1M2EtYjc2Yy00ZWEyLWE2YWItZmVhMjBhN2JmNmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqgjvHqOamoWj4ZzERzmm7T3gyRgL1iEGmas u95HGlID0WbSJIL3mv+itzFVBV8epCa8Vm1PwUPcgkHregWoOGeMAamoCVaUqhvO D2j/d78shq0tD+J3XOidIDRzh61kCwJO0co1u4yzeDoSqfUwat1Wmwd5kcz062X7 Gcsa1wMD+wBmGcT5yxrfe7ADvH8CvuKF9W0N7pGmrJ0EdCtSonVpnxW7/nJAkdyf znw2N3pyyP4RBC0egI1nKJZrFVOk/E1QOVtGGrFGaZfiyGDCgBf4m7IfE/Ds8olC ZrCkszRH0nzJWj8SqCrC7ZPW2Vgs69jBt+d3hG9S8CzHMWsURQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7l29isRT42vs+ANXRBQjbKa9ipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTMyYjk4MmItODBjMC0z MGY0LTk3MzgtZGI4ZDhhMmEwNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+JfEsIW61FdSS8WSeS/hjLB9Vps+uxWatU5KSTws+ZyGplN3uqooiX +7MRCgD+c/67bEhWAYl4pv6C70toB4pUnxp4qvBIVpo85TNFw38Gyo49xO5BCx38 AZUllR8RGOB98cSuNvLHSu93hP7C2K5EVv0PU/zFKoFzr6yEAA1IL+4pFUHyTqVZ O2CjPmOTvQRC2jcrEiRIlAOE1g5fETzsGfN962WjR31Yad2iOFMccQoJQ6sQnYsH YGeQ2NK2p3uBEEUhEy2kfjA/jGRouLg8bmomTcPF3Kv9hHu4fGGgR9P5xeNuFgFF BR2IHQL1TsOQpb1GyzDbyGA5CrnYbqo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:18 2026 by rpki-client