$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fb409d0a-9655-316c-b3cb-34d6c7603bcc.roa File: fb409d0a-9655-316c-b3cb-34d6c7603bcc.roa (raw, json) Hash identifier: j8NZYZ4BHw7Kanfx1s6GRscBc5+3V5aVf3gwNs9Rzb0= Subject key identifier: F9:8F:C8:58:C9:90:EC:73:00:B2:1A:30:61:A4:BA:D4:50:62:1F:A8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1D6ED5747FDE68AE0800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fb409d0a-9655-316c-b3cb-34d6c7603bcc.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1d:6e:d5:74:7f:de:68:ae:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=154dcd07-7eba-4af7-8774-c64e7daebcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:70:8e:dc:62:aa:9e:24:2d:45:a9:83:55: fb:d7:cb:b4:e8:10:17:bb:d0:62:80:aa:44:40:98: 88:33:33:ea:5c:66:24:7d:11:c7:bf:ee:7a:3a:71: 34:a2:d3:10:27:58:c4:48:3c:97:0d:93:c0:bd:b9: ca:ae:23:f0:29:11:52:5c:3f:0d:d7:e5:8c:3f:11: c6:f9:55:d1:e7:27:4a:ae:4c:66:d5:9b:a0:46:f8: c2:8b:a4:4b:cd:42:b1:c1:95:77:49:08:b0:a5:d7: 09:87:69:12:05:5c:d3:25:f4:29:4e:a1:c9:71:d7: 47:cf:b6:a2:1c:40:83:d2:a0:6b:15:b7:4f:5f:7a: 7d:7b:db:e8:bb:62:7d:e1:01:b2:22:83:50:36:aa: 1b:2c:9c:c0:60:14:9b:de:7b:c5:0d:b8:90:bc:55: c8:5d:4a:3d:38:e5:5b:d6:a4:46:c1:0b:37:9a:0c: 32:a8:36:4a:90:e9:45:f5:ed:4d:0d:80:05:41:07: f9:0d:1b:73:7c:27:ba:2c:90:51:88:27:50:31:9b: 1c:e9:7e:66:20:04:58:79:07:68:2e:cd:dc:50:3f: 9e:14:22:b9:e6:f7:af:e5:ae:9d:83:f3:7c:ea:6a: 58:1a:18:40:18:f8:59:0b:98:88:84:95:91:fe:65: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8F:C8:58:C9:90:EC:73:00:B2:1A:30:61:A4:BA:D4:50:62:1F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fb409d0a-9655-316c-b3cb-34d6c7603bcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d9:89:5c:dc:6c:18:55:e5:9a:a4:e9:dd:79:b3:2e:45:60: 76:f6:b3:13:44:b4:d3:e8:9b:58:df:10:a0:f2:a7:7a:84:f4: 6b:bf:2e:b7:77:fa:49:87:68:11:6b:fe:9c:45:30:a7:cc:ec: 22:12:ae:f7:a1:b8:fd:80:28:01:97:4a:80:ab:40:25:0d:22: 2c:66:49:46:66:cf:35:63:b9:40:f8:f8:b3:42:dd:b2:b8:32: 9f:c1:77:a4:a1:61:91:df:93:cd:24:3e:1d:82:97:19:eb:d8: 8f:d4:e4:a7:4f:2e:29:f5:9e:3c:92:43:d1:bf:ba:50:8e:d4: 8d:9b:cc:36:85:e4:df:df:bb:ad:66:8d:8e:25:f0:74:8c:d2: 8a:cb:47:32:bd:6b:36:3d:e2:7b:fa:df:36:5f:58:8e:3f:9a: 3d:a4:c7:0d:dc:14:10:8e:1b:63:27:d6:ad:77:f3:c6:25:df: de:e4:17:ac:bd:27:a8:b3:c5:2c:ef:2d:71:92:ba:a3:05:24: df:b1:f2:7e:1a:b5:9d:b3:9e:91:a9:dd:e6:8c:27:91:58:77: a8:c5:26:7a:3a:7e:90:8a:45:9c:a3:15:27:fc:81:ad:dc:ca: 1c:35:ca:0e:4c:2d:d0:d6:2e:c8:bd:42:6d:5e:29:5f:3c:e2: 9a:f9:5a:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeh1u1XR/3miuCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTU0ZGNkMDctN2ViYS00YWY3LTg3NzQtYzY0ZTdkYWViY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA5wjtxiqp4kLUWpg1X718u06BAXu9BigKpE QJiIMzPqXGYkfRHHv+56OnE0otMQJ1jESDyXDZPAvbnKriPwKRFSXD8N1+WMPxHG +VXR5ydKrkxm1ZugRvjCi6RLzUKxwZV3SQiwpdcJh2kSBVzTJfQpTqHJcddHz7ai HECD0qBrFbdPX3p9e9vou2J94QGyIoNQNqobLJzAYBSb3nvFDbiQvFXIXUo9OOVb 1qRGwQs3mgwyqDZKkOlF9e1NDYAFQQf5DRtzfCe6LJBRiCdQMZsc6X5mIARYeQdo Ls3cUD+eFCK55vev5a6dg/N86mpYGhhAGPhZC5iIhJWR/mXfkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmPyFjJkOxzALIaMGGkutRQYh+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmI0MDlkMGEtOTY1NS0z MTZjLWIzY2ItMzRkNmM3NjAzYmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDZiVzcbBhV5Zqk6d15sy5FYHb2sxNEtNPom1jfEKDyp3qE9Gu/Lrd3 +kmHaBFr/pxFMKfM7CISrvehuP2AKAGXSoCrQCUNIixmSUZmzzVjuUD4+LNC3bK4 Mp/Bd6ShYZHfk80kPh2Clxnr2I/U5KdPLin1njySQ9G/ulCO1I2bzDaF5N/fu61m jY4l8HSM0orLRzK9azY94nv63zZfWI4/mj2kxw3cFBCOG2Mn1q1388Yl397kF6y9 J6izxSzvLXGSuqMFJN+x8n4atZ2znpGp3eaMJ5FYd6jFJno6fpCKRZyjFSf8ga3c yhw1yg5MLdDWLsi9Qm1eKV884pr5Wno= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:47 2026 by rpki-client