$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ad02c044-8afb-3c4b-b5fb-82482a0d7e9b.roa File: ad02c044-8afb-3c4b-b5fb-82482a0d7e9b.roa (raw, json) Hash identifier: KQMQdQmqc2Kt55dL4eM2kSxJKSIddzh0bsoRpEiTzwc= Subject key identifier: 97:47:0E:57:46:05:AD:4A:10:AB:1F:B9:50:FC:1E:0C:A5:F3:7C:1B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A035A4B29AE831544ED60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ad02c044-8afb-3c4b-b5fb-82482a0d7e9b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:03:5a:4b:29:ae:83:15:44:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=423a1584-03b4-417e-861b-3797815fdeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:99:ca:19:92:2e:11:45:a0:7f:b8:08:d1:c7: e5:27:c4:2b:f7:56:36:fa:d9:d2:45:85:4c:75:74: 51:a0:9a:b9:e8:4b:fd:17:9d:bd:94:50:51:69:51: 70:38:f4:2b:63:b8:c7:88:fe:58:7f:5b:b4:da:dd: 9f:3d:fe:64:73:e2:18:fd:10:70:2a:d1:78:44:1a: b2:a6:12:8e:72:32:02:05:8a:f5:e1:17:9d:01:a7: e0:2a:3f:6c:9b:9f:41:ac:1d:39:c6:fa:14:8b:61: 0c:b9:b8:10:80:9d:bf:3b:25:94:6f:02:68:e2:7b: f5:bc:1e:8f:d0:7f:a4:7f:ed:67:c0:31:78:e0:52: 9b:bd:76:45:46:cf:be:71:49:49:41:f8:0f:18:69: 06:17:6e:16:fd:29:f6:c4:31:78:e9:06:35:03:bd: 73:8b:59:81:c3:78:97:10:3d:7f:67:dc:91:e5:ff: 06:98:91:0e:2e:80:4d:1d:92:85:68:16:04:a3:29: 0e:29:36:4f:da:1e:10:97:68:a5:2c:97:0d:16:b3: dd:e0:a1:c9:95:15:4a:f4:37:12:d9:99:12:fb:c9: f7:5b:b1:71:02:32:d0:98:7f:27:20:64:49:8e:22: 0e:63:90:87:a5:10:38:ab:4e:af:07:62:25:d8:41: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:47:0E:57:46:05:AD:4A:10:AB:1F:B9:50:FC:1E:0C:A5:F3:7C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ad02c044-8afb-3c4b-b5fb-82482a0d7e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:69:aa:fd:73:f1:02:73:49:21:c2:03:bb:b9:c6:95:46:41: ca:a4:a7:85:89:c8:4e:01:8a:c4:53:54:1e:5c:c9:01:d8:90: ba:f3:e2:7b:26:7d:66:d8:08:1d:a0:94:e3:8b:40:ab:c0:be: f5:ce:9f:ff:d9:4a:c1:02:24:98:b4:a1:5e:2c:10:59:83:96: 56:9a:a8:14:02:20:2a:41:0f:26:8b:49:50:7b:3d:cd:25:32: 40:cd:3c:6d:cd:34:a9:a7:cd:34:a3:4f:84:a9:a0:e0:a8:91: db:49:58:1d:fa:b2:e3:60:a6:a0:69:1e:18:ab:62:f5:f3:7d: bc:f9:a9:b4:69:44:d0:8a:16:82:70:0b:4c:d7:f9:70:aa:3a: c7:e7:48:0e:a4:ae:92:51:9a:d5:63:b1:9d:3f:ff:2e:65:e9: 16:2d:e3:c5:a6:10:8f:33:27:17:70:f3:55:84:4a:a5:83:7e: 87:3d:85:0b:18:37:15:6f:56:a5:a1:50:04:f5:7f:ae:07:23: a6:a6:14:78:5b:39:77:f8:03:0d:92:ba:00:d8:78:3e:9d:8b: 1e:40:bc:c9:5f:04:20:8e:58:61:04:4a:3a:66:42:da:6c:d4: d2:07:5b:44:f4:5d:03:f1:b0:2c:6e:53:03:c3:51:63:e2:98: d6:c4:84:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegNaSymugxVE7WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDIzYTE1ODQtMDNiNC00MTdlLTg2MWItMzc5NzgxNWZkZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZnKGZIuEUWgf7gI0cflJ8Qr91Y2+tnSRYVM dXRRoJq56Ev9F529lFBRaVFwOPQrY7jHiP5Yf1u02t2fPf5kc+IY/RBwKtF4RBqy phKOcjICBYr14RedAafgKj9sm59BrB05xvoUi2EMubgQgJ2/OyWUbwJo4nv1vB6P 0H+kf+1nwDF44FKbvXZFRs++cUlJQfgPGGkGF24W/Sn2xDF46QY1A71zi1mBw3iX ED1/Z9yR5f8GmJEOLoBNHZKFaBYEoykOKTZP2h4Ql2ilLJcNFrPd4KHJlRVK9DcS 2ZkS+8n3W7FxAjLQmH8nIGRJjiIOY5CHpRA4q06vB2Il2EHAWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdHDldGBa1KEKsfuVD8Hgyl83wbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWQwMmMwNDQtOGFmYi0z YzRiLWI1ZmItODI0ODJhMGQ3ZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRb1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFpqv1z8QJzSSHCA7u5xpVGQcqkp4WJyE4BisRTVB5cyQHYkLrz4nsm fWbYCB2glOOLQKvAvvXOn//ZSsECJJi0oV4sEFmDllaaqBQCICpBDyaLSVB7Pc0l MkDNPG3NNKmnzTSjT4SpoOCokdtJWB36suNgpqBpHhirYvXzfbz5qbRpRNCKFoJw C0zX+XCqOsfnSA6krpJRmtVjsZ0//y5l6RYt48WmEI8zJxdw81WESqWDfoc9hQsY NxVvVqWhUAT1f64HI6amFHhbOXf4Aw2SugDYeD6dix5AvMlfBCCOWGEESjpmQtps 1NIHW0T0XQPxsCxuUwPDUWPimNbEhFk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:25 2026 by rpki-client