$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa File: e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa (raw, json) Hash identifier: iBebH/e8dr49EKBnKIDVaqJMDpRIQFWfv7RKBKfNdRM= Subject key identifier: E8:2F:6D:F6:75:5B:1C:0E:52:C5:DE:77:44:33:C0:23:6E:F5:14:CD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A0456E790CDCB513C1960 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:04:56:e7:90:cd:cb:51:3c:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=254d2e42-3f54-43b1-8c68-5f2834672d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:ba:03:3b:7a:7a:a4:b3:f3:bb:12:af:05: cd:80:81:2c:0e:e6:a9:b5:44:14:40:9c:de:cf:8b: af:77:e1:0f:60:c3:bb:5b:15:be:bd:07:97:76:09: 6d:98:1a:29:c3:f1:3a:9d:31:18:30:0d:5b:d5:44: 29:35:16:99:bd:85:1e:17:d5:e6:a1:3c:66:7f:5d: 52:6e:41:09:52:e0:35:f4:7e:c0:f0:82:14:49:7d: af:96:70:6d:13:fa:0e:97:aa:d6:31:12:16:b8:c2: 27:c5:bf:ca:a5:2c:ef:06:b5:a8:e0:f9:da:5b:6b: 9a:cc:e2:a6:0a:de:75:1f:d4:43:f3:86:4a:23:63: 0d:42:fb:fc:bf:8f:1e:97:47:19:2a:c4:a1:3f:d2: be:b3:fb:59:d9:66:7c:ef:e6:37:87:3b:eb:4c:71: 97:c7:7d:2d:2a:dc:0d:f6:54:10:f6:f6:a0:76:9f: d3:fa:0d:4d:bb:6a:c1:ba:e6:de:83:e4:ba:92:41: 4e:ab:ef:d0:14:a3:57:ad:d9:4a:b8:34:2f:9e:40: d0:df:65:dd:a3:ff:2a:77:34:04:1f:2e:0c:4b:66: e7:19:d8:ea:1a:d3:a8:e3:37:64:13:48:a9:87:f3: 0e:b0:f2:55:c1:14:7b:2f:28:82:14:d5:e8:c4:eb: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2F:6D:F6:75:5B:1C:0E:52:C5:DE:77:44:33:C0:23:6E:F5:14:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3b3f07b-a742-3600-b4c2-b09ba5c5c4db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:71:02:2a:9d:70:09:e0:0a:f2:3d:50:20:76:1d:1d:7f:c1: b6:e0:ac:54:fe:06:32:e8:3a:f9:36:a4:2f:34:7f:51:ab:0b: f0:72:b7:86:1a:49:55:3b:d6:17:5d:75:70:76:3d:61:a5:03: eb:03:82:16:16:20:ac:02:46:70:ba:3a:38:9e:4d:63:ff:11: 7c:0e:f8:0f:fb:df:c8:64:70:b0:89:78:1b:39:b7:4d:de:75: 1e:9a:b0:68:4b:74:6b:46:fe:a1:fe:e4:a4:c2:4a:01:4d:a1: 9e:4f:f5:29:fc:ba:87:2b:ac:1b:56:da:e2:f6:61:24:66:68: d1:b7:c1:91:5c:fd:46:93:06:26:f0:95:1e:06:78:c1:ab:26: d3:21:e2:dd:78:94:51:e1:c0:7d:16:2d:bc:e5:0e:f5:77:86: 11:bc:01:8f:84:8e:2e:d8:ed:c5:00:2b:9d:e8:fd:77:01:17: 06:8c:40:bf:ae:31:e1:8b:b8:40:4b:8b:1c:56:b0:13:5f:b3: 18:3e:95:4c:53:1e:72:ca:d0:99:03:37:3e:f4:da:53:67:c8: 8c:74:27:6a:8f:ea:04:b4:86:4c:ca:e0:cc:5a:b4:c0:2c:80: a1:90:b2:b1:6d:af:54:1c:43:01:89:1e:66:cb:10:ff:26:e6: b1:3f:f6:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegRW55DNy1E8GWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjU0ZDJlNDItM2Y1NC00M2IxLThjNjgtNWYyODM0NjcyZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEW6Azt6eqSz87sSrwXNgIEsDuaptUQUQJze z4uvd+EPYMO7WxW+vQeXdgltmBopw/E6nTEYMA1b1UQpNRaZvYUeF9XmoTxmf11S bkEJUuA19H7A8IIUSX2vlnBtE/oOl6rWMRIWuMInxb/KpSzvBrWo4PnaW2uazOKm Ct51H9RD84ZKI2MNQvv8v48el0cZKsShP9K+s/tZ2WZ87+Y3hzvrTHGXx30tKtwN 9lQQ9vagdp/T+g1Nu2rBuubeg+S6kkFOq+/QFKNXrdlKuDQvnkDQ32Xdo/8qdzQE Hy4MS2bnGdjqGtOo4zdkE0iph/MOsPJVwRR7LyiCFNXoxOsP1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgvbfZ1WxwOUsXed0QzwCNu9RTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTNiM2YwN2ItYTc0Mi0z NjAwLWI0YzItYjA5YmE1YzVjNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdxAiqdcAngCvI9UCB2HR1/wbbgrFT+BjLoOvk2pC80f1GrC/Byt4Ya SVU71hdddXB2PWGlA+sDghYWIKwCRnC6OjieTWP/EXwO+A/738hkcLCJeBs5t03e dR6asGhLdGtG/qH+5KTCSgFNoZ5P9Sn8uocrrBtW2uL2YSRmaNG3wZFc/UaTBibw lR4GeMGrJtMh4t14lFHhwH0WLbzlDvV3hhG8AY+Eji7Y7cUAK53o/XcBFwaMQL+u MeGLuEBLixxWsBNfsxg+lUxTHnLK0JkDNz702lNnyIx0J2qP6gS0hkzK4MxatMAs gKGQsrFtr1QcQwGJHmbLEP8m5rE/9jE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:45 2026 by rpki-client