$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cc98093d-cb3f-385b-9bf6-f772ad83c6fa.roa File: cc98093d-cb3f-385b-9bf6-f772ad83c6fa.roa (raw, json) Hash identifier: DyyZ7gzHk9EkIMCTz3VBYeFcPU8djG/BDqHvHQxs9IA= Subject key identifier: 20:72:67:71:61:DA:59:D9:C3:96:8D:DC:87:06:C5:7C:69:78:71:C4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4CBC42FFC7BED000F680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cc98093d-cb3f-385b-9bf6-f772ad83c6fa.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4c:bc:42:ff:c7:be:d0:00:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=590f13fe-eeae-4679-8f60-4b11086a4ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:2f:fe:4a:65:53:6b:78:23:c8:a0:17:69: db:a5:41:64:24:e1:f2:2d:54:0e:55:cf:87:09:80: 27:d8:9d:d7:a3:7d:fe:ab:a4:a7:a4:6f:01:84:38: d3:f8:e8:b2:d6:2a:f6:66:ba:dd:61:12:de:bc:53: 72:75:4d:02:7e:3d:ee:c9:ca:a1:86:ad:32:90:7d: fd:44:56:d5:33:9b:9c:6b:9a:3f:0a:66:aa:54:69: 6a:6f:8d:df:df:f7:27:a6:b5:51:97:bf:7a:1a:af: 65:cd:97:e4:59:74:4c:d6:d4:38:1f:2f:2d:ce:08: ef:2d:48:ac:17:11:92:ab:a7:7e:1e:98:1a:5f:04: ec:d9:10:04:58:95:91:3d:4e:68:08:1e:4d:3f:b5: 51:22:cf:23:3f:5b:16:42:cc:60:1f:62:31:80:8f: 72:6e:98:2e:9d:29:73:53:0a:50:b3:45:63:72:c5: 62:60:31:9a:92:c0:7d:23:74:19:84:97:e9:4f:e5: 37:b8:e5:6b:57:0f:a6:16:1d:65:92:a5:c7:a6:c0: 48:6f:21:d3:6c:ed:a2:aa:de:85:af:96:6e:b9:f6: 12:5c:bf:8d:c7:06:7b:ae:5d:3d:56:8d:b0:e4:2c: 59:0e:ca:66:e3:c8:50:e3:e3:ec:6d:06:7a:8a:0b: 06:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:72:67:71:61:DA:59:D9:C3:96:8D:DC:87:06:C5:7C:69:78:71:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cc98093d-cb3f-385b-9bf6-f772ad83c6fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a7:a3:c0:b3:4d:f2:84:73:07:54:a5:f4:ab:a2:7a:74:d3: c6:44:f7:45:fb:e9:42:e8:97:e2:cf:71:17:96:31:1f:1c:d1: cf:6c:e8:90:68:3e:60:41:b8:c0:89:1d:74:4f:b6:04:76:b5: a0:7f:42:9c:fc:6b:48:51:b6:bd:c1:4c:61:ce:92:25:35:23: 68:c2:d8:14:2e:88:cb:5f:a7:71:fb:3a:51:e7:2d:17:75:b5: 54:2f:96:81:97:d9:e0:8c:fa:13:25:7b:00:4b:c6:b9:a7:a7: d4:fb:00:d8:35:3b:80:24:df:26:99:86:47:90:3d:e3:6d:03: 6c:5d:86:26:91:b9:a9:2a:f3:c9:84:74:f7:b2:ad:92:02:2a: fa:d1:73:bc:f4:20:ef:0f:8b:37:bb:e8:7d:13:0f:12:23:c2: 16:f4:c0:98:57:0a:c4:45:c2:2b:5e:f5:ad:9d:46:63:51:d8: e0:6b:a7:6a:ac:1e:26:20:06:a8:13:f5:69:9c:33:a3:56:5d: 0a:bf:07:bb:f3:63:64:cd:b7:ce:2c:46:4b:46:f5:c6:02:55: b5:57:93:1e:c5:c7:46:a8:03:37:0c:e2:f2:75:9e:d4:2f:27: 7f:dd:06:6d:1b:90:37:8e:17:48:ac:4d:2a:b1:83:19:13:a1: 95:18:69:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeky8Qv/HvtAA9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NTkwZjEzZmUtZWVhZS00Njc5LThmNjAtNGIxMTA4NmE0ZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI4v/kplU2t4I8igF2nbpUFkJOHyLVQOVc+H CYAn2J3Xo33+q6SnpG8BhDjT+Oiy1ir2ZrrdYRLevFNydU0Cfj3uycqhhq0ykH39 RFbVM5uca5o/CmaqVGlqb43f3/cnprVRl796Gq9lzZfkWXRM1tQ4Hy8tzgjvLUis FxGSq6d+HpgaXwTs2RAEWJWRPU5oCB5NP7VRIs8jP1sWQsxgH2IxgI9ybpgunSlz UwpQs0VjcsViYDGaksB9I3QZhJfpT+U3uOVrVw+mFh1lkqXHpsBIbyHTbO2iqt6F r5ZuufYSXL+NxwZ7rl09Vo2w5CxZDspm48hQ4+PsbQZ6igsG4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCByZ3Fh2lnZw5aN3IcGxXxpeHHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2M5ODA5M2QtY2IzZi0z ODViLTliZjYtZjc3MmFkODNjNmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqno8CzTfKEcwdUpfSronp008ZE90X76ULol+LPcReWMR8c0c9s6JBo PmBBuMCJHXRPtgR2taB/Qpz8a0hRtr3BTGHOkiU1I2jC2BQuiMtfp3H7OlHnLRd1 tVQvloGX2eCM+hMlewBLxrmnp9T7ANg1O4Ak3yaZhkeQPeNtA2xdhiaRuakq88mE dPeyrZICKvrRc7z0IO8Pize76H0TDxIjwhb0wJhXCsRFwite9a2dRmNR2OBrp2qs HiYgBqgT9WmcM6NWXQq/B7vzY2TNt84sRktG9cYCVbVXkx7Fx0aoAzcM4vJ1ntQv J3/dBm0bkDeOF0isTSqxgxkToZUYaSw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:15:40 2026 by rpki-client