$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce248efd-acfe-3304-bf23-bfe52b18d94d.roa File: ce248efd-acfe-3304-bf23-bfe52b18d94d.roa (raw, json) Hash identifier: m3H+slkh/lx6atT+4KtvafbLltCI5/cfQnJbEN0vn/A= Subject key identifier: 52:7C:37:EE:5F:FD:6A:43:63:10:64:6D:F9:9A:70:95:0F:85:59:E1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A58C95EDAAB0578AE0440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce248efd-acfe-3304-bf23-bfe52b18d94d.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:58:c9:5e:da:ab:05:78:ae:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=757097f6-6614-443f-83b3-0c9e3af26964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f4:00:8e:d2:af:65:ce:74:e4:22:7f:b1:03: f3:0e:a5:18:e3:ff:ce:e2:28:ad:43:79:bc:56:e8: 09:5d:37:3a:61:75:b4:92:f3:25:9c:cd:26:ca:b6: c1:a6:0f:a8:73:3a:de:2e:87:7f:58:20:e7:27:f1: ae:a1:6b:c4:8d:77:5b:02:71:a2:a5:57:cf:4b:36: 93:d8:24:74:9f:29:60:c7:5d:81:e7:3e:b0:26:7c: fb:da:4a:e5:0a:73:79:65:58:8b:13:47:be:95:88: ce:24:72:43:e7:3d:c0:2c:94:b3:12:01:a9:fa:a3: ab:0e:cb:20:59:81:8f:c7:50:5b:16:7b:88:74:2d: 10:4e:8c:cd:38:2d:05:74:1d:38:93:b3:ad:08:ff: 7d:4d:44:e4:7f:da:3f:9c:3e:4a:3b:9b:ea:1b:1b: f8:c8:85:b8:56:02:0c:3d:93:2e:b0:5e:af:72:1e: 25:16:02:e2:4e:42:44:a9:5e:74:f8:8d:e0:6f:5e: 32:40:48:e3:12:34:4d:83:ff:91:d7:c8:04:70:21: 4b:b0:08:1f:79:48:77:1c:c8:82:6f:11:29:66:33: 1f:42:06:fa:50:72:c4:64:95:bc:ff:16:a6:6b:32: f4:33:4a:1f:5b:51:8b:93:2a:74:89:2b:ad:61:98: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7C:37:EE:5F:FD:6A:43:63:10:64:6D:F9:9A:70:95:0F:85:59:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ce248efd-acfe-3304-bf23-bfe52b18d94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:27:1b:f7:50:36:07:5f:70:84:6a:d3:c1:68:92:22:1e:e2: 4a:f6:31:99:96:a6:e6:6a:7b:08:17:00:45:71:ff:b2:cb:5a: 88:e5:f2:19:84:a7:6a:b1:b2:76:0e:df:f6:82:1c:46:df:45: 04:03:db:bb:64:21:57:bb:db:77:f6:de:1e:fc:85:ee:2a:dc: 9d:af:68:12:3c:c2:2e:17:69:ce:f9:fb:7f:ab:93:e0:6c:21: 17:30:5b:c6:c9:e6:43:7f:8f:50:0a:e8:7e:e6:cc:c7:e5:cf: 5c:d3:57:3e:ef:48:f1:e0:6e:9a:ca:28:0f:7f:91:27:be:3d: 1b:98:64:09:06:6f:ef:0e:fd:be:31:45:f0:b1:ee:c3:42:1d: b5:97:51:1c:0d:b7:a6:ef:7b:96:b0:69:d8:43:82:09:4e:cf: 37:f9:cd:74:78:9e:f5:47:23:5f:aa:5c:08:c2:7b:4d:8b:a7: 14:e3:8e:b3:fe:80:64:7d:93:14:b6:9f:8a:69:db:3e:e1:58: 93:8a:a1:14:66:cf:19:6e:4f:d8:76:75:dd:1b:f9:d5:8d:ea: b4:d4:d0:b2:b3:28:e0:97:94:5f:b4:1b:bf:2d:af:ca:0b:e4: d1:90:ba:e3:47:04:a9:f2:e6:de:0b:f5:8d:59:88:b0:36:21: a7:79:54:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeljJXtqrBXiuBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NzU3MDk3ZjYtNjYxNC00NDNmLTgzYjMtMGM5ZTNhZjI2OTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/QAjtKvZc505CJ/sQPzDqUY4//O4iitQ3m8 VugJXTc6YXW0kvMlnM0myrbBpg+oczreLod/WCDnJ/GuoWvEjXdbAnGipVfPSzaT 2CR0nylgx12B5z6wJnz72krlCnN5ZViLE0e+lYjOJHJD5z3ALJSzEgGp+qOrDssg WYGPx1BbFnuIdC0QTozNOC0FdB04k7OtCP99TUTkf9o/nD5KO5vqGxv4yIW4VgIM PZMusF6vch4lFgLiTkJEqV50+I3gb14yQEjjEjRNg/+R18gEcCFLsAgfeUh3HMiC bxEpZjMfQgb6UHLEZJW8/xamazL0M0ofW1GLkyp0iSutYZi5jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ8N+5f/WpDYxBkbfmacJUPhVnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2UyNDhlZmQtYWNmZS0z MzA0LWJmMjMtYmZlNTJiMThkOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUnG/dQNgdfcIRq08FokiIe4kr2MZmWpuZqewgXAEVx/7LLWojl8hmE p2qxsnYO3/aCHEbfRQQD27tkIVe723f23h78he4q3J2vaBI8wi4Xac75+3+rk+Bs IRcwW8bJ5kN/j1AK6H7mzMflz1zTVz7vSPHgbprKKA9/kSe+PRuYZAkGb+8O/b4x RfCx7sNCHbWXURwNt6bve5awadhDgglOzzf5zXR4nvVHI1+qXAjCe02LpxTjjrP+ gGR9kxS2n4pp2z7hWJOKoRRmzxluT9h2dd0b+dWN6rTU0LKzKOCXlF+0G78tr8oL 5NGQuuNHBKny5t4L9Y1ZiLA2Iad5VEI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:59 2026 by rpki-client