$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa File: 31d6b714-fc08-30e0-80b0-f05d486bd52a.roa (raw, json) Hash identifier: croPcnYkCC3//O65/iq17qBkjU/dJjHa3yPQ5WgmCsQ= Subject key identifier: FF:75:CD:7B:94:0A:53:1D:91:72:A0:73:D7:9D:D8:3D:31:9A:A0:CA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4BD78047CDB9A04CFF40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4b:d7:80:47:cd:b9:a0:4c:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=422249f1-043c-4491-a6b8-40d3e030f364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:3b:34:c4:6d:61:47:c5:60:44:58:ef:31: 6f:e3:d0:c2:38:53:aa:e6:b4:7e:ea:2f:57:f7:8f: 86:fe:5f:c7:4e:e1:7a:e3:95:83:e4:43:97:93:1a: 46:6d:cc:09:c3:81:ba:78:4f:69:98:c7:7d:b4:e7: 49:5c:0c:af:bd:dd:3c:9a:c4:8f:1a:02:fe:ce:b3: 3c:a9:64:32:d9:d5:a4:db:82:ee:7b:0b:c8:e2:ea: c0:53:d3:ee:ec:b9:a2:f6:05:18:88:83:ad:d1:97: 94:85:ce:13:e9:bd:66:90:e1:d6:79:22:41:c4:b2: c9:83:62:d4:1c:2c:a1:8a:14:2c:c1:c5:3b:df:99: 5c:fb:5c:35:6c:e4:cf:c7:d3:fc:e9:d3:bc:35:6e: f2:b7:66:e5:a6:0b:98:91:7f:1b:39:6e:00:69:b1: 94:a2:8c:32:94:08:75:6d:40:3e:96:50:62:b8:6e: 31:81:d6:70:c4:71:e5:8a:f0:2b:66:df:0b:c2:40: e8:24:90:35:74:b9:23:d4:51:b6:4c:32:51:b7:a5: 60:ab:0d:57:a3:92:0c:84:82:7f:87:77:9d:ba:d7: d6:6f:08:68:42:62:1e:2b:b3:ac:9f:b3:47:a5:38: 32:99:bb:5e:29:8a:83:ef:fa:3d:e8:8e:5b:7d:94: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:75:CD:7B:94:0A:53:1D:91:72:A0:73:D7:9D:D8:3D:31:9A:A0:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31d6b714-fc08-30e0-80b0-f05d486bd52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:36:c8:56:17:8e:2e:36:0f:fc:a4:5f:82:92:a2:10:d2:bd: f2:66:41:9e:cd:f0:6f:c4:ca:26:ad:e1:69:bd:ac:ea:63:32: f8:53:05:08:f4:5e:17:de:67:66:ee:51:57:57:44:00:58:17: 15:e7:b8:f9:69:61:f1:d1:25:89:69:c6:63:6b:6f:d1:11:88: d2:e7:2f:41:32:45:a1:a4:ed:22:99:7e:f8:8b:d6:70:25:62: 39:85:77:20:c6:d1:4e:29:fd:ee:ea:57:cb:8a:52:95:51:7b: 7e:b8:b0:13:33:ae:6e:29:c3:e5:2a:12:2a:0b:05:5b:49:4a: 6e:6d:6b:96:0e:88:b2:8e:47:98:1a:ef:de:3d:2d:ba:f5:71: 95:2b:93:94:d0:7d:29:38:af:44:35:7d:63:6a:ed:40:48:a5: ae:7e:a3:00:22:2e:11:d1:fe:95:d1:40:7c:43:b2:f3:c0:e2: f6:46:ac:18:4e:76:bd:d6:4c:6f:34:43:14:7f:40:48:cc:be: 9f:c4:d7:d3:5d:28:8c:0f:a0:06:99:33:b8:ef:16:a2:9c:81: cb:6b:c0:aa:9c:85:e9:82:e2:5e:fc:53:e4:ab:51:d0:29:64: 69:8b:7a:81:5a:1a:d3:4d:68:fb:0c:26:c5:7e:21:5b:94:58: bf:88:5c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekvXgEfNuaBM/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDIyMjQ5ZjEtMDQzYy00NDkxLWE2YjgtNDBkM2UwMzBmMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM87NMRtYUfFYERY7zFv49DCOFOq5rR+6i9X 94+G/l/HTuF645WD5EOXkxpGbcwJw4G6eE9pmMd9tOdJXAyvvd08msSPGgL+zrM8 qWQy2dWk24LuewvI4urAU9Pu7Lmi9gUYiIOt0ZeUhc4T6b1mkOHWeSJBxLLJg2LU HCyhihQswcU735lc+1w1bOTPx9P86dO8NW7yt2blpguYkX8bOW4AabGUoowylAh1 bUA+llBiuG4xgdZwxHHlivArZt8LwkDoJJA1dLkj1FG2TDJRt6Vgqw1Xo5IMhIJ/ h3edutfWbwhoQmIeK7Osn7NHpTgymbteKYqD7/o96I5bfZSFCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP91zXuUClMdkXKgc9ed2D0xmqDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzFkNmI3MTQtZmMwOC0z MGUwLTgwYjAtZjA1ZDQ4NmJkNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg2yFYXji42D/ykX4KSohDSvfJmQZ7N8G/Eyiat4Wm9rOpjMvhTBQj0 XhfeZ2buUVdXRABYFxXnuPlpYfHRJYlpxmNrb9ERiNLnL0EyRaGk7SKZfviL1nAl YjmFdyDG0U4p/e7qV8uKUpVRe364sBMzrm4pw+UqEioLBVtJSm5ta5YOiLKOR5ga 7949Lbr1cZUrk5TQfSk4r0Q1fWNq7UBIpa5+owAiLhHR/pXRQHxDsvPA4vZGrBhO dr3WTG80QxR/QEjMvp/E19NdKIwPoAaZM7jvFqKcgctrwKqchemC4l78U+SrUdAp ZGmLeoFaGtNNaPsMJsV+IVuUWL+IXBg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:35:03 2026 by rpki-client