$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa File: c1625472-18de-3d1e-a0f1-7bbc7f729425.roa (raw, json) Hash identifier: Axsw//kwx1DrXwcjbqQ/J30BJfRx5tFmS9p79Gs6p3o= Subject key identifier: 46:BB:73:DD:76:E1:FB:D3:45:05:3F:2F:5B:FF:50:13:F4:B6:4D:ED Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A02843161BB269BD82180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:02:84:31:61:bb:26:9b:d8:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=deff388c-f866-4eab-bb23-4918cb7f7fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:56:56:83:93:2e:9d:cb:30:1c:28:d5:d6: 3b:60:40:f8:85:49:5f:63:0b:f9:c3:bd:9c:f9:15: 16:55:db:60:fa:1b:d3:3f:58:3c:42:ef:92:6a:72: 07:85:0f:0c:51:74:92:8b:f0:4c:48:c1:3d:51:90: e9:bc:5f:49:5f:0a:1b:0a:69:1e:11:01:1d:39:92: cb:8d:44:82:aa:3c:61:0c:33:bd:b4:9a:eb:97:ee: dd:a0:40:6b:29:2b:7c:a8:f1:a3:9a:fb:b4:ed:69: b5:3f:c5:e3:b4:04:ac:e0:bf:a5:c8:40:b3:58:d7: 96:27:01:5a:58:f3:08:27:2b:29:19:65:7b:ba:9b: 0e:f8:67:51:ea:1f:ae:c0:13:cc:d4:8c:b6:f8:03: 38:59:04:49:4e:a5:ad:3c:1e:0c:f7:ad:11:fe:0f: cd:6d:7a:1a:8c:97:97:0d:19:8c:68:b7:27:e5:9a: 46:a3:9a:fa:f7:2c:c6:0f:9d:8c:98:ef:30:d8:e9: e1:0b:38:90:bb:78:33:98:a7:17:2e:32:b5:71:a3: ce:99:37:e6:ae:d5:dc:cf:0a:36:05:83:91:e1:8d: fc:31:13:e2:7a:ed:69:a1:d4:35:26:3f:44:22:a0: 8e:a5:fd:60:71:3b:29:c5:e7:d7:41:75:c1:f0:56: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BB:73:DD:76:E1:FB:D3:45:05:3F:2F:5B:FF:50:13:F4:B6:4D:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c1625472-18de-3d1e-a0f1-7bbc7f729425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:09:1b:50:97:64:01:49:2a:91:85:db:8d:31:ca:0e:b6:6d: 68:02:3f:fd:31:6a:d2:1e:f1:fe:62:e5:44:99:75:bf:73:cc: b8:73:3f:5c:ab:d1:17:1a:b8:f7:2c:ee:8c:a1:c4:ef:43:6f: d8:b7:e1:47:26:ac:c4:27:d3:b7:c9:b9:92:0d:48:ca:a9:4e: 83:e0:e0:6b:19:46:28:93:d0:ff:c1:34:22:64:90:04:a9:5d: c5:16:0f:b3:33:f6:94:73:74:ef:3c:ef:aa:26:d0:50:74:0b: 78:76:3f:7a:79:76:5f:72:a7:70:8c:79:ba:57:26:18:2f:c8: bc:75:c0:bf:a6:45:6e:c3:bc:f2:a4:1d:87:77:9a:1e:91:40: ee:32:cc:85:73:fb:f0:57:89:a4:2d:68:40:d6:6d:18:0c:35: 08:4e:72:ac:f3:2b:f9:9c:0b:01:bd:03:f1:2e:d5:cb:71:3e: d0:0d:6d:67:47:7f:b9:49:3c:fa:f2:cb:69:95:8f:52:07:7f: 70:40:11:41:61:09:b7:92:b0:e1:1d:8e:7f:65:05:e6:a3:d7: 33:6f:3a:1a:00:02:65:d0:79:db:53:7d:50:48:60:a3:cc:78: ce:ef:c4:67:8e:a8:5e:30:ea:89:64:c9:f4:d7:5e:da:75:50: 3a:fa:4c:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegKEMWG7JpvYIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZGVmZjM4OGMtZjg2Ni00ZWFiLWJiMjMtNDkxOGNiN2Y3ZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXZWVoOTLp3LMBwo1dY7YED4hUlfYwv5w72c +RUWVdtg+hvTP1g8Qu+SanIHhQ8MUXSSi/BMSME9UZDpvF9JXwobCmkeEQEdOZLL jUSCqjxhDDO9tJrrl+7doEBrKSt8qPGjmvu07Wm1P8XjtASs4L+lyECzWNeWJwFa WPMIJyspGWV7upsO+GdR6h+uwBPM1Iy2+AM4WQRJTqWtPB4M960R/g/NbXoajJeX DRmMaLcn5ZpGo5r69yzGD52MmO8w2OnhCziQu3gzmKcXLjK1caPOmTfmrtXczwo2 BYOR4Y38MRPieu1podQ1Jj9EIqCOpf1gcTspxefXQXXB8FaYRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa7c9124fvTRQU/L1v/UBP0tk3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzE2MjU0NzItMThkZS0z ZDFlLWEwZjEtN2JiYzdmNzI5NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQJG1CXZAFJKpGF240xyg62bWgCP/0xatIe8f5i5USZdb9zzLhzP1yr 0RcauPcs7oyhxO9Db9i34UcmrMQn07fJuZINSMqpToPg4GsZRiiT0P/BNCJkkASp XcUWD7Mz9pRzdO8876om0FB0C3h2P3p5dl9yp3CMebpXJhgvyLx1wL+mRW7DvPKk HYd3mh6RQO4yzIVz+/BXiaQtaEDWbRgMNQhOcqzzK/mcCwG9A/Eu1ctxPtANbWdH f7lJPPryy2mVj1IHf3BAEUFhCbeSsOEdjn9lBeaj1zNvOhoAAmXQedtTfVBIYKPM eM7vxGeOqF4w6olkyfTXXtp1UDr6TIo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:21 2026 by rpki-client