$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e80637d0-8b44-3824-9634-b42d8afc10af.roa File: e80637d0-8b44-3824-9634-b42d8afc10af.roa (raw, json) Hash identifier: irJUTjbx65greugEzTdDOSGPhndDPubB6bsEygh++vQ= Subject key identifier: CB:C1:C5:A0:9E:11:3F:11:36:20:88:D1:B7:F3:6F:8D:D6:15:66:63 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379F0EB58362B3FA1E00480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e80637d0-8b44-3824-9634-b42d8afc10af.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f0:eb:58:36:2b:3f:a1:e0:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=c66518d9-caf8-4c3d-a0f8-3862f63325b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:c7:e8:85:2d:d0:84:ae:f2:49:b3:cb:0d: 54:89:13:12:f5:95:69:50:25:9a:28:84:e0:d8:d5: 81:cb:6d:75:85:5a:cb:7e:6e:c0:60:56:1e:c6:54: cb:f7:be:49:cb:11:2f:93:ac:b0:af:3e:f3:b6:62: c2:29:2f:af:eb:4e:4b:96:51:2c:86:1d:57:13:14: 22:be:23:ae:78:c2:cf:8f:4f:1a:11:f2:9d:3a:52: e8:e3:3e:7b:1a:f9:b1:6e:41:e6:c5:61:44:b8:8e: ea:75:44:17:49:51:f3:d3:39:11:8e:f1:c8:d5:a5: dd:3c:bc:49:b3:58:b0:05:80:96:0a:ef:2c:28:66: 16:f3:ac:2c:66:e7:bd:94:e7:34:45:10:9a:fa:31: 6f:74:d6:85:97:c8:8b:62:52:db:63:42:23:fd:81: d9:3a:50:d8:f7:ea:9c:16:3f:bc:19:33:6c:dc:03: 2a:92:ed:33:92:eb:67:de:7d:30:14:ec:b0:2a:35: 0b:e4:4e:f8:1e:c1:77:39:df:71:33:9e:b7:5c:31: d8:e8:db:60:df:38:b4:ea:9f:9c:9f:02:a7:f5:23: 67:49:35:ff:be:3a:02:32:2d:2c:6e:ef:a8:c6:01: c2:32:ed:8e:09:27:e5:3d:f9:fb:6c:de:74:f6:d5: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C1:C5:A0:9E:11:3F:11:36:20:88:D1:B7:F3:6F:8D:D6:15:66:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e80637d0-8b44-3824-9634-b42d8afc10af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:21:ea:d3:57:b8:cb:07:4b:71:8b:4c:d5:63:cd:e6:1f:62: fa:d6:d1:ff:61:3c:da:1a:15:81:98:dc:70:a8:b8:22:39:53: 01:b6:a6:4e:1a:38:86:4f:a3:49:99:27:c5:f4:96:08:d5:e1: 9c:8a:dd:6d:70:a1:eb:ec:72:ed:66:f6:0f:b2:e1:a0:f6:e2: 9d:a2:ae:e6:20:d5:75:76:f2:6e:5c:3d:63:77:e0:71:25:17: e7:de:89:72:0b:14:10:db:69:bb:e6:fc:cf:dc:66:2a:c7:3e: 34:3c:b9:b3:d9:f3:34:b6:bc:03:e7:22:81:16:2d:c5:d2:54: a9:41:04:19:72:39:ab:72:75:01:c7:e7:74:9c:02:05:fb:a3: 4b:55:56:51:e3:ab:06:ca:bb:65:c6:b5:b5:d6:85:cf:af:d1: 3d:a7:b3:28:b2:b4:a8:95:4d:97:e9:60:f3:08:5d:4d:6b:5f: 06:76:4a:8d:ef:f3:48:42:2a:31:f8:ac:1b:88:08:9a:46:12: 2e:5f:9c:0d:9d:2b:5a:7c:4b:17:4a:9a:b9:d1:43:d4:3d:2b: b4:ab:44:b6:4d:cf:c4:d7:10:74:18:f7:89:a9:b7:81:ac:a1: 4c:cf:20:5d:15:2a:5d:5d:79:82:5c:03:e9:f4:65:26:8b:d1: 06:3a:33:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefDrWDYrP6HgBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YzY2NTE4ZDktY2FmOC00YzNkLWEwZjgtMzg2MmY2MzMyNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmvH6IUt0ISu8kmzyw1UiRMS9ZVpUCWaKITg 2NWBy211hVrLfm7AYFYexlTL975JyxEvk6ywrz7ztmLCKS+v605LllEshh1XExQi viOueMLPj08aEfKdOlLo4z57GvmxbkHmxWFEuI7qdUQXSVHz0zkRjvHI1aXdPLxJ s1iwBYCWCu8sKGYW86wsZue9lOc0RRCa+jFvdNaFl8iLYlLbY0Ij/YHZOlDY9+qc Fj+8GTNs3AMqku0zkutn3n0wFOywKjUL5E74HsF3Od9xM563XDHY6Ntg3zi06p+c nwKn9SNnSTX/vjoCMi0sbu+oxgHCMu2OCSflPfn7bN509tWgYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvBxaCeET8RNiCI0bfzb43WFWZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTgwNjM3ZDAtOGI0NC0z ODI0LTk2MzQtYjQyZDhhZmMxMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYh6tNXuMsHS3GLTNVjzeYfYvrW0f9hPNoaFYGY3HCouCI5UwG2pk4a OIZPo0mZJ8X0lgjV4ZyK3W1woevscu1m9g+y4aD24p2iruYg1XV28m5cPWN34HEl F+feiXILFBDbabvm/M/cZirHPjQ8ubPZ8zS2vAPnIoEWLcXSVKlBBBlyOatydQHH 53ScAgX7o0tVVlHjqwbKu2XGtbXWhc+v0T2nsyiytKiVTZfpYPMIXU1rXwZ2So3v 80hCKjH4rBuICJpGEi5fnA2dK1p8SxdKmrnRQ9Q9K7SrRLZNz8TXEHQY94mpt4Gs oUzPIF0VKl1deYJcA+n0ZSaL0QY6M8Q= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:29 2026 by rpki-client