$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa File: c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa (raw, json) Hash identifier: yl9KKtTo/LyEElm8K+d9U8RrZ898YTP+czc+PLrljak= Subject key identifier: 48:40:A7:80:66:15:1D:06:3A:79:1E:7D:47:2C:3D:1A:21:AA:9B:D8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4BB67427E5F41C908380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4b:b6:74:27:e5:f4:1c:90:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=44e825f2-a31a-4f46-b383-38466066c6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:ca:e8:1b:4e:0c:5a:22:f8:70:ed:3b:7c: d8:ba:0d:0d:0a:ed:7f:9b:5b:5a:c5:8e:db:46:c4: 79:72:48:64:af:b1:2b:34:76:46:ba:9b:46:bc:1a: f8:67:3c:d7:54:2f:e3:d3:0a:a6:b9:e4:a2:c0:96: 20:1c:8e:5d:0c:23:d6:08:93:49:25:29:d1:f9:dc: 9a:c1:a2:f8:dc:45:f5:88:8c:0c:34:78:d1:f1:95: 26:7d:92:a3:4f:38:33:3a:4e:bb:aa:3b:62:43:7e: 5c:6d:40:eb:a0:68:2d:ad:8c:3d:e8:ef:01:8b:06: 99:57:d1:92:22:eb:57:4c:80:d1:dd:84:e7:e1:a4: f2:bc:40:b4:60:29:1d:af:59:fb:ff:3b:6e:87:a8: 14:29:e7:df:26:6e:37:50:2d:0e:9b:93:27:e2:95: 8f:24:f3:b7:94:19:88:81:69:73:48:9e:1c:c1:7d: de:91:ab:62:0c:22:22:57:a6:63:1d:1a:5d:52:20: 7a:c9:86:fe:78:32:26:b9:88:7e:dc:1e:cb:4d:66: 2b:f8:01:07:2f:6c:98:a1:80:93:1d:af:f1:81:f1: 4f:f8:0f:be:da:a6:bd:f2:bf:86:12:dc:61:2f:5f: f3:01:b9:6c:2d:ab:f2:e9:b6:db:09:1d:ef:66:71: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:40:A7:80:66:15:1D:06:3A:79:1E:7D:47:2C:3D:1A:21:AA:9B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c6e9f6c2-ad3d-34c9-9609-dbccf727d9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d3:cc:4d:0b:74:53:86:e0:42:fe:e6:47:61:fe:1f:0c:d6: 90:11:05:8f:8e:e6:a0:d0:5a:47:d7:ff:39:37:4e:c4:e0:18: 83:af:e7:a2:a4:85:4b:3e:25:2e:a9:fa:e9:1f:92:9a:8a:ed: 82:e8:bc:4e:e5:62:56:c1:e2:a1:b3:81:ee:43:82:c5:4c:1e: e5:09:c7:ee:0c:19:d1:cb:06:36:09:b0:24:fb:22:51:6b:bb: f2:14:eb:e2:28:f7:07:1a:77:60:66:cf:6e:9e:35:9c:d7:58: bd:88:36:e4:4f:27:0b:00:ae:d6:97:84:4b:e8:2d:c3:50:76: 97:18:8a:ac:0c:76:a5:b5:c3:97:b7:06:91:5e:c9:63:55:de: 91:73:9b:f2:78:89:4f:29:ae:87:a1:f7:15:72:d8:ff:30:d9: 53:b3:7b:da:c8:d1:64:fa:ec:1a:84:4b:73:df:7b:11:80:34: 90:96:4b:b6:84:92:00:59:49:2d:5f:7e:3f:b9:a6:7a:e9:b4: 20:db:16:b4:06:11:5a:a2:5d:31:1d:7f:b5:fd:88:37:69:78: e5:11:51:94:96:72:89:86:15:ac:fc:40:05:95:b8:f2:24:26: 56:e7:d1:07:19:bf:4c:17:ac:a7:7d:34:5c:56:27:d7:f4:72: 5b:3f:bb:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeku2dCfl9ByQg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDRlODI1ZjItYTMxYS00ZjQ2LWIzODMtMzg0NjYwNjZjNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8DK6BtODFoi+HDtO3zYug0NCu1/m1taxY7b RsR5ckhkr7ErNHZGuptGvBr4ZzzXVC/j0wqmueSiwJYgHI5dDCPWCJNJJSnR+dya waL43EX1iIwMNHjR8ZUmfZKjTzgzOk67qjtiQ35cbUDroGgtrYw96O8BiwaZV9GS IutXTIDR3YTn4aTyvEC0YCkdr1n7/ztuh6gUKeffJm43UC0Om5Mn4pWPJPO3lBmI gWlzSJ4cwX3ekatiDCIiV6ZjHRpdUiB6yYb+eDImuYh+3B7LTWYr+AEHL2yYoYCT Ha/xgfFP+A++2qa98r+GEtxhL1/zAblsLavy6bbbCR3vZnE3bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhAp4BmFR0GOnkefUcsPRohqpvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzZlOWY2YzItYWQzZC0z NGM5LTk2MDktZGJjY2Y3MjdkOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnTzE0LdFOG4EL+5kdh/h8M1pARBY+O5qDQWkfX/zk3TsTgGIOv56Kk hUs+JS6p+ukfkpqK7YLovE7lYlbB4qGzge5DgsVMHuUJx+4MGdHLBjYJsCT7IlFr u/IU6+Io9wcad2Bmz26eNZzXWL2INuRPJwsArtaXhEvoLcNQdpcYiqwMdqW1w5e3 BpFeyWNV3pFzm/J4iU8proeh9xVy2P8w2VOze9rI0WT67BqES3PfexGANJCWS7aE kgBZSS1ffj+5pnrptCDbFrQGEVqiXTEdf7X9iDdpeOURUZSWcomGFaz8QAWVuPIk Jlbn0QcZv0wXrKd9NFxWJ9f0cls/uxc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:40 2026 by rpki-client