$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f89a82a5-b653-387a-b541-66e71900de5b.roa File: f89a82a5-b653-387a-b541-66e71900de5b.roa (raw, json) Hash identifier: Gz/Q4AicHmQu/gHdnFnhHal4FHdhnyr2Ey5yZYmLsiY= Subject key identifier: AE:54:D1:AA:A7:F1:02:C0:6D:0C:18:00:BB:B9:9E:11:D4:82:E3:55 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A496561A90D173E9561C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f89a82a5-b653-387a-b541-66e71900de5b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:49:65:61:a9:0d:17:3e:95:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=78af9870-5392-49fd-a8f1-90e6cbceb8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:07:eb:88:6a:26:d4:78:70:cf:cc:de:90: 5b:93:da:ee:d6:58:c3:69:f5:2b:ab:56:38:78:39: aa:2c:ce:95:2c:8d:af:bb:22:6b:de:7d:50:50:13: d3:bd:53:54:f0:86:b1:40:4b:bb:de:8e:99:1d:51: 8f:31:81:45:56:0c:38:6c:bd:9e:5f:b0:5a:07:54: 25:b3:12:d3:f6:8b:96:5f:0e:53:1e:8a:1d:6b:c2: 01:d7:f2:a2:6e:fe:be:a7:13:7a:a4:e9:6b:f6:fe: 95:12:7b:70:bc:bc:98:6f:5f:21:75:73:a3:ea:ba: 23:d8:f7:9c:b8:3a:85:22:ac:8e:e0:06:17:9f:fe: 9f:4d:7d:4c:79:0c:3e:d0:dc:c8:35:88:b7:8d:d0: 50:3e:b4:8f:df:cf:d8:69:05:43:eb:b2:01:e2:e9: 85:d3:53:ed:0b:ca:c1:90:a4:23:de:b1:9a:4d:2d: f1:a3:98:9d:e1:81:41:b4:02:56:40:48:57:b0:07: 89:8e:19:e7:0a:c7:fc:f1:a3:a1:b9:07:3d:42:64: fe:4a:27:9d:a7:1a:2f:21:b0:20:9a:84:2b:e3:ad: 5c:a4:9b:8f:ac:eb:48:52:6c:8a:35:1f:62:ea:f2: 83:20:eb:8f:f7:10:61:47:39:7b:01:34:23:3c:dd: 03:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:54:D1:AA:A7:F1:02:C0:6D:0C:18:00:BB:B9:9E:11:D4:82:E3:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f89a82a5-b653-387a-b541-66e71900de5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c5:6c:3b:dd:a9:9f:f1:c4:1c:7c:ca:53:f5:cf:85:b2:fe: be:22:3e:0c:c2:c4:00:d0:26:75:33:bc:6a:c4:6d:a9:6d:42: 08:5a:5c:90:0c:73:6a:9e:4f:10:d1:f2:65:dc:f6:1b:19:db: a3:69:f5:7a:fe:91:d7:b1:bf:82:5c:9f:b5:a8:40:02:d2:49: 2d:3b:ea:2b:3f:ff:b4:52:3f:7f:32:c4:c0:38:f4:09:5c:a6: 10:02:70:ba:5f:b2:3e:4f:40:b1:7c:d5:40:06:02:15:cd:7c: 6f:7d:af:e7:f1:67:35:2a:0b:4d:ca:92:2b:61:70:4d:f1:24: 8b:27:86:85:87:e1:38:90:1d:42:fa:21:f2:45:b6:5a:22:e3: 5c:86:b1:a1:f0:16:c8:7d:01:bb:55:e0:1f:20:27:36:ea:09: 50:ae:0a:91:40:93:0d:9c:d4:f9:10:ce:a2:20:76:11:1f:c3: 90:f1:b0:8f:16:13:57:6b:f3:57:0c:0e:b2:be:ef:bd:cc:c3: 08:eb:eb:c2:11:87:9f:a5:6c:93:52:2d:95:11:00:08:85:e5: d2:68:e0:03:c7:75:c0:3b:c6:74:96:32:9a:c6:aa:e4:1f:ab: 52:be:59:4f:53:7f:66:38:a4:94:e0:af:7a:27:05:14:1a:bc: 63:c9:87:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekllYakNFz6VYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NzhhZjk4NzAtNTM5Mi00OWZkLWE4ZjEtOTBlNmNiY2ViOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdMH64hqJtR4cM/M3pBbk9ru1ljDafUrq1Y4 eDmqLM6VLI2vuyJr3n1QUBPTvVNU8IaxQEu73o6ZHVGPMYFFVgw4bL2eX7BaB1Ql sxLT9ouWXw5THooda8IB1/Kibv6+pxN6pOlr9v6VEntwvLyYb18hdXOj6roj2Pec uDqFIqyO4AYXn/6fTX1MeQw+0NzINYi3jdBQPrSP38/YaQVD67IB4umF01PtC8rB kKQj3rGaTS3xo5id4YFBtAJWQEhXsAeJjhnnCsf88aOhuQc9QmT+SiedpxovIbAg moQr461cpJuPrOtIUmyKNR9i6vKDIOuP9xBhRzl7ATQjPN0DqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5U0aqn8QLAbQwYALu5nhHUguNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjg5YTgyYTUtYjY1My0z ODdhLWI1NDEtNjZlNzE5MDBkZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfFbDvdqZ/xxBx8ylP1z4Wy/r4iPgzCxADQJnUzvGrEbaltQghaXJAM c2qeTxDR8mXc9hsZ26Np9Xr+kdexv4Jcn7WoQALSSS076is//7RSP38yxMA49Alc phACcLpfsj5PQLF81UAGAhXNfG99r+fxZzUqC03KkithcE3xJIsnhoWH4TiQHUL6 IfJFtloi41yGsaHwFsh9AbtV4B8gJzbqCVCuCpFAkw2c1PkQzqIgdhEfw5DxsI8W E1dr81cMDrK+773Mwwjr68IRh5+lbJNSLZURAAiF5dJo4APHdcA7xnSWMprGquQf q1K+WU9Tf2Y4pJTgr3onBRQavGPJh5Q= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:38 2026 by rpki-client