$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b785fca9-9332-321f-a7fd-29a5c9014040.roa File: b785fca9-9332-321f-a7fd-29a5c9014040.roa (raw, json) Hash identifier: bzcfZutfz5WGitycuw3M8bzBwiMKUJyIhJS+KEX9dpw= Subject key identifier: D6:16:02:A8:AE:0F:15:31:42:31:6E:BE:81:5C:3F:23:80:55:89:E0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A01CA403854FBE7A64500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b785fca9-9332-321f-a7fd-29a5c9014040.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:01:ca:40:38:54:fb:e7:a6:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=686beb84-ea33-4e45-9d42-c4dc8f857f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f0:60:a6:11:ba:b7:0e:75:68:2c:69:bf:bf: 1f:98:1d:83:1d:77:98:de:1e:9c:22:c2:b2:7f:86: 46:d4:c2:72:4e:72:13:7b:b7:3d:6d:47:dd:7a:ac: 44:02:04:fb:52:53:e1:d4:6b:e7:ef:19:bc:80:c8: 9e:84:bf:10:29:00:3a:f7:2a:ca:2c:08:80:57:a2: 18:d6:0e:c1:4d:23:26:53:16:66:f9:85:78:13:70: e3:36:4f:29:09:c1:fa:0d:02:ef:f1:c1:4a:a3:7e: e5:74:f1:e8:7d:9e:63:f3:1f:74:f2:69:4e:3e:8f: 1f:29:91:18:08:6a:67:bf:93:95:3c:b2:88:12:61: ec:e7:f0:b3:b6:3a:36:58:da:d3:52:3e:53:49:17: 5b:fe:d8:9b:25:e1:81:96:48:ab:f8:26:b0:84:7b: c3:3a:d3:a0:7b:d1:2b:87:f7:62:b2:eb:57:f8:db: 9a:10:95:44:20:94:03:6d:53:f9:82:ec:04:11:f1: fd:f5:b7:9b:ed:a8:0b:61:1b:45:82:f8:d6:71:86: a8:cc:ad:6a:19:a3:e1:b5:53:12:88:ef:51:56:98: e7:4d:f0:0d:72:af:ea:3e:32:96:b4:70:66:59:e1: b6:da:ad:08:7a:0c:58:58:a6:9c:02:c6:86:39:6a: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:16:02:A8:AE:0F:15:31:42:31:6E:BE:81:5C:3F:23:80:55:89:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b785fca9-9332-321f-a7fd-29a5c9014040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:51:51:88:16:44:a3:90:a5:63:d1:54:63:dc:e4:6c:06:b7: 2f:64:65:2b:1b:a3:69:91:f6:61:51:41:07:f0:0f:a4:12:81: 63:7f:e2:06:16:f7:c8:ca:d4:8d:6f:5f:d9:25:6b:15:64:79: 09:ba:0f:10:54:27:07:24:a1:c4:a7:47:66:56:1f:91:41:01: f6:e9:f1:03:f8:38:36:61:0f:af:99:78:a7:b9:de:42:29:f9: 6d:ec:e7:20:6b:08:ea:b5:76:21:22:2d:82:e2:84:6b:9d:da: b6:f0:b6:d2:69:8f:12:2a:b8:fd:e1:07:69:07:a6:ab:9b:05: fe:5b:c6:72:e7:3d:cb:f2:33:c7:5c:a4:67:b6:20:00:fa:9b: 36:ca:85:7d:3b:02:96:71:eb:a0:1e:fd:60:f4:bc:24:5f:3a: 70:1a:1b:ee:ab:73:d1:51:9d:8f:d9:8b:8c:50:94:d3:41:6a: 1e:2d:1a:e9:b6:9d:70:e7:15:ec:0a:c3:67:11:92:f4:26:92: 8c:09:94:2d:5f:3e:09:0c:05:ed:ad:2d:42:00:7a:95:6d:d8: fb:dd:33:b2:38:09:56:61:dc:65:ae:2b:b5:39:3f:ff:0f:0f: 27:7a:c9:ca:2a:ff:7f:46:91:2b:0a:fa:23:ef:8f:dc:ba:4c: 53:0b:c7:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegHKQDhU++emRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Njg2YmViODQtZWEzMy00ZTQ1LTlkNDItYzRkYzhmODU3ZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfBgphG6tw51aCxpv78fmB2DHXeY3h6cIsKy f4ZG1MJyTnITe7c9bUfdeqxEAgT7UlPh1Gvn7xm8gMiehL8QKQA69yrKLAiAV6IY 1g7BTSMmUxZm+YV4E3DjNk8pCcH6DQLv8cFKo37ldPHofZ5j8x908mlOPo8fKZEY CGpnv5OVPLKIEmHs5/Cztjo2WNrTUj5TSRdb/tibJeGBlkir+CawhHvDOtOge9Er h/disutX+NuaEJVEIJQDbVP5guwEEfH99beb7agLYRtFgvjWcYaozK1qGaPhtVMS iO9RVpjnTfANcq/qPjKWtHBmWeG22q0IegxYWKacAsaGOWrQlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYWAqiuDxUxQjFuvoFcPyOAVYngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjc4NWZjYTktOTMzMi0z MjFmLWE3ZmQtMjlhNWM5MDE0MDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlRUYgWRKOQpWPRVGPc5GwGty9kZSsbo2mR9mFRQQfwD6QSgWN/4gYW 98jK1I1vX9klaxVkeQm6DxBUJwckocSnR2ZWH5FBAfbp8QP4ODZhD6+ZeKe53kIp +W3s5yBrCOq1diEiLYLihGud2rbwttJpjxIquP3hB2kHpqubBf5bxnLnPcvyM8dc pGe2IAD6mzbKhX07ApZx66Ae/WD0vCRfOnAaG+6rc9FRnY/Zi4xQlNNBah4tGum2 nXDnFewKw2cRkvQmkowJlC1fPgkMBe2tLUIAepVt2PvdM7I4CVZh3GWuK7U5P/8P Dyd6ycoq/39GkSsK+iPvj9y6TFMLx3s= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:15 2026 by rpki-client