$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebe44c39-cb14-3067-aa42-f2c37949369d.roa File: ebe44c39-cb14-3067-aa42-f2c37949369d.roa (raw, json) Hash identifier: Q1cwYQW/Kl9DAok6Z6kdR+D/xQlxCEu43e+Md82nLys= Subject key identifier: 57:BA:7E:FD:75:4D:96:6A:D9:B4:29:CC:04:EF:AD:34:3E:96:9D:B5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A246D6576B4645193EC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebe44c39-cb14-3067-aa42-f2c37949369d.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:24:6d:65:76:b4:64:51:93:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=d2e93a46-fac5-4d3d-8914-1bedca3b923c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:d3:a5:c5:bd:e9:b5:93:79:22:b1:fc:10: c1:08:9e:95:95:3f:69:f6:0d:f7:7a:78:0e:67:ec: 27:97:84:ba:36:23:e1:cf:a9:ef:e9:12:e3:b3:3b: 5a:ee:3f:a3:8a:bc:b5:df:0e:be:ed:bf:9e:c1:7b: 58:98:2a:7e:8e:f9:1d:87:8c:73:88:25:71:14:e3: 3c:41:7a:4a:a4:23:50:35:3b:c9:83:39:79:69:7c: b4:77:b8:c4:1d:fb:b3:61:53:14:78:44:0c:3e:4e: f3:df:66:cf:a5:51:f4:9f:5e:1c:43:d6:ab:00:d6: c3:ac:aa:49:8b:9f:91:0e:9f:7e:7e:3a:ea:0d:57: 37:5a:d4:49:8c:33:67:20:85:b8:e2:06:53:fb:7d: f1:aa:c4:94:7f:5a:4a:0c:76:ee:d5:9e:32:31:75: a3:56:e5:bd:2d:c7:84:e2:14:2c:fc:53:20:5c:a4: d4:48:66:3f:45:04:80:cd:63:d4:26:49:ef:a0:f9: bb:36:60:94:c1:8a:5b:d4:09:2e:a1:eb:95:b8:ad: eb:31:52:56:3f:f8:ab:1d:79:34:90:0d:96:d5:c4: 14:93:2c:07:df:56:76:90:04:ca:8f:fa:1f:da:5f: d2:29:8f:ce:b5:9e:a6:d9:17:79:f0:d8:62:45:33: dd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BA:7E:FD:75:4D:96:6A:D9:B4:29:CC:04:EF:AD:34:3E:96:9D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ebe44c39-cb14-3067-aa42-f2c37949369d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:69:88:27:d9:5b:70:10:1b:91:41:8b:d8:7f:da:13:3b:09: 31:78:ed:c0:15:17:0b:c9:f5:7b:6c:c0:2c:dc:53:77:35:0e: f1:df:e6:b0:69:45:00:22:9a:0e:25:6f:6b:73:5b:77:d8:ff: 7f:f0:d0:32:bc:38:ff:55:24:6f:b8:d8:70:6f:25:87:1d:fc: e1:0f:0d:e8:cc:36:be:b2:cb:0d:dd:ce:4d:bb:8d:54:76:c6: cd:79:50:9e:88:40:1a:42:f7:dc:2d:72:66:6c:a2:a7:05:ea: 84:99:1b:59:0d:87:0f:ed:33:d6:1d:46:5a:7b:79:fe:cb:35: ab:98:34:c4:a3:8f:da:1e:4d:f7:39:f3:5c:cc:75:44:35:14: 4f:86:74:42:67:27:ad:f0:ad:28:c6:0c:b3:43:9b:2e:a5:fd: a4:03:40:ad:a1:aa:29:95:1b:05:dd:3e:ab:88:46:57:3f:3a: ba:7a:e3:10:fb:b5:6a:e4:2a:33:b0:11:c1:1b:82:84:31:da: 02:81:69:44:26:7a:3e:6f:d3:a7:4c:c0:a5:d4:55:77:46:ab: 83:6d:09:09:25:5b:21:44:7a:0e:cd:b4:5b:b1:a0:d7:d3:51: 1f:e4:7d:a9:34:38:94:22:37:1b:5c:db:32:39:7d:ff:ab:d0: 58:dc:ae:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiRtZXa0ZFGT7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDJlOTNhNDYtZmFjNS00ZDNkLTg5MTQtMWJlZGNhM2I5MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqznTpcW96bWTeSKx/BDBCJ6VlT9p9g33engO Z+wnl4S6NiPhz6nv6RLjszta7j+jiry13w6+7b+ewXtYmCp+jvkdh4xziCVxFOM8 QXpKpCNQNTvJgzl5aXy0d7jEHfuzYVMUeEQMPk7z32bPpVH0n14cQ9arANbDrKpJ i5+RDp9+fjrqDVc3WtRJjDNnIIW44gZT+33xqsSUf1pKDHbu1Z4yMXWjVuW9LceE 4hQs/FMgXKTUSGY/RQSAzWPUJknvoPm7NmCUwYpb1AkuoeuVuK3rMVJWP/irHXk0 kA2W1cQUkywH31Z2kATKj/of2l/SKY/OtZ6m2Rd58NhiRTPdswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe6fv11TZZq2bQpzATvrTQ+lp21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWJlNDRjMzktY2IxNC0z MDY3LWFhNDItZjJjMzc5NDkzNjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBpiCfZW3AQG5FBi9h/2hM7CTF47cAVFwvJ9XtswCzcU3c1DvHf5rBp RQAimg4lb2tzW3fY/3/w0DK8OP9VJG+42HBvJYcd/OEPDejMNr6yyw3dzk27jVR2 xs15UJ6IQBpC99wtcmZsoqcF6oSZG1kNhw/tM9YdRlp7ef7LNauYNMSjj9oeTfc5 81zMdUQ1FE+GdEJnJ63wrSjGDLNDmy6l/aQDQK2hqimVGwXdPquIRlc/Orp64xD7 tWrkKjOwEcEbgoQx2gKBaUQmej5v06dMwKXUVXdGq4NtCQklWyFEeg7NtFuxoNfT UR/kfak0OJQiNxtc2zI5ff+r0FjcrgQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:21 2026 by rpki-client