$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfd8084d-f118-3f75-b68e-6d7e9b945913.roa File: bfd8084d-f118-3f75-b68e-6d7e9b945913.roa (raw, json) Hash identifier: 5xOJ97VuPQ4taZ+vTX2iQTVdk21a/qLLt0zdaUjvVWg= Subject key identifier: A4:9F:2F:D8:13:7D:A9:8B:23:5C:F3:4C:E5:10:AB:CB:E6:35:B8:2D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A59ABF71ED48A9E12B380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfd8084d-f118-3f75-b68e-6d7e9b945913.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:59:ab:f7:1e:d4:8a:9e:12:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=3088b19d-19d1-4665-83af-fc2da00a182d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:e9:87:bc:7b:3f:4e:9e:78:55:a5:2a:8a: 24:ca:43:cd:ee:2b:ed:96:7c:31:b8:e5:80:82:35: 5d:86:43:95:69:38:64:8a:15:7e:52:a2:29:6b:f8: 20:a2:87:f1:09:f4:14:1a:38:77:a5:34:cd:97:cf: 1a:00:18:a2:b5:60:73:69:9f:d2:22:35:87:24:03: 86:b9:02:54:9c:73:bd:5b:39:45:e7:e2:fa:d5:37: 06:48:9f:b4:3c:dc:16:16:8f:05:80:af:c7:ce:c3: dd:f9:1c:bd:95:58:80:31:2a:0d:86:c5:a6:22:63: 9f:52:74:cd:d3:ce:30:b7:87:0b:0a:fe:80:d6:fe: 7c:a6:3f:be:f2:61:e2:e7:69:f0:da:e4:ec:0d:e9: 62:ed:b4:5d:49:e0:5e:36:32:a9:30:4d:4f:c0:7e: 48:b9:41:94:8f:7e:9a:9a:60:3a:9c:e9:59:db:b4: 6b:6d:d0:3d:b6:63:ea:6b:ff:0f:a8:fd:51:69:ae: 73:fd:e6:29:98:56:aa:e1:d9:21:60:5f:a2:8b:15: 38:41:28:d3:f6:cf:a1:da:1f:2c:97:19:7b:2d:40: 1a:8a:dc:6b:97:f5:14:2e:1c:b4:f6:df:ab:23:b6: 53:8d:96:ef:17:1f:86:ba:5e:1e:79:93:ab:bd:1a: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9F:2F:D8:13:7D:A9:8B:23:5C:F3:4C:E5:10:AB:CB:E6:35:B8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bfd8084d-f118-3f75-b68e-6d7e9b945913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:c8:98:61:c8:4d:42:50:37:e0:80:cd:66:da:1f:7f:7a:ce: 7b:a9:0a:24:ed:d5:23:ab:51:8e:f3:1c:49:e4:a7:7c:f0:3e: 86:3b:9b:e6:a3:84:73:67:a5:6f:da:ae:df:76:f6:d2:8b:c1: 94:1f:bb:04:9b:67:8d:97:87:7b:a1:08:9e:24:b5:bf:fa:df: 1c:88:07:14:9b:43:72:01:05:14:e0:d3:55:64:dd:7d:e0:4a: e6:eb:81:09:c5:ee:20:dd:89:12:8c:34:4f:c0:76:28:38:19: e9:08:5e:f7:02:76:21:5a:52:6d:55:62:b9:52:5b:b3:33:a6: 04:c6:cc:ce:fe:4a:06:df:e7:52:8c:67:31:9f:dc:3c:d2:6b: ac:b8:0f:d4:98:e3:ab:fd:15:a2:68:30:07:f6:55:6c:84:ad: 90:16:a1:b6:81:4a:84:d6:1f:df:4e:17:2d:4e:92:15:c2:fb: e9:1a:9e:16:c4:2f:41:96:0e:f8:ec:3e:ff:18:ce:59:d1:7b: 57:0b:ec:1e:65:9c:3e:27:eb:c2:bb:b0:ca:8e:4c:8d:c0:dd: df:e9:8b:5d:53:f5:7a:3c:c4:6f:4b:03:d9:23:a1:bb:60:07: 8d:a1:92:df:1a:4c:18:c4:07:77:81:6f:4e:20:67:3d:8e:03: 60:01:1f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelmr9x7Uip4Ss4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzA4OGIxOWQtMTlkMS00NjY1LTgzYWYtZmMyZGEwMGExODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRzph7x7P06eeFWlKookykPN7ivtlnwxuOWA gjVdhkOVaThkihV+UqIpa/ggoofxCfQUGjh3pTTNl88aABiitWBzaZ/SIjWHJAOG uQJUnHO9WzlF5+L61TcGSJ+0PNwWFo8FgK/HzsPd+Ry9lViAMSoNhsWmImOfUnTN 084wt4cLCv6A1v58pj++8mHi52nw2uTsDeli7bRdSeBeNjKpME1PwH5IuUGUj36a mmA6nOlZ27RrbdA9tmPqa/8PqP1Raa5z/eYpmFaq4dkhYF+iixU4QSjT9s+h2h8s lxl7LUAaitxrl/UULhy09t+rI7ZTjZbvFx+Gul4eeZOrvRoNqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSfL9gTfamLI1zzTOUQq8vmNbgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmZkODA4NGQtZjExOC0z Zjc1LWI2OGUtNmQ3ZTliOTQ1OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTImGHITUJQN+CAzWbaH396znupCiTt1SOrUY7zHEnkp3zwPoY7m+aj hHNnpW/art929tKLwZQfuwSbZ42Xh3uhCJ4ktb/63xyIBxSbQ3IBBRTg01Vk3X3g SubrgQnF7iDdiRKMNE/Adig4GekIXvcCdiFaUm1VYrlSW7MzpgTGzM7+Sgbf51KM ZzGf3DzSa6y4D9SY46v9FaJoMAf2VWyErZAWobaBSoTWH99OFy1OkhXC++kanhbE L0GWDvjsPv8YzlnRe1cL7B5lnD4n68K7sMqOTI3A3d/pi11T9Xo8xG9LA9kjobtg B42hkt8aTBjEB3eBb04gZz2OA2ABH0I= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:11 2026 by rpki-client