$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa File: f814eaa4-d9f2-3117-939f-565eea6ef078.roa (raw, json) Hash identifier: zKvv5HcBTB15WMLTEn5kff+6303ynWkfnmJ3Xzmi0gw= Subject key identifier: 5A:B3:B3:71:2E:07:DA:DE:B7:CF:15:5B:71:AC:27:A7:8D:EC:6A:7F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A45C6F3CCA378AE84D700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:45:c6:f3:cc:a3:78:ae:84:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6b6e082a-66f4-4d3b-8882-a10634b786e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ce:ba:53:0d:c5:10:65:0e:c5:b9:94:88:d2: fd:35:09:0d:a4:7c:d9:34:ed:0f:0a:76:ce:6b:f4: e1:41:4b:b6:7f:09:ae:b3:a3:f3:d9:74:24:ce:59: 7f:2c:08:15:24:a1:4d:f5:81:da:89:19:0b:00:31: 5b:7a:20:53:81:7c:b0:d1:92:be:32:8d:58:12:2f: 65:16:3e:7f:b0:2a:42:00:18:3f:bb:8e:3e:1e:dc: f8:5f:97:45:71:33:fc:d5:97:e0:2b:cd:69:69:52: ea:51:5a:59:28:ab:56:a8:62:49:ce:1c:42:94:b1: 2c:3a:c1:f5:fe:77:29:fb:e0:58:20:9d:72:64:06: 34:c7:fd:12:78:a4:3f:38:be:e4:d0:63:6b:96:6c: 28:65:25:00:4d:c3:4c:be:1a:87:e6:3a:6e:7c:5f: 18:4d:33:62:26:7f:6b:93:2d:fb:e5:38:b6:e8:c6: 87:ef:0f:fb:6d:46:1f:f9:fe:55:ca:e8:db:85:65: 84:b2:29:c8:b9:e9:01:6d:d7:bd:25:47:a7:f8:b4: 96:ac:6c:d2:de:43:71:de:3b:1c:73:8a:da:97:91: 09:ca:30:14:12:5b:64:12:71:8a:78:53:08:72:c1: 19:73:90:e8:5d:bc:10:92:ca:03:8b:26:5a:cc:00: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B3:B3:71:2E:07:DA:DE:B7:CF:15:5B:71:AC:27:A7:8D:EC:6A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f814eaa4-d9f2-3117-939f-565eea6ef078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:b9:9b:a5:99:69:2c:2a:47:3c:80:b1:d9:6b:d5:40:d5:f0: e2:8f:9b:d5:d1:f1:a2:24:f1:00:7d:78:a2:38:d2:9b:59:8a: 8b:4b:6c:f5:2f:1c:6d:ec:03:44:65:39:4e:53:a5:53:82:c6: bd:54:57:76:e3:11:81:4c:ca:15:95:2f:44:c2:6f:3c:6f:06: 69:31:0e:3b:e7:32:35:41:57:9b:bb:c4:fb:2f:4c:54:56:37: c4:2d:c6:8e:0c:a4:74:b8:17:f1:7a:f4:42:c8:d3:9b:5e:15: 70:61:ce:cd:38:86:c2:17:c1:74:c0:e9:d6:07:b4:cd:4f:f8: 7e:b0:3f:1a:d5:21:23:0d:0b:89:41:6e:de:44:48:05:09:68: d0:d9:29:d0:45:2c:fe:15:5f:cc:2b:e0:26:7b:cd:7e:f0:b0: e6:96:47:12:f8:64:c1:e0:79:c8:36:17:bc:1a:e2:7c:ee:a3: ea:16:28:5a:2a:3b:76:17:d8:a1:d6:d7:be:1f:9c:05:ad:e8: a6:e2:6a:69:27:f2:dd:71:8d:0a:1a:32:1c:47:50:3a:06:b6: 64:7e:0f:2a:1c:b2:af:41:7a:96:07:77:4b:11:78:b1:6e:a6: 63:1c:1b:b5:37:f0:33:84:13:b8:34:6e:c4:bc:21:33:f4:fe: 08:ff:24:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekXG88yjeK6E1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmI2ZTA4MmEtNjZmNC00ZDNiLTg4ODItYTEwNjM0Yjc4NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis66Uw3FEGUOxbmUiNL9NQkNpHzZNO0PCnbO a/ThQUu2fwmus6Pz2XQkzll/LAgVJKFN9YHaiRkLADFbeiBTgXyw0ZK+Mo1YEi9l Fj5/sCpCABg/u44+Htz4X5dFcTP81ZfgK81paVLqUVpZKKtWqGJJzhxClLEsOsH1 /ncp++BYIJ1yZAY0x/0SeKQ/OL7k0GNrlmwoZSUATcNMvhqH5jpufF8YTTNiJn9r ky375Ti26MaH7w/7bUYf+f5VyujbhWWEsinIuekBbde9JUen+LSWrGzS3kNx3jsc c4ral5EJyjAUEltkEnGKeFMIcsEZc5DoXbwQksoDiyZazADdtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqzs3EuB9ret88VW3GsJ6eN7Gp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjgxNGVhYTQtZDlmMi0z MTE3LTkzOWYtNTY1ZWVhNmVmMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKi5m6WZaSwqRzyAsdlr1UDV8OKPm9XR8aIk8QB9eKI40ptZiotLbPUv HG3sA0RlOU5TpVOCxr1UV3bjEYFMyhWVL0TCbzxvBmkxDjvnMjVBV5u7xPsvTFRW N8Qtxo4MpHS4F/F69ELI05teFXBhzs04hsIXwXTA6dYHtM1P+H6wPxrVISMNC4lB bt5ESAUJaNDZKdBFLP4VX8wr4CZ7zX7wsOaWRxL4ZMHgecg2F7wa4nzuo+oWKFoq O3YX2KHW174fnAWt6Kbiamkn8t1xjQoaMhxHUDoGtmR+Dyocsq9BepYHd0sReLFu pmMcG7U38DOEE7g0bsS8ITP0/gj/JBM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:52 2026 by rpki-client