$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa File: aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa (raw, json) Hash identifier: /eK8xZQBX0+TaGMzKzGzvntH45EERtzkd+aUpDl5MAY= Subject key identifier: E6:3F:69:75:BE:D6:32:6B:06:67:41:9F:B6:E1:76:A3:E1:9C:BC:8B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A0C8621D8E18718ED2F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:0c:86:21:d8:e1:87:18:ed:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=253efb45-1189-435c-82c3-19771810758f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1e:ac:9c:29:33:39:77:7b:d7:fa:e2:1e:c0: e8:70:e9:b7:c4:3f:6b:04:6a:ac:e7:ac:5d:d0:a5: f2:fb:0a:7c:17:38:08:ce:c0:ff:45:95:f7:5b:39: 28:65:ab:e3:4b:b1:fb:9a:ae:78:e9:6d:5d:bd:4c: 4c:41:94:a4:1f:75:29:c3:57:17:f9:6f:56:46:45: a9:80:7c:a9:db:41:ca:81:82:15:ea:4a:cb:0b:4d: 6d:fb:e0:ad:e3:b6:64:05:37:e6:6a:64:48:17:e1: 4d:e6:8a:28:4f:aa:11:50:9f:6e:55:6f:2e:40:ab: d3:cc:02:3b:f4:ef:5b:70:2c:a4:c5:db:89:01:9f: 26:2c:c0:1f:9f:a3:51:21:f6:79:92:29:56:fe:bb: 3b:d5:57:67:b8:28:21:66:08:ec:5d:e8:de:c9:33: 68:af:bf:45:9c:2a:ef:b1:97:b6:94:33:69:5d:56: ff:6d:f7:b0:cf:66:69:d6:94:aa:e6:f5:4c:ae:a0: 9e:5c:d3:a1:6b:7e:bc:d8:d4:b4:43:6d:ba:5f:4d: a5:c7:58:2f:f6:e8:33:a8:a3:42:6f:5a:a9:e9:82: 1c:2e:e2:82:95:28:21:9f:85:d3:a1:4a:0c:83:38: 87:c7:4f:1e:7f:64:4b:32:5d:60:71:03:0b:30:d5: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:69:75:BE:D6:32:6B:06:67:41:9F:B6:E1:76:A3:E1:9C:BC:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/aaa890c4-03fa-323b-b4b6-f39cf98987f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:02:f7:7a:cf:64:fb:46:1b:6e:fa:85:da:ed:0d:d2:0d:49: 2a:44:12:a2:59:ef:cb:27:1e:de:08:9f:50:f8:d7:de:85:0c: 45:30:64:ff:92:88:af:da:4b:17:d5:b0:dc:e5:00:1b:c0:72: 28:1f:a5:ce:0e:6d:43:16:39:86:dd:e1:95:f1:5f:d4:fd:46: 79:bc:a1:74:d5:6e:2b:72:b4:c6:15:4a:ba:92:4a:a2:e8:e8: 8c:93:b3:fa:5c:d9:f3:e3:d0:35:84:4f:88:57:34:ae:74:37: 19:c4:80:7e:7d:74:10:32:c4:e6:bf:c1:1f:b7:b7:c3:9a:2a: a2:16:38:9a:da:f1:77:5a:2e:8e:11:90:1a:51:21:03:c0:28: 1a:5b:3f:56:d0:b6:e4:0a:e2:ac:eb:f7:56:1b:0b:33:c9:d4: 2f:b8:41:1d:40:2d:f1:d5:5d:b6:f9:f3:9d:2e:41:42:ce:d1: 10:f7:34:b1:7a:50:a2:1a:77:42:32:8c:d7:a3:e7:03:51:ee: 3c:eb:48:87:d8:aa:44:7d:72:1b:26:5c:38:82:1c:ae:d6:96: cc:a7:9c:80:a7:20:bf:34:cf:ed:90:97:b1:4d:6c:39:ba:7e: dc:bb:81:ba:8a:60:dd:2f:b0:18:1e:41:08:12:ce:9c:11:69: d6:d4:cd:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegyGIdjhhxjtLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjUzZWZiNDUtMTE4OS00MzVjLTgyYzMtMTk3NzE4MTA3NThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh6snCkzOXd71/riHsDocOm3xD9rBGqs56xd 0KXy+wp8FzgIzsD/RZX3WzkoZavjS7H7mq546W1dvUxMQZSkH3Upw1cX+W9WRkWp gHyp20HKgYIV6krLC01t++Ct47ZkBTfmamRIF+FN5oooT6oRUJ9uVW8uQKvTzAI7 9O9bcCykxduJAZ8mLMAfn6NRIfZ5kilW/rs71VdnuCghZgjsXejeyTNor79FnCrv sZe2lDNpXVb/bfewz2Zp1pSq5vVMrqCeXNOha3682NS0Q226X02lx1gv9ugzqKNC b1qp6YIcLuKClSghn4XToUoMgziHx08ef2RLMl1gcQMLMNWuCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY/aXW+1jJrBmdBn7bhdqPhnLyLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWFhODkwYzQtMDNmYS0z MjNiLWI0YjYtZjM5Y2Y5ODk4N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsC93rPZPtGG276hdrtDdINSSpEEqJZ78snHt4In1D4196FDEUwZP+S iK/aSxfVsNzlABvAcigfpc4ObUMWOYbd4ZXxX9T9Rnm8oXTVbitytMYVSrqSSqLo 6IyTs/pc2fPj0DWET4hXNK50NxnEgH59dBAyxOa/wR+3t8OaKqIWOJra8XdaLo4R kBpRIQPAKBpbP1bQtuQK4qzr91YbCzPJ1C+4QR1ALfHVXbb5850uQULO0RD3NLF6 UKIad0IyjNej5wNR7jzrSIfYqkR9chsmXDiCHK7WlsynnICnIL80z+2Ql7FNbDm6 fty7gbqKYN0vsBgeQQgSzpwRadbUzVI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:31 2026 by rpki-client