$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebabcacb-9601-3648-92a9-073da4c12304.roa File: ebabcacb-9601-3648-92a9-073da4c12304.roa (raw, json) Hash identifier: nucC4blBpjoiaBK+fq3onehcljjuKcJw/JXgFpqLJJg= Subject key identifier: 89:96:B5:A4:7A:0D:04:81:59:EE:B4:F5:67:B3:D5:B8:1D:E6:D7:DA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A70C7E700D7CC2AD2E960 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebabcacb-9601-3648-92a9-073da4c12304.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 65.22.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:70:c7:e7:00:d7:cc:2a:d2:e9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=b722c662-8783-46e6-8cf8-0a87b5a1254d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:87:66:72:6d:26:a3:12:0b:c6:d2:2c:31: e7:f7:56:cc:08:e4:d7:5c:39:98:86:77:24:ad:6a: 02:d0:1d:63:79:d9:14:0b:6a:ac:a7:09:a7:c9:4d: b9:b3:27:97:bb:be:3b:f4:bf:9a:29:bb:fb:26:24: a9:04:ba:33:d4:4c:f1:42:52:78:d5:0b:9d:4f:14: f2:7f:c6:f0:eb:8d:bd:64:16:30:ec:eb:37:55:42: f3:a8:b4:2d:c3:8f:41:2b:d6:8a:2b:c6:3e:71:ff: 21:85:20:52:6d:c1:d3:14:94:32:67:b2:72:58:0f: e5:d9:d7:fb:13:78:1a:d0:7f:c8:f1:a7:91:31:ba: c1:bc:96:ee:1c:56:ac:10:e7:a0:d0:ca:4b:11:97: f6:c0:75:66:bc:ca:e9:4b:29:1b:6d:db:d9:0d:99: 32:6c:d4:e1:47:47:08:9c:c8:09:8c:c2:38:04:d6: d3:83:f8:3f:ce:84:db:3f:f2:c0:f9:90:a7:45:08: 4f:de:ea:95:4d:d8:fc:7e:e0:0e:af:65:38:a7:7c: 69:6c:6e:f2:a7:05:fe:33:4b:9d:1e:19:ff:f1:c4: 97:24:43:54:0a:f0:78:2d:88:7c:7d:17:c5:de:4d: 8a:5f:0b:46:e9:3b:66:26:6d:1f:90:35:f8:77:e5: cb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:96:B5:A4:7A:0D:04:81:59:EE:B4:F5:67:B3:D5:B8:1D:E6:D7:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebabcacb-9601-3648-92a9-073da4c12304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e2:22:ef:65:44:40:54:f1:47:b1:8c:a2:91:68:be:b1:d5: 33:f8:f6:78:a0:c1:36:fe:c1:6e:80:b3:a3:51:1d:39:f2:43: a1:01:78:a2:91:d8:92:e8:81:36:38:88:c7:f9:bc:4c:41:87: 0e:44:93:b5:fa:84:52:b1:6e:0b:e2:c7:7d:d6:59:1c:13:5c: 79:9d:17:ee:c4:9f:d2:93:a6:e0:2c:db:0d:3d:fa:b4:e0:d8: e7:aa:3e:20:12:69:00:54:ed:d3:07:12:71:51:97:88:26:2a: 93:0f:74:d7:f8:58:04:5e:13:fc:07:44:37:d4:ef:2e:38:35: df:2f:13:73:e5:ca:85:42:38:ad:aa:6d:61:4d:a4:36:b7:98: e2:cd:e0:8e:eb:02:9e:c6:2e:95:e3:16:ed:0d:a6:bf:cf:24: ee:de:fe:73:1d:66:51:96:70:c6:6c:da:33:94:64:b2:98:df: 55:dc:31:2f:29:a3:be:aa:fe:9f:85:27:58:1b:05:aa:db:dd: e7:b7:40:50:e6:61:2b:76:b9:2a:f1:f7:f5:d0:0a:b2:d4:54: 48:6a:50:97:0c:b0:a0:37:66:b7:2c:48:dd:75:0f:06:1f:fd: af:27:6d:bf:c8:ad:fa:4e:e0:87:0b:b0:39:5d:4e:42:a6:c3: dc:f1:46:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jenDH5wDXzCrS6WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YjcyMmM2NjItODc4My00NmU2LThjZjgtMGE4N2I1YTEyNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWWHZnJtJqMSC8bSLDHn91bMCOTXXDmYhnck rWoC0B1jedkUC2qspwmnyU25syeXu7479L+aKbv7JiSpBLoz1EzxQlJ41QudTxTy f8bw6429ZBYw7Os3VULzqLQtw49BK9aKK8Y+cf8hhSBSbcHTFJQyZ7JyWA/l2df7 E3ga0H/I8aeRMbrBvJbuHFasEOeg0MpLEZf2wHVmvMrpSykbbdvZDZkybNThR0cI nMgJjMI4BNbTg/g/zoTbP/LA+ZCnRQhP3uqVTdj8fuAOr2U4p3xpbG7ypwX+M0ud Hhn/8cSXJENUCvB4LYh8fRfF3k2KXwtG6TtmJm0fkDX4d+XLrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImWtaR6DQSBWe609Wez1bgd5tfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWJhYmNhY2ItOTYwMS0z NjQ4LTkyYTktMDczZGE0YzEyMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbiIu9lREBU8UexjKKRaL6x1TP49nigwTb+wW6As6NRHTnyQ6EBeKKR 2JLogTY4iMf5vExBhw5Ek7X6hFKxbgvix33WWRwTXHmdF+7En9KTpuAs2w09+rTg 2OeqPiASaQBU7dMHEnFRl4gmKpMPdNf4WAReE/wHRDfU7y44Nd8vE3PlyoVCOK2q bWFNpDa3mOLN4I7rAp7GLpXjFu0Npr/PJO7e/nMdZlGWcMZs2jOUZLKY31XcMS8p o76q/p+FJ1gbBarb3ee3QFDmYSt2uSrx9/XQCrLUVEhqUJcMsKA3ZrcsSN11DwYf /a8nbb/IrfpO4IcLsDldTkKmw9zxRsE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:26 2026 by rpki-client