$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c0f422f5-d7ea-337e-9f7f-e3c648d0a311.roa File: c0f422f5-d7ea-337e-9f7f-e3c648d0a311.roa (raw, json) Hash identifier: 4tPBLliqdUHodA3GybjGRmQF2AiMKl2OWmki9+lkcyA= Subject key identifier: 44:F1:87:2E:8C:2E:BC:8F:E0:D7:77:C3:8E:6F:F0:80:49:49:55:C6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3C88A4FFAD241EA33970 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c0f422f5-d7ea-337e-9f7f-e3c648d0a311.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3c:88:a4:ff:ad:24:1e:a3:39:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e2cdf0c6-61a1-475c-8889-b7311b450415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:72:b2:0b:2f:88:33:d6:cc:f0:ef:e8:15: 58:ee:b2:5a:95:61:cd:f9:da:59:52:ec:79:fc:cf: 11:78:01:21:da:2e:e7:51:15:cb:09:62:7e:cf:c8: 1d:96:ae:77:2c:b1:dd:de:75:94:40:f4:f9:40:5a: 82:5f:a9:10:50:0d:48:d8:de:77:7d:aa:39:ca:eb: 2b:f4:47:0f:86:f4:90:32:e7:cb:cc:a2:37:5c:cb: c0:fe:56:35:87:0f:24:fa:d9:5a:a2:dd:0b:5b:a7: 50:8c:59:16:c4:ac:62:64:a9:c9:00:80:46:0f:87: c4:37:1e:79:72:96:7a:3f:b0:76:79:91:3c:3d:c7: 93:97:84:16:89:7c:77:7f:01:d2:b5:ac:e6:5b:df: ea:ff:2d:cb:4f:a3:80:b0:0a:60:36:d7:28:db:cc: 3f:b3:45:13:bd:4a:e7:30:71:b1:0c:fb:7b:34:9d: 89:a3:fd:74:07:b4:bb:10:0f:f0:38:db:73:57:78: 4a:d3:a4:0d:eb:9f:f8:de:6e:56:7d:48:b7:f7:84: 80:ae:9d:54:47:ee:86:e2:50:cb:ac:43:b6:83:32: cd:0c:2d:82:eb:a6:b6:26:f9:6d:bc:7f:9d:9f:fd: dd:b9:cd:f3:69:f5:93:91:74:81:6c:1b:9a:47:a8: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F1:87:2E:8C:2E:BC:8F:E0:D7:77:C3:8E:6F:F0:80:49:49:55:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c0f422f5-d7ea-337e-9f7f-e3c648d0a311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d5:f5:76:0e:bb:ac:15:68:57:2e:36:5b:65:66:92:04:85: ba:2c:b5:c2:6a:a5:e0:6e:f1:59:76:e7:c5:91:fd:4d:71:96: 53:01:03:e8:da:6a:7e:4a:56:07:f0:ed:8b:7c:c0:f7:d0:ab: c0:9d:06:5a:df:eb:14:37:f0:6a:d5:70:11:92:76:11:36:da: 92:18:28:58:0e:a0:eb:fc:1d:34:3e:1e:d7:32:3a:0b:67:f6: 03:d0:35:7e:cd:12:c1:e9:5b:fc:97:e5:5d:91:1a:74:27:e1: 5f:bf:d5:d4:8c:89:27:ad:3e:7e:4e:6e:17:ee:10:6e:98:ba: 5b:37:cd:33:1b:fe:bd:38:c1:db:f8:51:df:dd:c0:c8:e0:2f: 6b:82:1e:0a:ab:97:f6:54:f3:af:8b:b4:02:81:80:c6:91:ee: 27:cc:6a:44:01:21:f8:f5:ff:37:9c:e9:3d:d9:0a:55:27:0a: 20:ec:f3:1b:18:d9:34:96:8c:f8:42:43:f6:7d:73:e4:21:03: df:48:2a:b1:d7:dc:a2:22:53:4e:9b:14:f0:d7:10:30:20:96: 54:e8:6d:35:94:a7:f7:47:79:86:52:bf:19:14:f3:bd:18:f3: 03:1e:c2:36:e4:fd:0c:f3:22:dd:ef:4b:be:4d:ff:55:2d:87: bf:c2:0a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejyIpP+tJB6jOXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTJjZGYwYzYtNjFhMS00NzVjLTg4ODktYjczMTFiNDUwNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM1ysgsviDPWzPDv6BVY7rJalWHN+dpZUux5 /M8ReAEh2i7nURXLCWJ+z8gdlq53LLHd3nWUQPT5QFqCX6kQUA1I2N53fao5yusr 9EcPhvSQMufLzKI3XMvA/lY1hw8k+tlaot0LW6dQjFkWxKxiZKnJAIBGD4fENx55 cpZ6P7B2eZE8PceTl4QWiXx3fwHStazmW9/q/y3LT6OAsApgNtco28w/s0UTvUrn MHGxDPt7NJ2Jo/10B7S7EA/wONtzV3hK06QN65/43m5WfUi394SArp1UR+6G4lDL rEO2gzLNDC2C66a2JvltvH+dn/3duc3zafWTkXSBbBuaR6jyxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETxhy6MLryP4Nd3w45v8IBJSVXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzBmNDIyZjUtZDdlYS0z MzdlLTlmN2YtZTNjNjQ4ZDBhMzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfV9XYOu6wVaFcuNltlZpIEhbostcJqpeBu8Vl258WR/U1xllMBA+ja an5KVgfw7Yt8wPfQq8CdBlrf6xQ38GrVcBGSdhE22pIYKFgOoOv8HTQ+HtcyOgtn 9gPQNX7NEsHpW/yX5V2RGnQn4V+/1dSMiSetPn5ObhfuEG6Yuls3zTMb/r04wdv4 Ud/dwMjgL2uCHgqrl/ZU86+LtAKBgMaR7ifMakQBIfj1/zec6T3ZClUnCiDs8xsY 2TSWjPhCQ/Z9c+QhA99IKrHX3KIiU06bFPDXEDAgllTobTWUp/dHeYZSvxkU870Y 8wMewjbk/QzzIt3vS75N/1Uth7/CCtQ= -----END CERTIFICATE-----Generated at Fri Mar 27 08:44:29 2026 by rpki-client