$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a98ef54e-a2aa-3839-88a0-2bb96fe25a79.roa File: a98ef54e-a2aa-3839-88a0-2bb96fe25a79.roa (raw, json) Hash identifier: yLFpdBKlmuu4Kmhbl7sxWRCFJ8pihEu9+3TrfTg0VZc= Subject key identifier: FE:DB:1A:78:04:6D:5E:50:5B:FC:69:22:D3:36:38:5D:E1:2F:FE:3F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A57FC76852CC1E92517C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a98ef54e-a2aa-3839-88a0-2bb96fe25a79.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:57:fc:76:85:2c:c1:e9:25:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=2262aa34-dd8d-46a7-a516-d07e44121b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:d5:68:cd:24:3e:8f:17:de:37:ea:11:cb: 47:a2:55:1e:38:78:aa:ee:67:ee:16:ae:f6:39:4b: fa:0c:d3:52:2d:81:ea:a7:0d:9a:7b:6e:2a:28:8e: 7f:9d:cd:aa:0c:9c:1b:3d:ff:9d:40:24:8e:5f:d5: f5:11:39:c4:7f:2c:9f:4a:0c:29:00:2b:fe:fa:14: d5:c9:4d:47:d0:6c:61:00:e5:09:da:44:ce:b5:76: 72:b8:c0:7c:21:50:3a:73:aa:70:4b:ff:9d:96:31: 70:1f:01:1d:0f:74:25:4b:f7:e1:da:12:bb:19:95: ee:93:27:b8:63:08:cd:ab:e4:e5:8c:f1:de:d0:93: d7:8b:0f:6b:ac:1d:f1:4f:74:79:53:83:69:f1:59: 08:ae:de:6c:4b:01:05:65:08:06:b6:8b:db:76:9a: a1:2c:7f:bb:12:75:26:c8:83:74:f8:66:de:ca:dc: 80:6b:b8:56:2d:88:c9:ee:66:bc:52:43:f2:fa:86: 9b:15:88:0f:e3:81:7b:e9:b0:63:b8:b6:06:f9:28: 52:41:5b:51:fc:de:af:4e:80:91:35:1f:fc:b3:cd: 8c:94:7f:03:f7:c7:f6:11:0f:1f:1a:b5:98:b8:e1: e8:e0:bb:86:5b:b8:23:eb:a2:14:a9:4b:a0:4c:8f: 30:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DB:1A:78:04:6D:5E:50:5B:FC:69:22:D3:36:38:5D:E1:2F:FE:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a98ef54e-a2aa-3839-88a0-2bb96fe25a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:84:7d:d5:da:5d:00:d2:22:1e:80:d4:7c:a0:92:a5:06:a7: 28:f5:9d:d8:3a:b8:1a:87:29:13:73:4e:ef:5a:df:73:c7:cd: eb:38:58:47:78:e2:bc:1e:14:cc:96:ea:d5:8e:c3:21:77:90: 90:b9:a8:b3:87:33:94:91:c7:9d:f7:1a:5a:73:ee:8d:4d:53: 2b:08:15:44:cd:db:bd:98:64:8c:0e:14:88:5b:b3:1f:57:26: 89:0a:8e:56:14:87:93:28:82:b3:2f:51:4b:30:27:4c:6a:78: 73:59:bb:cc:7d:53:1a:8f:c1:0e:c1:f2:d4:f0:5f:e3:4a:34: 9a:16:f2:8a:b8:97:99:a0:4f:70:83:d4:79:2f:8f:b9:fb:db: e4:62:eb:8c:ab:d9:fe:0f:f7:cd:24:60:cf:ce:b9:ca:33:04: 2c:8b:5a:91:b9:01:84:dd:f2:e5:4b:b8:1b:17:6d:85:7d:45: b5:15:cf:df:49:f5:d6:96:cb:9f:03:ed:5d:b8:ca:85:ef:dd: 03:f6:e6:54:8b:99:9a:a2:13:a2:4f:de:fb:d5:b6:f9:de:09: 89:a5:3e:b9:c3:95:a2:f5:3a:b2:a2:c0:84:1b:98:6c:05:60: 9f:53:97:56:37:cb:c3:4c:80:10:be:5b:5f:ec:d3:a1:6c:14: 2f:3b:c5:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelf8doUsweklF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjI2MmFhMzQtZGQ4ZC00NmE3LWE1MTYtZDA3ZTQ0MTIxYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxbVaM0kPo8X3jfqEctHolUeOHiq7mfuFq72 OUv6DNNSLYHqpw2ae24qKI5/nc2qDJwbPf+dQCSOX9X1ETnEfyyfSgwpACv++hTV yU1H0GxhAOUJ2kTOtXZyuMB8IVA6c6pwS/+dljFwHwEdD3QlS/fh2hK7GZXukye4 YwjNq+TljPHe0JPXiw9rrB3xT3R5U4Np8VkIrt5sSwEFZQgGtovbdpqhLH+7EnUm yIN0+GbeytyAa7hWLYjJ7ma8UkPy+oabFYgP44F76bBjuLYG+ShSQVtR/N6vToCR NR/8s82MlH8D98f2EQ8fGrWYuOHo4LuGW7gj66IUqUugTI8wfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7bGngEbV5QW/xpItM2OF3hL/4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTk4ZWY1NGUtYTJhYS0z ODM5LTg4YTAtMmJiOTZmZTI1YTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRa5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWEfdXaXQDSIh6A1HygkqUGpyj1ndg6uBqHKRNzTu9a33PHzes4WEd4 4rweFMyW6tWOwyF3kJC5qLOHM5SRx533Glpz7o1NUysIFUTN272YZIwOFIhbsx9X JokKjlYUh5MogrMvUUswJ0xqeHNZu8x9UxqPwQ7B8tTwX+NKNJoW8oq4l5mgT3CD 1Hkvj7n72+Ri64yr2f4P980kYM/OucozBCyLWpG5AYTd8uVLuBsXbYV9RbUVz99J 9daWy58D7V24yoXv3QP25lSLmZqiE6JP3vvVtvneCYmlPrnDlaL1OrKiwIQbmGwF YJ9Tl1Y3y8NMgBC+W1/s06FsFC87xac= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:49 2026 by rpki-client