$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa File: f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa (raw, json) Hash identifier: Wt1QeC/7kHXfkm+joFav+hBB+6M4ggP7P9JidoKMWjE= Subject key identifier: C0:94:1F:30:1C:E8:52:35:FF:F7:B2:F1:49:32:9D:5D:E8:4A:93:E2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A05D37D679FF85F82CF00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:05:d3:7d:67:9f:f8:5f:82:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=fce0abf6-780e-46f5-84bd-ce77160e5b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:61:52:3f:f1:c1:d6:e8:30:f2:77:0a:48: 14:01:2b:5a:1f:99:64:db:1a:36:ac:dd:1f:9e:62: f1:51:65:9f:1b:3a:7c:0e:c4:e0:4f:01:12:8b:88: 50:9b:9a:0b:6b:51:09:20:0a:c9:02:a2:c3:25:3d: c3:86:08:f4:db:55:88:3d:5a:c9:81:bd:ea:50:59: 67:d6:14:25:ed:89:78:b4:73:35:f9:e5:7d:f6:45: 55:f4:95:2f:99:49:b6:a0:29:6f:9a:2d:b5:7f:0e: b6:79:3b:ea:ea:09:bd:3d:d9:0d:c7:90:b6:27:be: 49:14:fc:59:a8:0b:52:e7:55:72:f5:41:e4:7d:ce: a0:83:43:3e:e6:11:69:e9:4a:1a:d5:3c:95:90:e2: fe:48:30:1b:0b:89:7c:f2:c2:eb:0b:50:24:d8:b4: ab:26:94:5f:d4:02:e5:68:f4:11:54:f8:3e:4b:74: 8f:ac:c3:10:4c:c3:ec:b0:4b:3c:78:f7:1a:64:42: bf:e6:4a:9d:da:f1:f1:d7:5f:57:23:6e:18:2a:8c: 13:b9:4c:77:18:69:9f:ce:c8:16:09:08:56:7b:7c: 9d:01:83:e7:18:98:4a:5c:d8:27:90:a4:89:12:bb: d7:46:2e:9a:6f:f5:be:bd:9b:c1:3b:6d:e1:72:64: 48:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:94:1F:30:1C:E8:52:35:FF:F7:B2:F1:49:32:9D:5D:E8:4A:93:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f74cf217-1e27-3c88-a6d2-f743b7bbff1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:52:5c:c5:f4:67:89:ac:e9:5e:18:bc:3c:a6:5f:80:b2:45: 51:cb:98:52:db:76:11:25:b1:ce:3e:a4:b4:d5:c3:ba:bc:3f: 50:bb:17:b2:dd:68:42:39:84:27:fc:54:19:7c:9a:54:df:35: 74:eb:c9:d4:2e:ab:3f:b8:2e:13:55:0d:2e:70:d1:89:66:5c: 1b:ab:08:d7:20:e8:1d:38:b2:97:69:e5:fe:69:d6:b8:23:4b: f0:23:fd:03:6f:81:50:94:3c:22:6c:1a:22:40:e1:68:cd:f1: 92:18:10:10:ac:d1:8e:73:2d:fb:aa:94:16:59:b7:86:74:52: f7:ad:30:98:98:b4:0d:0b:3c:78:6f:07:ac:f1:07:23:e2:30: 23:f4:ed:31:12:95:ef:a0:77:27:eb:78:00:5e:66:c9:62:b8: 09:13:31:93:0d:8b:6f:b3:40:b4:ff:36:95:d9:df:3c:57:ff: b0:b8:7f:bd:5c:15:d7:47:03:bc:97:e1:6c:20:81:0a:d0:30: 57:87:56:cb:29:f5:e9:8b:14:82:cd:32:b9:6d:49:e8:aa:75: ff:d0:da:9c:bb:05:9e:a6:d6:ab:e0:03:b7:24:4e:fa:2a:01: 13:8b:cd:be:b2:ec:51:0b:68:0c:f4:6e:0d:55:b6:ef:d6:f1: 97:64:bf:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegXTfWef+F+CzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZmNlMGFiZjYtNzgwZS00NmY1LTg0YmQtY2U3NzE2MGU1YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4thUj/xwdboMPJ3CkgUAStaH5lk2xo2rN0f nmLxUWWfGzp8DsTgTwESi4hQm5oLa1EJIArJAqLDJT3Dhgj021WIPVrJgb3qUFln 1hQl7Yl4tHM1+eV99kVV9JUvmUm2oClvmi21fw62eTvq6gm9PdkNx5C2J75JFPxZ qAtS51Vy9UHkfc6gg0M+5hFp6Uoa1TyVkOL+SDAbC4l88sLrC1Ak2LSrJpRf1ALl aPQRVPg+S3SPrMMQTMPssEs8ePcaZEK/5kqd2vHx119XI24YKowTuUx3GGmfzsgW CQhWe3ydAYPnGJhKXNgnkKSJErvXRi6ab/W+vZvBO23hcmRIwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCUHzAc6FI1//ey8UkynV3oSpPiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjc0Y2YyMTctMWUyNy0z Yzg4LWE2ZDItZjc0M2I3YmJmZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJSXMX0Z4ms6V4YvDymX4CyRVHLmFLbdhElsc4+pLTVw7q8P1C7F7Ld aEI5hCf8VBl8mlTfNXTrydQuqz+4LhNVDS5w0YlmXBurCNcg6B04spdp5f5p1rgj S/Aj/QNvgVCUPCJsGiJA4WjN8ZIYEBCs0Y5zLfuqlBZZt4Z0UvetMJiYtA0LPHhv B6zxByPiMCP07TESle+gdyfreABeZsliuAkTMZMNi2+zQLT/NpXZ3zxX/7C4f71c FddHA7yX4WwggQrQMFeHVssp9emLFILNMrltSeiqdf/Q2py7BZ6m1qvgA7ckTvoq AROLzb6y7FELaAz0bg1Vtu/W8Zdkvw8= -----END CERTIFICATE-----Generated at Thu Mar 26 14:57:57 2026 by rpki-client