$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf96c460-909e-35f7-a364-3789939a0064.roa File: bf96c460-909e-35f7-a364-3789939a0064.roa (raw, json) Hash identifier: LMbph5cnXzLgbruRHwFl6td4ax3avm8yRC5CYALirUs= Subject key identifier: 85:54:50:CC:EE:2E:5D:44:7D:D6:ED:7A:5E:43:E7:08:D2:87:5A:23 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1A3393FA68BB3B461EC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf96c460-909e-35f7-a364-3789939a0064.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1a:33:93:fa:68:bb:3b:46:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=b87a10a2-c8ba-465d-9aa5-53259b364846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:0f:01:47:f9:a1:b2:b1:0e:7b:65:df:19: f6:66:54:58:b8:be:4a:ef:17:88:93:7e:8d:01:c7: 0e:a1:9d:e6:21:42:bf:e8:55:cf:a7:4c:c7:e1:60: a8:80:8e:08:46:8e:d6:a7:28:3d:e7:59:3e:c1:eb: 14:c0:00:bd:f3:63:00:ce:f8:76:cd:fd:a0:03:87: 0d:41:71:13:e2:27:10:77:12:ef:e2:a4:95:c0:03: 0f:3d:92:c5:5a:bb:f5:98:37:8b:4f:d2:74:1d:ea: 78:d9:f8:1c:0f:36:12:16:ba:89:ba:48:ac:78:f1: 0c:f6:9f:8e:cc:87:92:62:6c:da:a6:d0:e6:3b:3c: fb:65:4a:e2:73:3d:ff:a0:3d:a7:65:0d:73:86:ab: a3:fb:ca:7a:b8:29:9d:bd:9a:34:f9:4e:3c:45:39: 76:5b:c1:24:a5:d5:92:47:8e:f9:e3:ff:3f:d4:ee: 5b:15:93:08:01:8f:05:cd:5b:42:97:21:bf:49:86: d7:8e:b6:35:f6:14:83:4a:76:4b:f9:f2:64:cc:c0: 27:56:ab:76:9e:b5:6a:53:eb:e7:54:08:74:9d:8b: b3:97:a0:70:d2:21:47:d7:bc:dc:8f:28:f8:11:98: 2e:00:2a:7e:d6:7e:0e:39:4a:2e:ba:c0:b9:f7:0e: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:54:50:CC:EE:2E:5D:44:7D:D6:ED:7A:5E:43:E7:08:D2:87:5A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf96c460-909e-35f7-a364-3789939a0064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:70:d9:6a:5a:4e:e0:74:7e:af:85:7f:e7:2e:24:df:0f:ec: 90:f3:78:62:0c:a8:31:a7:66:02:12:81:88:c9:2b:f9:b3:b1: d5:d6:a8:6d:b4:be:4f:32:a0:01:0e:3e:b9:d8:ae:1c:75:22: c3:16:93:e4:6c:60:dc:88:90:10:0c:ca:7b:71:d0:56:06:0e: b0:a6:69:3f:0d:56:4f:9f:81:0e:0a:55:b4:95:6f:1b:49:b6: 69:5e:d6:55:d5:4f:80:ac:27:dc:77:84:9e:cf:c8:73:5a:20: 52:24:b9:47:cc:86:9c:a6:71:30:7d:fa:ba:37:81:73:79:87: 58:fd:1f:28:2d:d2:a8:f3:ce:5a:86:64:ee:a1:1c:ca:27:ba: e9:6e:a1:5f:21:23:3c:77:2b:ba:d8:51:83:a7:ff:be:60:07: 3a:39:be:54:ce:75:ae:16:3e:29:15:4d:b3:99:c8:b0:24:d2: 1b:43:eb:ed:1f:db:97:09:37:fa:fb:0b:d0:10:f4:d3:f9:f8: a9:85:ae:6a:0f:6e:a0:17:26:b0:30:f1:a5:ed:96:34:20:ca: 8c:5c:a4:2b:31:ef:1b:83:af:09:01:db:fd:99:69:62:68:82: 3a:78:31:b3:3c:41:9f:2a:1b:b6:fb:34:35:55:52:d2:89:89: 03:4a:e4:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehozk/pouztGHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Yjg3YTEwYTItYzhiYS00NjVkLTlhYTUtNTMyNTliMzY0ODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4sPAUf5obKxDntl3xn2ZlRYuL5K7xeIk36N AccOoZ3mIUK/6FXPp0zH4WCogI4IRo7Wpyg951k+wesUwAC982MAzvh2zf2gA4cN QXET4icQdxLv4qSVwAMPPZLFWrv1mDeLT9J0Hep42fgcDzYSFrqJukisePEM9p+O zIeSYmzaptDmOzz7ZUricz3/oD2nZQ1zhquj+8p6uCmdvZo0+U48RTl2W8EkpdWS R4754/8/1O5bFZMIAY8FzVtClyG/SYbXjrY19hSDSnZL+fJkzMAnVqt2nrVqU+vn VAh0nYuzl6Bw0iFH17zcjyj4EZguACp+1n4OOUouusC59w6UiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVUUMzuLl1Efdbtel5D5wjSh1ojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmY5NmM0NjAtOTA5ZS0z NWY3LWEzNjQtMzc4OTkzOWEwMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFw2WpaTuB0fq+Ff+cuJN8P7JDzeGIMqDGnZgISgYjJK/mzsdXWqG20 vk8yoAEOPrnYrhx1IsMWk+RsYNyIkBAMyntx0FYGDrCmaT8NVk+fgQ4KVbSVbxtJ tmle1lXVT4CsJ9x3hJ7PyHNaIFIkuUfMhpymcTB9+ro3gXN5h1j9Hygt0qjzzlqG ZO6hHMonuuluoV8hIzx3K7rYUYOn/75gBzo5vlTOda4WPikVTbOZyLAk0htD6+0f 25cJN/r7C9AQ9NP5+KmFrmoPbqAXJrAw8aXtljQgyoxcpCsx7xuDrwkB2/2ZaWJo gjp4MbM8QZ8qG7b7NDVVUtKJiQNK5Iw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:58 2026 by rpki-client