$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f033c8e4-cff3-3b95-af18-42198ad5c50f.roa File: f033c8e4-cff3-3b95-af18-42198ad5c50f.roa (raw, json) Hash identifier: I6PAXoXZj/sRXy/tXpbClKnlfo3STK3OrBSL2XVlbiI= Subject key identifier: 5E:A0:E7:A0:73:0D:86:5F:83:40:FF:62:09:EE:30:54:EF:23:59:B1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4C7BCA178A2FFAFE2500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f033c8e4-cff3-3b95-af18-42198ad5c50f.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4c:7b:ca:17:8a:2f:fa:fe:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4f4e573e-95c9-4caa-8986-7ea1065ed8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:02:e5:2d:14:fe:51:89:d5:98:16:56:53: 80:98:31:1e:40:54:56:eb:ab:59:e6:c7:f9:eb:0b: f0:d9:54:14:a8:91:d6:5c:84:14:30:93:52:e4:d7: c0:4d:da:e8:b0:04:b3:8d:a6:82:11:3c:e5:cc:c1: a2:37:8e:f7:b2:01:84:33:f7:b0:3c:24:17:64:4f: 0f:35:64:ba:bf:ea:8d:58:f0:0c:e0:a1:0e:c4:34: 4a:5b:14:f6:1c:19:33:86:2f:37:1f:e3:2f:29:40: 64:a4:99:e0:cf:b3:f9:51:84:ac:55:85:bf:f6:b5: c0:2e:8e:fe:93:3c:f7:80:46:4a:87:e0:d5:07:06: 4f:bd:e2:d0:e9:aa:c0:67:81:ee:29:16:5d:1d:09: 17:e1:97:50:28:9b:01:5b:bc:ed:6a:72:f8:e0:f5: 6f:45:d4:03:1a:37:8d:05:13:dd:a3:c6:33:20:97: 5a:ab:79:b5:d6:62:c9:d7:88:12:e9:ba:29:e8:11: ec:27:a9:9b:b8:77:7a:ee:7c:6c:77:c1:60:16:e0: 4f:d7:b8:a1:00:78:8c:ef:04:1d:ca:e7:0e:c2:68: 4c:4f:b2:72:27:80:f5:9a:c2:a1:d6:85:be:fa:f8: 6e:34:77:34:19:28:15:9f:26:64:b3:5e:b0:31:27: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A0:E7:A0:73:0D:86:5F:83:40:FF:62:09:EE:30:54:EF:23:59:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f033c8e4-cff3-3b95-af18-42198ad5c50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:86:87:22:66:a8:80:5f:aa:93:d2:ac:ce:de:58:9a:4c:35: 3b:52:9b:52:c1:c2:0c:ac:32:ca:bb:84:57:00:ac:1f:dc:b6: e2:99:7e:2f:01:e8:af:04:80:a3:ff:e5:8e:29:40:82:5c:e1: b0:ae:c1:d3:90:c8:eb:59:62:09:7f:c5:8d:67:7a:6e:9a:2e: c6:9b:8b:77:53:d0:76:79:72:e0:a9:19:fd:ac:21:37:9c:e7: 8f:e9:69:bd:72:a5:4b:da:05:44:15:dd:5e:f8:33:d2:d5:4b: 31:b0:48:4c:51:60:d7:dc:19:7b:b5:13:e4:67:dd:6d:c5:a9: d7:41:08:0d:f4:b7:c2:d4:11:5d:20:1e:b8:4a:31:86:ca:a5: 49:10:11:68:94:74:2a:0d:35:0c:4e:42:fb:7c:2e:95:55:99: fc:2f:15:f8:6e:c4:d0:1b:9e:30:6d:90:25:2a:b3:b4:a8:74: 1e:b9:36:3f:aa:06:f8:25:1b:86:94:73:2f:44:3c:06:b7:d8: 31:40:3e:2d:b2:05:e1:3e:a0:9d:88:1c:dc:c2:c8:d2:d6:c1: 75:bf:01:5b:d7:e0:f2:42:eb:27:6d:24:d8:4a:11:66:34:37: ce:cd:e6:26:e7:14:50:78:7b:89:61:d0:0d:f5:e4:db:c9:cc: 97:40:7c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekx7yheKL/r+JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGY0ZTU3M2UtOTVjOS00Y2FhLTg5ODYtN2VhMTA2NWVkOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9UC5S0U/lGJ1ZgWVlOAmDEeQFRW66tZ5sf5 6wvw2VQUqJHWXIQUMJNS5NfATdrosASzjaaCETzlzMGiN473sgGEM/ewPCQXZE8P NWS6v+qNWPAM4KEOxDRKWxT2HBkzhi83H+MvKUBkpJngz7P5UYSsVYW/9rXALo7+ kzz3gEZKh+DVBwZPveLQ6arAZ4HuKRZdHQkX4ZdQKJsBW7ztanL44PVvRdQDGjeN BRPdo8YzIJdaq3m11mLJ14gS6bop6BHsJ6mbuHd67nxsd8FgFuBP17ihAHiM7wQd yucOwmhMT7JyJ4D1msKh1oW++vhuNHc0GSgVnyZks16wMSc6UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6g56BzDYZfg0D/YgnuMFTvI1mxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjAzM2M4ZTQtY2ZmMy0z Yjk1LWFmMTgtNDIxOThhZDVjNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyGhyJmqIBfqpPSrM7eWJpMNTtSm1LBwgysMsq7hFcArB/ctuKZfi8B 6K8EgKP/5Y4pQIJc4bCuwdOQyOtZYgl/xY1nem6aLsabi3dT0HZ5cuCpGf2sITec 54/pab1ypUvaBUQV3V74M9LVSzGwSExRYNfcGXu1E+Rn3W3FqddBCA30t8LUEV0g HrhKMYbKpUkQEWiUdCoNNQxOQvt8LpVVmfwvFfhuxNAbnjBtkCUqs7SodB65Nj+q BvglG4aUcy9EPAa32DFAPi2yBeE+oJ2IHNzCyNLWwXW/AVvX4PJC6ydtJNhKEWY0 N87N5ibnFFB4e4lh0A315NvJzJdAfHs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:30 2026 by rpki-client