$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa File: ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa (raw, json) Hash identifier: jvPchVWuM5EuCcoNIL2A8vXXNHGokzFhDMrcza1cEG0= Subject key identifier: BA:AA:45:FA:44:AB:04:F0:DD:C5:B6:2B:80:83:11:24:07:78:2E:64 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3CAB5E262447BEA15A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3c:ab:5e:26:24:47:be:a1:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=63f64bf5-3c1a-475d-8c38-f90e377650fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ca:95:0a:f5:db:6d:91:19:58:78:a4:15:ea: c5:b4:8a:35:27:b0:8d:d2:c5:6f:0b:e0:4a:15:c5: 22:8b:3b:e0:41:d3:3f:81:36:61:73:84:c4:ff:6f: be:0c:03:44:a4:e6:35:bd:18:14:7e:06:12:17:1b: ff:b0:3b:05:7d:b2:7e:7f:f0:5f:da:dc:78:0c:6f: d4:d0:6f:69:5f:f4:1c:5d:72:cf:a4:7e:03:ff:8e: ae:5d:29:2b:dd:d9:c0:2d:d4:73:06:bf:e9:c4:3f: 20:bf:b1:e8:98:90:bc:5b:f2:d5:9a:4a:d0:11:d8: 1c:67:a8:47:55:1e:71:b4:28:62:80:5a:07:f7:be: 6b:4b:25:36:6b:87:ac:9b:3b:e2:fe:b9:43:5f:6d: f5:f9:0d:67:94:b2:d3:2e:85:64:5c:62:e0:03:a5: 3a:05:ce:27:38:39:d6:ae:70:9e:96:33:b9:b1:df: 9c:00:c7:01:b2:39:95:15:30:05:0c:8b:2f:7d:06: 03:b6:2c:8e:c4:55:99:f0:d7:18:4d:84:46:5d:22: a6:58:ea:6e:ab:f9:db:c7:4b:46:19:2c:3a:2f:92: 97:54:82:62:ce:40:4d:3d:90:8e:c9:4b:7f:02:ee: 07:26:f2:55:ca:ef:59:6d:aa:30:cc:0f:83:0e:d5: 71:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AA:45:FA:44:AB:04:F0:DD:C5:B6:2B:80:83:11:24:07:78:2E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:33:32:99:98:3f:e3:15:f4:dc:be:58:f2:77:3d:b8:3e:b5: f0:09:0e:0e:fc:50:6c:c2:f2:ef:22:1c:df:39:95:78:c6:0e: 0e:5c:e7:9f:3d:cf:a1:f4:52:ef:d3:68:cd:ba:67:a3:38:09: 7c:b3:12:f0:ab:08:ff:96:dc:1c:60:90:dc:b6:f1:f2:6c:03: 66:6a:25:62:5c:ff:53:f2:53:59:4c:48:59:3f:c4:56:10:de: c1:6a:60:46:e7:41:cb:06:ce:9a:3c:50:00:9d:3c:d7:92:27: 35:49:bf:74:c6:bf:70:23:fa:dc:92:12:0b:ef:4f:3b:31:0a: 60:08:0d:cd:fb:37:27:c9:79:96:f2:3b:08:57:61:eb:0d:98: 24:32:25:a9:95:12:e3:33:df:fc:04:57:08:4c:a9:85:a6:38: 44:d4:02:ec:7f:d3:5b:b6:39:f4:34:86:9f:8b:5e:14:fd:84: cb:37:d0:38:ef:22:db:96:fe:e1:f6:2b:be:67:45:de:0b:b5: f1:32:fe:56:1e:93:06:1b:6b:76:42:22:1e:0c:20:69:c8:10: 06:ca:dd:92:5d:20:cf:4f:b5:9c:3f:36:6a:ec:7c:df:45:8d: f3:66:14:86:b0:89:88:c0:d0:57:ed:3f:6a:55:4b:34:7f:b1: d1:fa:42:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejyrXiYkR76hWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NjNmNjRiZjUtM2MxYS00NzVkLThjMzgtZjkwZTM3NzY1MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cqVCvXbbZEZWHikFerFtIo1J7CN0sVvC+BK FcUiizvgQdM/gTZhc4TE/2++DANEpOY1vRgUfgYSFxv/sDsFfbJ+f/Bf2tx4DG/U 0G9pX/QcXXLPpH4D/46uXSkr3dnALdRzBr/pxD8gv7HomJC8W/LVmkrQEdgcZ6hH VR5xtChigFoH975rSyU2a4esmzvi/rlDX231+Q1nlLLTLoVkXGLgA6U6Bc4nODnW rnCeljO5sd+cAMcBsjmVFTAFDIsvfQYDtiyOxFWZ8NcYTYRGXSKmWOpuq/nbx0tG GSw6L5KXVIJizkBNPZCOyUt/Au4HJvJVyu9ZbaowzA+DDtVxrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqqRfpEqwTw3cW2K4CDESQHeC5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGRiMjIzODItMGYyYi0z YTdmLWJjNTctMjY4ZjhiMjVhOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRalMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkzMpmYP+MV9Ny+WPJ3Pbg+tfAJDg78UGzC8u8iHN85lXjGDg5c5589 z6H0Uu/TaM26Z6M4CXyzEvCrCP+W3BxgkNy28fJsA2ZqJWJc/1PyU1lMSFk/xFYQ 3sFqYEbnQcsGzpo8UACdPNeSJzVJv3TGv3Aj+tySEgvvTzsxCmAIDc37NyfJeZby OwhXYesNmCQyJamVEuMz3/wEVwhMqYWmOETUAux/01u2OfQ0hp+LXhT9hMs30Djv ItuW/uH2K75nRd4LtfEy/lYekwYba3ZCIh4MIGnIEAbK3ZJdIM9PtZw/NmrsfN9F jfNmFIawiYjA0FftP2pVSzR/sdH6Qjk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:23 2026 by rpki-client