$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3c46abf-2042-3b01-b124-817f9b86c9ea.roa File: e3c46abf-2042-3b01-b124-817f9b86c9ea.roa (raw, json) Hash identifier: +8y8KLAj3zFR3tUaToKijzAC6/MmSwXjV9hXm9jnOQw= Subject key identifier: 33:57:20:6C:72:89:1F:C8:91:C2:5E:F0:08:98:15:B2:01:9D:56:6A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A58A7CADC168539C17400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3c46abf-2042-3b01-b124-817f9b86c9ea.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:58:a7:ca:dc:16:85:39:c1:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=5ad563b7-96ee-40a9-b9ee-51d8ef886fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:4d:f4:08:55:7e:ab:54:72:9b:51:8c:25: 10:86:99:f9:64:d2:34:15:8e:f9:54:fa:ee:4f:24: 4d:94:81:53:7a:9c:03:41:9a:cd:e6:4b:9a:d7:97: 28:a6:d7:e3:00:d6:20:3a:1a:05:1b:e5:59:bc:50: 5e:bd:c3:6c:b3:ed:ad:6b:05:43:02:4c:25:aa:8d: de:32:58:91:77:10:ad:83:ed:84:33:3f:8c:d6:d6: e8:9c:ba:fe:af:76:f4:63:1c:d7:3a:f4:5c:51:f8: 84:26:4e:e6:63:aa:05:3c:95:c7:45:3f:49:7b:3c: 0f:26:7d:eb:93:a7:bd:1e:29:c9:69:49:57:45:2b: d8:a7:dd:de:be:75:e7:3e:27:59:02:42:e8:b7:c7: e8:d8:00:73:87:99:ba:a5:0b:60:cf:af:0a:df:26: 05:65:5c:cf:1b:eb:02:d7:e0:e0:8f:2a:98:85:7b: a5:dd:24:83:9c:17:17:e2:ce:b8:62:25:40:4c:ba: 73:b3:2a:da:5e:13:67:e9:e2:78:8b:bd:fb:42:51: 3a:d6:b2:a4:1b:78:06:5c:6b:82:3a:27:3f:9c:2c: 95:cd:ff:de:f4:1a:82:7c:44:a3:38:5a:9c:d9:03: b3:b3:04:be:9c:96:e1:50:e4:c0:ea:4b:c3:91:4d: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:57:20:6C:72:89:1F:C8:91:C2:5E:F0:08:98:15:B2:01:9D:56:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3c46abf-2042-3b01-b124-817f9b86c9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:aa:f6:e3:9f:58:f8:a0:09:ac:6d:90:e2:36:6f:2f:d0:5d: 2f:5c:de:e4:a1:cc:62:e6:3a:26:16:48:fa:c6:5f:8e:6b:68: e9:d2:e3:b8:a9:bd:fa:4c:dc:d7:6c:5f:b3:27:8d:1a:d4:b8: 64:e7:c7:28:59:b6:fe:72:08:48:eb:16:8d:9a:5a:dd:ac:2c: 24:34:32:6f:0e:d4:35:04:3e:1b:15:fb:8f:12:fb:c8:95:c5: ff:af:58:f4:71:c5:64:30:a7:11:86:dc:0f:62:3f:5f:29:2f: cb:b9:e2:4c:0e:8f:31:f8:ca:c2:f5:49:e1:0b:9d:93:e6:1d: f2:41:51:fe:8a:2c:5f:12:37:10:ef:e3:04:09:d7:1f:b5:a2: f2:51:56:e5:71:fc:18:aa:8a:86:6f:0f:f0:94:73:56:d6:ea: 17:94:df:ed:4a:e2:55:7b:5b:ca:1e:c4:98:53:c5:9c:1b:16: 0c:34:2a:ae:67:66:77:57:59:84:74:49:d1:c6:60:aa:b9:a6: 57:70:70:b8:79:da:19:95:c7:18:58:62:72:24:74:df:b5:ae: 73:69:8d:ad:f3:68:77:59:e1:63:29:77:8e:06:b1:bb:88:a5: 48:ed:03:b2:11:55:49:2c:4d:6c:78:fc:27:fa:39:1e:33:bf: 18:0c:e3:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelinytwWhTnBdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NWFkNTYzYjctOTZlZS00MGE5LWI5ZWUtNTFkOGVmODg2ZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDBN9AhVfqtUcptRjCUQhpn5ZNI0FY75VPru TyRNlIFTepwDQZrN5kua15coptfjANYgOhoFG+VZvFBevcNss+2tawVDAkwlqo3e MliRdxCtg+2EMz+M1tbonLr+r3b0YxzXOvRcUfiEJk7mY6oFPJXHRT9JezwPJn3r k6e9HinJaUlXRSvYp93evnXnPidZAkLot8fo2ABzh5m6pQtgz68K3yYFZVzPG+sC 1+DgjyqYhXul3SSDnBcX4s64YiVATLpzsyraXhNn6eJ4i737QlE61rKkG3gGXGuC Oic/nCyVzf/e9BqCfESjOFqc2QOzswS+nJbhUOTA6kvDkU27EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNXIGxyiR/IkcJe8AiYFbIBnVZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTNjNDZhYmYtMjA0Mi0z YjAxLWIxMjQtODE3ZjliODZjOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSq9uOfWPigCaxtkOI2by/QXS9c3uShzGLmOiYWSPrGX45raOnS47ip vfpM3NdsX7MnjRrUuGTnxyhZtv5yCEjrFo2aWt2sLCQ0Mm8O1DUEPhsV+48S+8iV xf+vWPRxxWQwpxGG3A9iP18pL8u54kwOjzH4ysL1SeELnZPmHfJBUf6KLF8SNxDv 4wQJ1x+1ovJRVuVx/BiqioZvD/CUc1bW6heU3+1K4lV7W8oexJhTxZwbFgw0Kq5n ZndXWYR0SdHGYKq5pldwcLh52hmVxxhYYnIkdN+1rnNpja3zaHdZ4WMpd44GsbuI pUjtA7IRVUksTWx4/Cf6OR4zvxgM47Y= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:26 2026 by rpki-client