$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa File: aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa (raw, json) Hash identifier: i7Qi41Kb+gQPkIOEEc7L+AgJCOuYBfRMh3tkWO6r7v4= Subject key identifier: 49:7F:84:A0:05:D0:6F:79:CA:7D:83:E7:A1:F8:FC:C0:FB:CB:2B:F1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379F057D96B6CA57D7CD0C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f0:57:d9:6b:6c:a5:7d:7c:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=0d960137-ca39-4488-9851-3e9b83f15351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cd:29:06:a1:57:d1:32:d9:05:92:6e:e5:fb: fe:91:c5:f6:80:4b:f2:a5:17:98:08:b7:d1:bd:d6: 3b:06:a7:04:ea:76:99:91:81:43:c9:7f:a1:e1:0e: b2:1a:47:91:89:ed:94:fc:ee:f5:dc:ac:ac:58:35: 2f:57:06:98:d8:2c:93:32:13:d5:70:55:99:df:ec: 84:c5:32:79:a7:3c:f7:0f:06:a9:3a:6a:d1:05:33: 52:a0:cc:72:ef:ee:40:b3:bc:5a:47:2a:0d:a8:0b: 5a:87:74:be:62:90:89:ef:60:5b:9a:1a:89:9b:d1: d6:fe:c0:cf:16:a3:ce:70:b6:1b:cc:6f:f1:47:3a: cc:54:ac:1f:70:17:26:e3:63:f2:ce:9d:b2:bd:66: 47:62:87:69:04:12:fc:2b:6f:f9:85:f7:e6:59:80: 04:d2:d1:2f:55:70:1e:e4:1f:1f:1d:c3:96:f4:7d: 15:74:40:40:d4:d8:52:58:cb:1f:c4:54:89:e1:46: 1b:a0:99:0f:69:5f:5f:c9:71:7c:b9:2a:de:2f:7e: bd:58:a8:8d:2a:b1:99:d7:51:84:91:5d:44:66:c4: 34:ad:1a:90:0b:db:ef:7f:0f:4c:9e:29:33:df:d1: 10:27:28:3c:e1:20:1d:de:7f:32:a4:58:9b:02:e9: 90:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7F:84:A0:05:D0:6F:79:CA:7D:83:E7:A1:F8:FC:C0:FB:CB:2B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aa36d4fa-de9a-3687-a6d8-6a56428ba53c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c3:2c:15:d3:74:09:4b:d7:48:f7:95:65:44:ac:5c:aa:4d: 8e:61:f8:d4:d5:c7:81:23:6b:a1:56:47:18:8a:b1:e4:4f:1f: be:d5:4f:69:4b:2b:a8:9f:19:e7:95:1e:b0:37:cf:0b:3f:83: 27:b6:35:97:c5:67:0b:f0:6b:c9:e6:c4:99:f7:84:63:f9:03: 2c:15:96:34:9a:c7:6c:98:a4:c4:0d:8a:ec:48:fb:c8:1c:0a: 7d:02:9c:01:6e:36:79:39:75:5e:6b:7b:f0:b9:68:33:d6:e7: de:b2:64:9e:2a:14:de:00:3f:6b:fd:b5:b2:e5:f0:a4:a3:d2: d4:3f:b7:ed:79:03:f8:5b:01:d0:3d:38:69:40:89:7a:2c:3a: ab:77:4c:1b:41:e3:b4:7b:c7:ad:11:8d:20:08:71:f7:6b:c5: 84:3b:ea:25:ca:94:e2:94:b0:c5:97:cb:55:fe:28:8f:83:c5: 02:ef:b0:c1:eb:0b:eb:58:f4:4a:bf:a6:11:be:b6:26:a3:af: 2c:41:aa:66:63:6a:34:5a:69:68:63:c6:2f:c2:75:bf:20:34: 24:bd:5b:ee:5a:eb:e7:17:43:be:f6:e1:80:54:5b:1b:08:be: 04:9b:c3:a8:f8:9b:33:01:6a:a5:56:08:02:13:ed:81:df:f6: 2f:c9:9a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefBX2WtspX180MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MGQ5NjAxMzctY2EzOS00NDg4LTk4NTEtM2U5YjgzZjE1MzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc0pBqFX0TLZBZJu5fv+kcX2gEvypReYCLfR vdY7BqcE6naZkYFDyX+h4Q6yGkeRie2U/O713KysWDUvVwaY2CyTMhPVcFWZ3+yE xTJ5pzz3DwapOmrRBTNSoMxy7+5As7xaRyoNqAtah3S+YpCJ72BbmhqJm9HW/sDP FqPOcLYbzG/xRzrMVKwfcBcm42Pyzp2yvWZHYodpBBL8K2/5hffmWYAE0tEvVXAe 5B8fHcOW9H0VdEBA1NhSWMsfxFSJ4UYboJkPaV9fyXF8uSreL369WKiNKrGZ11GE kV1EZsQ0rRqQC9vvfw9Mnikz39EQJyg84SAd3n8ypFibAumQJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl/hKAF0G95yn2D56H4/MD7yyvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWEzNmQ0ZmEtZGU5YS0z Njg3LWE2ZDgtNmE1NjQyOGJhNTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLDLBXTdAlL10j3lWVErFyqTY5h+NTVx4Eja6FWRxiKseRPH77VT2lL K6ifGeeVHrA3zws/gye2NZfFZwvwa8nmxJn3hGP5AywVljSax2yYpMQNiuxI+8gc Cn0CnAFuNnk5dV5re/C5aDPW596yZJ4qFN4AP2v9tbLl8KSj0tQ/t+15A/hbAdA9 OGlAiXosOqt3TBtB47R7x60RjSAIcfdrxYQ76iXKlOKUsMWXy1X+KI+DxQLvsMHr C+tY9Eq/phG+tiajryxBqmZjajRaaWhjxi/Cdb8gNCS9W+5a6+cXQ7724YBUWxsI vgSbw6j4mzMBaqVWCAIT7YHf9i/JmiU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:46 2026 by rpki-client