$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa File: d3d48afe-6908-31d4-958a-74f7b78b9069.roa (raw, json) Hash identifier: zBOwqeul0WOVEP8+tNYxwuiHsQ1tghXKqe4DNMIlep0= Subject key identifier: 23:18:62:08:C5:01:AD:EC:26:8A:5F:F3:C8:C5:5D:F2:E4:CD:67:40 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379EE016056D4BBB4F16980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:ee:01:60:56:d4:bb:b4:f1:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=839f0b19-c284-4d39-88bf-ed3fafe6245c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:15:28:52:1a:50:3c:56:d1:1c:ec:78:72:1a: 89:47:1c:68:fe:ff:6a:09:af:3b:37:da:00:39:05: 56:72:6f:3b:cc:0e:e4:5e:55:94:97:da:48:be:5f: 6e:77:a8:ba:10:48:63:b5:7e:82:48:54:df:09:b1: fe:e8:36:bf:cc:6e:95:d7:8d:c2:81:c7:61:96:1f: c8:09:31:c5:51:ba:21:78:a9:4b:4a:43:fd:0b:b5: 44:8f:7f:9b:30:ee:75:f9:1d:35:69:56:a6:30:1c: 33:ee:f3:91:2b:1b:50:b0:db:85:ac:9f:e4:a2:05: 5a:a8:6d:bc:d1:d3:ee:f1:cf:f7:19:ca:81:c3:d7: 8c:46:fd:38:2c:a3:83:e0:f1:c9:44:da:35:d7:7a: e0:5f:fc:9c:7c:0f:58:e5:73:d7:52:a0:ef:8d:3f: bb:aa:40:2b:2a:d9:a8:b6:15:b1:63:f5:a0:9a:bf: 34:d9:10:44:f5:ce:e5:cb:db:f7:67:21:f4:44:7f: ae:5c:16:90:e4:84:e8:99:8b:4b:ad:60:3e:c0:90: 19:f6:9f:56:26:80:ec:a2:67:35:c9:0a:36:f6:4b: 7b:af:1b:05:66:cc:e6:51:52:23:75:04:f1:f8:f3: 4c:46:09:c7:9a:da:93:de:1a:2d:74:97:cf:a5:dd: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:18:62:08:C5:01:AD:EC:26:8A:5F:F3:C8:C5:5D:F2:E4:CD:67:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3d48afe-6908-31d4-958a-74f7b78b9069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f2:d9:66:b5:2a:50:1e:5a:52:a8:e0:a5:37:4f:b9:74:04: 2f:8a:80:52:af:e5:ce:19:65:2f:97:59:ac:d1:b2:11:78:9e: c3:96:58:de:bd:fb:2a:b9:d8:43:88:77:e7:62:0d:28:3c:d0: 1e:1b:69:48:d2:7d:36:d2:32:87:d0:86:ff:e5:e6:98:d9:4d: 42:7e:ad:d4:1b:73:55:41:e7:25:c2:88:fd:10:6d:e2:76:eb: 6b:61:70:00:c2:85:bb:b0:f6:c4:4d:90:82:b8:45:71:c9:b7: 62:b0:a4:56:6f:3d:d9:60:b2:50:28:78:4b:ec:de:ac:9d:40: 08:ec:66:c0:0d:f5:3d:fc:e8:f4:c9:08:bc:f8:37:fe:e0:49: 4d:01:93:5e:3b:62:12:ab:3d:0e:86:df:47:60:32:1d:9e:e7: dd:58:bc:5e:88:02:af:87:8e:e1:67:6f:0e:6c:de:85:e5:6d: 4e:05:ab:e5:8b:68:75:6d:7e:c7:0d:90:95:28:de:53:b1:9f: 3c:10:53:c1:1a:cf:58:0e:5c:9d:c6:b1:d5:25:9e:16:ba:96: 29:06:d4:89:ad:15:85:d0:4b:39:8a:61:25:0a:26:f0:8e:c1: 1a:19:81:a6:3a:1f:74:70:a8:46:e0:60:95:ea:f1:ef:39:6a: d3:a3:a1:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jee4BYFbUu7TxaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODM5ZjBiMTktYzI4NC00ZDM5LTg4YmYtZWQzZmFmZTYyNDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBUoUhpQPFbRHOx4chqJRxxo/v9qCa87N9oA OQVWcm87zA7kXlWUl9pIvl9ud6i6EEhjtX6CSFTfCbH+6Da/zG6V143Cgcdhlh/I CTHFUboheKlLSkP9C7VEj3+bMO51+R01aVamMBwz7vORKxtQsNuFrJ/kogVaqG28 0dPu8c/3GcqBw9eMRv04LKOD4PHJRNo113rgX/ycfA9Y5XPXUqDvjT+7qkArKtmo thWxY/Wgmr802RBE9c7ly9v3ZyH0RH+uXBaQ5ITomYtLrWA+wJAZ9p9WJoDsomc1 yQo29kt7rxsFZszmUVIjdQTx+PNMRgnHmtqT3hotdJfPpd1zvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMYYgjFAa3sJopf88jFXfLkzWdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDNkNDhhZmUtNjkwOC0z MWQ0LTk1OGEtNzRmN2I3OGI5MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFny2Wa1KlAeWlKo4KU3T7l0BC+KgFKv5c4ZZS+XWazRshF4nsOWWN69 +yq52EOId+diDSg80B4baUjSfTbSMofQhv/l5pjZTUJ+rdQbc1VB5yXCiP0QbeJ2 62thcADChbuw9sRNkIK4RXHJt2KwpFZvPdlgslAoeEvs3qydQAjsZsAN9T386PTJ CLz4N/7gSU0Bk147YhKrPQ6G30dgMh2e591YvF6IAq+HjuFnbw5s3oXlbU4Fq+WL aHVtfscNkJUo3lOxnzwQU8Eaz1gOXJ3GsdUlnha6likG1ImtFYXQSzmKYSUKJvCO wRoZgaY6H3RwqEbgYJXq8e85atOjoRc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:39 2026 by rpki-client