$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa File: 3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa (raw, json) Hash identifier: g7M8dHUH3OQr0EZIoMNa4yp/7ZbyfnY01RMbRzG9k9g= Subject key identifier: 52:D6:1D:2C:2A:BF:3E:17:E2:E6:A4:AD:C9:46:40:80:30:19:BE:B9 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584D39CF910559A89B9DC8BC8910 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 62610 IP address blocks: 128.1.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:91:05:59:a8:9b:9d:c8:bc:89:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=3e9224ff-bc5a-4cbb-a8f2-9b019d614dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:ce:66:61:17:f3:72:7c:d0:a0:07:e5:5d: f8:8e:d6:a2:0d:2b:ce:e7:2b:be:25:74:df:7d:b2: e0:ea:5e:94:c8:50:5f:3d:e4:20:54:e5:dc:72:5e: a2:86:79:66:28:f8:a7:ec:e3:45:62:0a:85:8c:45: 6c:21:06:ba:63:c1:ca:82:f5:1a:da:51:e6:31:10: cc:42:87:10:64:e1:b8:c9:b5:93:36:54:72:87:74: a8:bc:69:e7:18:51:c3:93:b4:a7:43:57:59:1c:32: f1:0e:63:de:48:c5:8a:35:0b:66:41:9a:41:a7:68: e7:cb:57:da:d9:2c:b4:1e:d0:39:b7:74:cb:0e:0e: 0e:36:28:06:a2:1a:dc:5c:61:63:74:28:51:bf:1e: 79:aa:e9:ce:fe:1d:58:37:d8:14:96:b0:6c:5a:7d: d7:97:5d:9e:e3:76:14:8c:a0:c0:43:79:aa:ad:9f: ea:be:5e:64:70:df:56:bd:f3:9d:c8:f3:35:71:f5: e3:9a:6a:9c:57:fa:4c:ac:44:46:c9:81:72:67:9c: b5:f4:7a:cf:34:35:be:ad:86:d8:1c:2c:38:e4:d4: e9:c3:09:df:09:ec:22:25:c1:53:63:a2:0d:f0:f8: 28:e9:01:d2:c4:58:98:a5:72:fa:4c:b8:2b:e8:7d: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D6:1D:2C:2A:BF:3E:17:E2:E6:A4:AD:C9:46:40:80:30:19:BE:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:65:d8:69:d1:a5:56:f8:a6:89:34:b0:47:b1:d8:91:30:2e: 33:32:01:f6:73:c7:47:6d:93:83:10:47:5f:31:2c:bc:2c:1e: 5b:88:f5:9c:a0:ba:f5:a5:82:31:ec:bb:ac:09:cf:43:6f:56: 59:7c:94:67:bc:74:be:4b:f6:66:f2:d3:c6:25:b9:40:a1:b2: d2:60:7f:3b:06:bb:83:fd:e4:b3:ef:1d:25:16:7b:92:9b:64: e2:6d:aa:a9:81:f3:2a:58:26:54:17:c2:61:30:82:40:1d:fb: 05:d3:3f:b5:66:6b:3d:b8:7f:4e:b7:96:31:4e:40:1f:48:8d: c2:fc:bc:55:25:cc:cc:bd:45:17:79:c4:f5:71:48:33:85:ee: fb:e8:43:69:a7:88:55:ce:6a:81:43:ac:1c:a4:a2:9a:15:fb: f1:7b:50:a7:1c:dc:23:24:e0:76:40:92:1c:5f:03:b4:ff:c3: 37:44:d3:bf:fe:1d:d5:61:48:b9:9a:2c:f4:52:dc:f2:43:14: 6d:8a:14:e7:b5:f6:79:3e:f5:5e:51:16:8b:74:b1:c0:24:7a: b0:83:30:7b:eb:38:a4:47:97:50:fc:2d:79:d6:7d:2b:cb:bb: 04:fc:22:56:ae:6f:37:5c:7f:32:a1:30:6d:8c:1b:47:72:f2: 32:d2:6d:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5EFWaibnci8iRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk M2U5MjI0ZmYtYmM1YS00Y2JiLWE4ZjItOWIwMTlkNjE0ZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DXOZmEX83J80KAH5V34jtaiDSvO5yu+JXTf fbLg6l6UyFBfPeQgVOXccl6ihnlmKPin7ONFYgqFjEVsIQa6Y8HKgvUa2lHmMRDM QocQZOG4ybWTNlRyh3SovGnnGFHDk7SnQ1dZHDLxDmPeSMWKNQtmQZpBp2jny1fa 2Sy0HtA5t3TLDg4ONigGohrcXGFjdChRvx55qunO/h1YN9gUlrBsWn3Xl12e43YU jKDAQ3mqrZ/qvl5kcN9WvfOdyPM1cfXjmmqcV/pMrERGyYFyZ5y19HrPNDW+rYbY HCw45NTpwwnfCewiJcFTY6IN8Pgo6QHSxFiYpXL6TLgr6H0GaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLWHSwqvz4X4uakrclGQIAwGb65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzI0MWIwNGMtNTJmZC0z ZmYwLWFlYjgtYjg5Y2U5MjU3ZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRl2GnRpVb4pok0sEex2JEwLjMyAfZzx0dtk4MQR18xLLwsHluI9Zyg uvWlgjHsu6wJz0NvVll8lGe8dL5L9mby08YluUChstJgfzsGu4P95LPvHSUWe5Kb ZOJtqqmB8ypYJlQXwmEwgkAd+wXTP7Vmaz24f063ljFOQB9IjcL8vFUlzMy9RRd5 xPVxSDOF7vvoQ2mniFXOaoFDrBykopoV+/F7UKcc3CMk4HZAkhxfA7T/wzdE07/+ HdVhSLmaLPRS3PJDFG2KFOe19nk+9V5RFot0scAkerCDMHvrOKRHl1D8LXnWfSvL uwT8IlaubzdcfzKhMG2MG0dy8jLSbcM= -----END CERTIFICATE-----Generated at Thu Mar 26 06:21:59 2026 by rpki-client