$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa File: bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa (raw, json) Hash identifier: ljCFF4YrS8x+lVkk71DWoSUYshKgNbJw3jG2vMkm4xM= Subject key identifier: 61:68:AA:74:2C:7C:AA:5A:3F:FB:5A:DB:C3:FA:BC:B2:F0:17:1D:23 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A00C9CD1D21B81A292270 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:00:c9:cd:1d:21:b8:1a:29:22:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=fb699d40-fb03-4f30-9138-cf8507261ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:0c:64:dd:d6:88:62:e1:51:e9:36:96:a4: 8e:fb:c3:67:17:df:05:cf:db:a3:d2:4a:12:74:eb: 1f:58:15:b0:42:fa:1b:01:ed:6f:1c:6a:cd:83:4d: dd:b6:4f:a6:6d:82:80:5e:11:69:29:0d:19:db:1d: e9:0f:11:97:c5:19:5c:df:b9:cc:85:7b:87:3f:ec: 53:f2:47:b0:31:f6:38:d0:05:19:23:36:65:48:43: 42:3a:b1:17:c8:1a:61:c4:9c:01:9f:3d:d8:7d:88: ce:4e:dc:dd:75:57:63:35:e4:1b:ba:27:1b:54:6c: 1c:15:d0:db:27:b6:5e:8c:66:c1:db:52:2e:a5:b0: 2a:5e:48:3a:f0:aa:49:70:4c:41:7e:e2:e9:a8:c3: c1:54:8a:3a:66:83:7d:0e:35:14:8a:1c:69:e1:39: 3a:1f:b8:02:c0:21:43:8e:c1:98:04:b9:9b:1f:09: 10:38:c5:5b:15:64:b5:a4:7e:d7:77:f3:80:11:c2: 3e:17:69:dc:65:6e:9b:62:6f:54:42:93:2b:81:42: 10:72:3c:ab:3d:0d:69:bf:05:b5:8d:bc:24:1e:01: e0:2a:a3:54:99:a9:cf:c5:54:6b:fa:86:93:64:01: 63:ae:b9:05:5f:08:5b:31:ee:db:15:df:de:37:bc: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:68:AA:74:2C:7C:AA:5A:3F:FB:5A:DB:C3:FA:BC:B2:F0:17:1D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bec90bb9-ea99-3fa6-b330-4b366aa0a293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:6d:d6:14:60:94:79:49:40:22:d8:28:1c:f5:82:51:47:7c: 53:4d:0d:ad:de:ee:1b:ca:fa:63:a8:37:10:90:54:52:85:a5: 20:0f:97:c2:fd:0a:f5:8e:d3:71:04:cc:45:f4:75:10:90:70: d8:d8:12:59:fe:2f:09:c3:03:15:d0:ea:d8:f9:5d:60:d0:ca: 0e:b4:51:0f:b2:6b:75:00:03:21:19:be:fe:bf:3e:63:0b:0d: 12:e2:d2:31:82:de:09:1f:14:20:75:38:97:44:b3:fe:16:99: d6:4c:a5:cd:df:b4:66:c0:3e:d5:6f:0a:7e:ed:d9:77:e3:e8: 4d:5b:8a:49:75:c7:58:dd:3a:57:33:32:22:63:d4:98:ca:0e: 28:a9:3b:45:96:57:1f:46:60:dc:72:06:27:89:3f:2c:c6:3d: 81:b0:47:3e:7d:6e:a5:aa:8b:71:eb:38:dd:fe:57:a9:4b:65: 9b:6a:05:3f:4e:1b:f1:ca:09:d5:06:9f:d0:67:d7:b6:cd:db: e7:75:dc:37:fa:9a:83:7d:e9:4d:3c:ee:b6:45:7d:fe:9e:24: ea:22:07:3d:df:2d:f2:7d:ca:86:5c:e3:77:ec:5d:a9:38:74: da:96:95:70:01:1f:07:e2:94:89:ac:ac:c6:f8:ba:13:e2:f8: f3:68:92:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegDJzR0huBopInAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZmI2OTlkNDAtZmIwMy00ZjMwLTkxMzgtY2Y4NTA3MjYxZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3IMZN3WiGLhUek2lqSO+8NnF98Fz9uj0koS dOsfWBWwQvobAe1vHGrNg03dtk+mbYKAXhFpKQ0Z2x3pDxGXxRlc37nMhXuHP+xT 8kewMfY40AUZIzZlSENCOrEXyBphxJwBnz3YfYjOTtzddVdjNeQbuicbVGwcFdDb J7ZejGbB21IupbAqXkg68KpJcExBfuLpqMPBVIo6ZoN9DjUUihxp4Tk6H7gCwCFD jsGYBLmbHwkQOMVbFWS1pH7Xd/OAEcI+F2ncZW6bYm9UQpMrgUIQcjyrPQ1pvwW1 jbwkHgHgKqNUmanPxVRr+oaTZAFjrrkFXwhbMe7bFd/eN7wNHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFoqnQsfKpaP/ta28P6vLLwFx0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmVjOTBiYjktZWE5OS0z ZmE2LWIzMzAtNGIzNjZhYTBhMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRabMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVt1hRglHlJQCLYKBz1glFHfFNNDa3e7hvK+mOoNxCQVFKFpSAPl8L9 CvWO03EEzEX0dRCQcNjYEln+LwnDAxXQ6tj5XWDQyg60UQ+ya3UAAyEZvv6/PmML DRLi0jGC3gkfFCB1OJdEs/4WmdZMpc3ftGbAPtVvCn7t2Xfj6E1bikl1x1jdOlcz MiJj1JjKDiipO0WWVx9GYNxyBieJPyzGPYGwRz59bqWqi3HrON3+V6lLZZtqBT9O G/HKCdUGn9Bn17bN2+d13Df6moN96U087rZFff6eJOoiBz3fLfJ9yoZc43fsXak4 dNqWlXABHwfilImsrMb4uhPi+PNoklA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:24 2026 by rpki-client