$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa File: f1432ee2-0ae6-32fb-950a-ffa05a901073.roa (raw, json) Hash identifier: U6JYyOESvwIN8Ox+zYj9Kfjo3lDJcOl0ZzFt5HWdVB8= Subject key identifier: 4A:BF:15:89:56:AC:AE:13:49:D6:B2:AB:E2:F9:AB:9C:5E:BC:19:FE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A566D7EBA3CE6FA18E780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:56:6d:7e:ba:3c:e6:fa:18:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f9136eb9-c40b-4f3c-ae0b-d0c33cddf86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:8d:8b:e8:09:53:6f:fc:d7:90:bd:3a:a5: 3d:a9:78:70:26:b3:b9:f0:9a:90:12:83:b9:3a:93: 8e:2d:86:3f:eb:97:d6:b6:bc:2e:ab:e2:18:77:28: ba:c3:bb:f9:00:ef:5d:f2:ef:79:0b:8a:f7:cc:74: 81:48:18:a6:74:a5:2a:a9:1e:51:da:d7:63:7c:c3: a2:f7:f1:25:7c:46:da:9a:3c:00:e4:f6:4c:6f:1c: 8c:0b:56:c5:a3:cf:ff:eb:ef:a8:64:3b:f9:b7:ac: 08:ba:13:a2:6c:d5:9f:c3:e3:ec:8e:e2:32:63:66: c5:61:9f:21:3b:85:b3:bb:62:e4:8b:f2:64:ba:d9: 08:cf:ca:83:56:5a:14:6e:7a:b0:5f:31:0b:8c:c9: da:0f:65:04:c1:0f:1a:13:d5:93:d0:12:f4:66:0a: e8:d6:4e:58:49:4a:cb:c9:e1:9f:4e:1d:50:26:d8: cc:bf:9e:96:97:c1:a7:55:a8:77:da:1c:80:36:b3: 3b:46:19:0b:55:bf:39:b5:9a:18:b6:bb:6b:38:5b: b7:a4:e2:73:83:69:c3:98:79:bf:10:ba:ba:45:eb: a3:76:35:8c:2b:82:a1:a4:22:3f:aa:cd:78:64:5a: 36:5e:2f:07:f2:bd:82:f9:da:f7:a9:9f:f1:28:de: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BF:15:89:56:AC:AE:13:49:D6:B2:AB:E2:F9:AB:9C:5E:BC:19:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f1432ee2-0ae6-32fb-950a-ffa05a901073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e1:23:61:87:b1:ca:60:4e:32:5a:04:d3:73:a0:26:f0:91: a3:f2:fe:d9:dd:78:9f:6a:4d:74:62:01:d2:33:b3:95:7c:eb: c9:2e:78:50:d8:b9:43:7e:cc:cd:00:67:fd:ad:3b:02:96:85: 30:1f:9c:11:f9:e1:58:7f:49:a7:9a:c8:32:15:1f:96:72:8c: c5:96:11:04:5e:20:e5:a5:89:98:12:09:51:e2:fd:d4:33:0e: 13:ae:3b:81:dd:62:f9:48:9c:df:cd:92:89:21:33:f2:bd:d1: 6f:08:da:b5:f6:53:17:06:da:54:75:06:ea:71:a5:b6:ef:ef: 11:50:48:e3:36:3a:6e:36:92:87:eb:0a:78:38:71:46:81:8a: 1d:bc:4d:73:d5:51:e2:42:c3:16:ac:5f:9c:81:ff:2a:91:37: 8c:d2:c1:7e:33:bd:d0:d8:d1:52:f1:62:23:62:b8:2c:47:e9: 8d:66:23:a7:5f:68:87:2c:37:21:1a:45:91:e6:19:37:e8:5a: 4f:d8:7b:05:06:56:61:e6:47:3b:a3:a0:fc:5a:f2:90:3b:e3: a7:e1:17:7d:7f:07:64:84:25:4d:b8:e9:95:41:db:fe:15:79: 48:7c:3b:28:a9:02:7a:7f:9e:c2:fc:96:68:1a:39:25:33:8f: 6a:1c:fd:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelZtfro85voY54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjkxMzZlYjktYzQwYi00ZjNjLWFlMGItZDBjMzNjZGRmODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LONi+gJU2/815C9OqU9qXhwJrO58JqQEoO5 OpOOLYY/65fWtrwuq+IYdyi6w7v5AO9d8u95C4r3zHSBSBimdKUqqR5R2tdjfMOi 9/ElfEbamjwA5PZMbxyMC1bFo8//6++oZDv5t6wIuhOibNWfw+PsjuIyY2bFYZ8h O4Wzu2Lki/JkutkIz8qDVloUbnqwXzELjMnaD2UEwQ8aE9WT0BL0Zgro1k5YSUrL yeGfTh1QJtjMv56Wl8GnVah32hyANrM7RhkLVb85tZoYtrtrOFu3pOJzg2nDmHm/ ELq6ReujdjWMK4KhpCI/qs14ZFo2Xi8H8r2C+dr3qZ/xKN5nNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq/FYlWrK4TSdayq+L5q5xevBn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjE0MzJlZTItMGFlNi0z MmZiLTk1MGEtZmZhMDVhOTAxMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPhI2GHscpgTjJaBNNzoCbwkaPy/tndeJ9qTXRiAdIzs5V868kueFDY uUN+zM0AZ/2tOwKWhTAfnBH54Vh/SaeayDIVH5ZyjMWWEQReIOWliZgSCVHi/dQz DhOuO4HdYvlInN/NkokhM/K90W8I2rX2UxcG2lR1Bupxpbbv7xFQSOM2Om42kofr Cng4cUaBih28TXPVUeJCwxasX5yB/yqRN4zSwX4zvdDY0VLxYiNiuCxH6Y1mI6df aIcsNyEaRZHmGTfoWk/YewUGVmHmRzujoPxa8pA746fhF31/B2SEJU246ZVB2/4V eUh8OyipAnp/nsL8lmgaOSUzj2oc/W4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:34 2026 by rpki-client