$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f2bdb302-96fa-38e1-a601-acb09c90541c.roa File: f2bdb302-96fa-38e1-a601-acb09c90541c.roa (raw, json) Hash identifier: SS11SR/lopCba3qpugH7LEV2wjPiRyjYXvBID/rYUlQ= Subject key identifier: 39:DD:8B:29:48:34:BA:9B:17:5C:83:23:FF:84:7F:27:B0:6C:BE:67 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A45D593975A3F64235140 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f2bdb302-96fa-38e1-a601-acb09c90541c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:45:d5:93:97:5a:3f:64:23:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=23d308b7-7079-4de8-a2ba-241d92ecce51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7f:7f:a0:2a:fb:13:56:dd:d3:1f:97:56:86: c2:19:ac:7c:0f:99:71:03:6d:56:89:02:fc:f2:49: 6b:87:5e:ee:02:46:4c:c9:be:62:bc:2e:74:c8:60: ff:60:46:b2:1d:94:bd:6f:cd:c8:1b:20:cb:54:38: e7:21:06:73:51:df:de:a7:ba:33:85:d6:fd:f2:d7: 74:fa:9c:3a:19:d9:65:d5:8d:f7:32:60:e1:29:fa: 1b:26:0f:58:00:d7:66:a1:19:aa:a1:5a:31:cc:fb: 1e:26:2d:55:36:a2:7a:7f:9e:c1:f3:ea:41:9e:cb: 2c:e4:1d:bc:c5:d7:a5:a8:b2:de:cd:63:58:91:41: bc:e0:65:bb:49:32:20:f2:71:6e:0a:c3:80:5e:2c: 0c:df:d1:3e:55:9f:01:b5:9a:c4:da:e3:da:93:dd: 3b:cf:a3:2d:d3:75:4c:ee:03:a1:d7:f3:28:67:57: 29:d9:99:90:0f:75:e1:b1:88:08:02:5d:f4:3f:09: f2:c2:9e:e0:f7:8a:3a:5f:27:2f:94:90:d6:56:7d: 8e:89:97:16:53:d5:e3:81:17:3c:86:2a:23:4d:bf: 1d:7b:31:66:4b:d4:a9:a0:1b:a1:48:2d:aa:17:cc: dc:8a:25:09:02:08:01:f7:20:61:6d:39:80:fe:1f: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DD:8B:29:48:34:BA:9B:17:5C:83:23:FF:84:7F:27:B0:6C:BE:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f2bdb302-96fa-38e1-a601-acb09c90541c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:90:90:64:a2:c7:fa:4b:f1:74:98:f0:e3:a8:16:ac:81:41: b4:88:94:db:13:cf:98:7d:8b:ea:47:e2:e3:64:12:55:fb:35: 52:ca:3b:d1:62:31:03:d3:fd:64:ed:62:00:38:27:1c:3f:d4: 3e:f3:0e:9f:68:7a:cb:67:63:38:37:a9:f8:62:87:d9:73:46: fa:4b:d6:5d:d1:5d:eb:ae:c3:16:78:a1:ce:9b:ed:30:bd:b9: 3c:9b:17:f5:8f:17:51:b2:96:ae:fe:ec:ec:0e:5b:b3:b4:a1: 07:e6:b1:03:14:a0:eb:a0:06:d7:a8:bf:a2:18:6d:c7:96:1f: 1a:59:28:79:dd:0c:e4:4e:22:4f:83:e1:cd:d0:af:16:b2:c0: 60:ef:00:44:f8:2e:7b:26:15:4c:b2:eb:62:7f:83:87:4c:fc: d0:32:3e:fc:70:13:6c:33:c0:d2:d6:15:0b:e7:0f:73:28:56: 1e:d9:ed:74:46:5c:2f:6d:80:39:37:3a:b7:c1:87:9d:d7:2f: 2d:f8:cb:b5:25:21:4c:2a:9b:83:5e:c2:25:2a:18:8d:29:dc: 25:e4:2d:53:f7:21:78:bb:68:59:d2:70:7e:b3:eb:f3:52:99: 54:03:46:1e:d3:cf:85:ce:37:c9:7c:18:33:70:68:90:8a:8c: 30:f1:f3:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekXVk5daP2QjUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjNkMzA4YjctNzA3OS00ZGU4LWEyYmEtMjQxZDkyZWNjZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH9/oCr7E1bd0x+XVobCGax8D5lxA21WiQL8 8klrh17uAkZMyb5ivC50yGD/YEayHZS9b83IGyDLVDjnIQZzUd/ep7ozhdb98td0 +pw6Gdll1Y33MmDhKfobJg9YANdmoRmqoVoxzPseJi1VNqJ6f57B8+pBnsss5B28 xdelqLLezWNYkUG84GW7STIg8nFuCsOAXiwM39E+VZ8BtZrE2uPak907z6Mt03VM 7gOh1/MoZ1cp2ZmQD3XhsYgIAl30Pwnywp7g94o6XycvlJDWVn2OiZcWU9XjgRc8 hiojTb8dezFmS9SpoBuhSC2qF8zciiUJAggB9yBhbTmA/h/cZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDndiylINLqbF1yDI/+EfyewbL5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjJiZGIzMDItOTZmYS0z OGUxLWE2MDEtYWNiMDljOTA1NDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqQkGSix/pL8XSY8OOoFqyBQbSIlNsTz5h9i+pH4uNkElX7NVLKO9Fi MQPT/WTtYgA4Jxw/1D7zDp9oestnYzg3qfhih9lzRvpL1l3RXeuuwxZ4oc6b7TC9 uTybF/WPF1Gylq7+7OwOW7O0oQfmsQMUoOugBteov6IYbceWHxpZKHndDOROIk+D 4c3QrxaywGDvAET4LnsmFUyy62J/g4dM/NAyPvxwE2wzwNLWFQvnD3MoVh7Z7XRG XC9tgDk3OrfBh53XLy34y7UlIUwqm4NewiUqGI0p3CXkLVP3IXi7aFnScH6z6/NS mVQDRh7Tz4XON8l8GDNwaJCKjDDx87s= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:48 2026 by rpki-client