$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa File: b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa (raw, json) Hash identifier: b3ka9I+eg1IHfCYD4rXRQRhPuJFOd6S/eoHMRsg0d4M= Subject key identifier: EE:E8:7D:9D:87:2A:49:7A:0A:43:EE:0F:11:C8:41:1F:83:06:F5:36 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379FB3A4269402E5CFABC40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fb:3a:42:69:40:2e:5c:fa:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9e0e7ff2-d7b2-4002-a54b-bec90b452be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ac:d7:5c:ff:49:e0:4a:4a:22:88:9a:8f:a5: 1b:de:da:00:bb:ba:62:7e:83:a7:3d:fc:72:63:44: d8:f1:02:dc:2d:01:23:f2:d0:9d:c5:9c:c4:87:5e: 7c:7f:2b:09:ad:c4:a5:53:6c:92:9c:c1:3d:ce:08: 4d:2a:0a:31:87:cf:54:b1:a3:da:af:c0:d0:72:ca: 71:a7:85:45:65:3a:11:7e:ba:02:3d:7f:e7:4d:d4: ea:61:88:eb:a3:fb:7b:09:32:9a:76:5e:f8:e5:62: 71:92:3d:46:ad:9b:c3:02:0f:76:b4:f6:d9:46:e0: db:5e:2a:cc:3c:be:29:02:40:92:dd:23:e0:1e:a8: b5:47:44:ae:7d:ed:90:bd:60:76:28:60:9d:99:e5: 6f:6d:cd:31:08:ca:eb:5d:db:b9:f1:f5:31:e3:30: 8c:87:f1:b8:3a:57:99:74:d3:43:4c:44:c9:ca:91: 14:29:7d:ff:86:3d:90:26:20:0c:bb:f5:d8:ed:69: b3:14:ad:28:44:c4:40:89:96:ee:db:67:c7:18:81: a9:b3:5c:f6:9d:18:75:7c:82:55:eb:7d:a0:e0:21: a6:ef:d9:07:a5:b5:e8:7d:9f:8a:20:8c:95:8d:e8: 13:dd:31:4a:b7:a3:ed:32:1b:1a:9c:07:31:9b:ad: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E8:7D:9D:87:2A:49:7A:0A:43:EE:0F:11:C8:41:1F:83:06:F5:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b40c2a33-11d4-363b-9ac8-82a2c3a9358d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:71:f3:de:a8:e0:76:eb:39:c1:9a:0f:5b:db:9e:ec:33:9a: 20:8b:a6:fa:d7:c6:60:f5:5c:82:68:5b:8a:22:ff:16:82:e0: 82:f1:c7:9f:bd:60:58:b5:7d:42:91:0b:38:d9:d6:66:11:b0: 89:4f:53:e9:7c:28:06:bb:c1:c9:45:57:ad:10:63:7e:e5:6a: 42:86:c2:7f:85:78:67:ae:63:e9:2a:8d:53:97:5d:a1:4f:05: bb:a5:fd:68:d3:24:94:0c:fd:66:6f:cc:a2:33:bd:0f:21:af: e8:dd:10:f7:dc:20:a2:a6:e7:2d:d7:23:df:4e:8b:55:42:53: 19:dd:45:4e:19:86:f2:fb:fe:be:1f:39:66:05:31:73:1d:4c: 7c:ea:62:8b:d5:e0:89:34:31:ed:41:6d:f0:8b:d2:28:f6:3e: ae:2a:90:76:74:45:1c:60:a9:a1:64:d6:62:af:f9:c8:77:25: b9:e5:a0:78:c7:8b:72:80:63:94:2a:63:3b:f9:4b:1e:73:8f: d6:06:e8:30:d8:0b:35:78:35:a2:7b:45:eb:6e:bb:15:86:35: b7:2a:7b:7d:fd:bd:fe:4f:4a:02:73:e9:cd:ab:7d:12:a9:f8: 3e:95:c0:99:a5:52:01:e1:40:57:62:47:62:b0:56:90:1e:9a: a8:40:e5:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefs6QmlALlz6vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OWUwZTdmZjItZDdiMi00MDAyLWE1NGItYmVjOTBiNDUyYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKzXXP9J4EpKIoiaj6Ub3toAu7pifoOnPfxy Y0TY8QLcLQEj8tCdxZzEh158fysJrcSlU2ySnME9zghNKgoxh89UsaPar8DQcspx p4VFZToRfroCPX/nTdTqYYjro/t7CTKadl745WJxkj1GrZvDAg92tPbZRuDbXirM PL4pAkCS3SPgHqi1R0Sufe2QvWB2KGCdmeVvbc0xCMrrXdu58fUx4zCMh/G4OleZ dNNDTETJypEUKX3/hj2QJiAMu/XY7WmzFK0oRMRAiZbu22fHGIGps1z2nRh1fIJV 632g4CGm79kHpbXofZ+KIIyVjegT3TFKt6PtMhsanAcxm62ZfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7ofZ2HKkl6CkPuDxHIQR+DBvU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjQwYzJhMzMtMTFkNC0z NjNiLTlhYzgtODJhMmMzYTkzNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhx896o4HbrOcGaD1vbnuwzmiCLpvrXxmD1XIJoW4oi/xaC4ILxx5+9 YFi1fUKRCzjZ1mYRsIlPU+l8KAa7wclFV60QY37lakKGwn+FeGeuY+kqjVOXXaFP Bbul/WjTJJQM/WZvzKIzvQ8hr+jdEPfcIKKm5y3XI99Oi1VCUxndRU4ZhvL7/r4f OWYFMXMdTHzqYovV4Ik0Me1BbfCL0ij2Pq4qkHZ0RRxgqaFk1mKv+ch3JbnloHjH i3KAY5QqYzv5Sx5zj9YG6DDYCzV4NaJ7RetuuxWGNbcqe339vf5PSgJz6c2rfRKp +D6VwJmlUgHhQFdiR2KwVpAemqhA5b0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:26 2026 by rpki-client