$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/68a418f7-c02c-3b15-9da7-d471baa2eaed.roa File: 68a418f7-c02c-3b15-9da7-d471baa2eaed.roa (raw, json) Hash identifier: libPQREvzeVfmPoJAq98FN9a9G9cq2YEpMVSbN3D4dI= Subject key identifier: 5D:96:E4:F2:05:C9:65:B6:19:73:B7:7D:96:10:C7:F9:8F:35:E5:E3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3FD6E67DC72603AEE300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/68a418f7-c02c-3b15-9da7-d471baa2eaed.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3f:d6:e6:7d:c7:26:03:ae:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=99a32cd1-b593-4a09-8966-314ba47a3f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:80:fa:38:dc:50:ea:05:09:8f:42:49:a5: 19:e4:3c:72:1e:d7:d1:f0:5c:52:99:ee:7e:f8:f8: 83:7a:35:dd:e1:79:e6:59:81:04:d4:62:65:c1:6b: ec:8b:ff:58:ad:ed:1e:4c:ef:91:fe:08:a7:e7:f1: bd:ca:1e:95:a1:6b:c4:cd:fb:cc:df:43:60:ef:7a: 28:78:36:cb:2c:3e:a8:6a:4e:c4:a9:be:26:99:97: 4a:db:bb:69:b3:c2:25:1e:70:3d:06:4f:ad:98:d2: d0:83:f0:b6:9f:d4:90:36:18:ab:f4:39:3c:30:77: 12:48:d0:5e:cd:8d:77:8a:2d:64:ad:f5:8d:46:60: ff:cc:74:92:65:af:c4:61:2b:29:d0:a4:a2:23:f5: c6:e2:da:b7:85:af:2f:d6:52:f7:29:cf:a4:7d:76: b2:2f:72:4a:4a:ae:64:53:19:78:5d:96:93:6c:03: 4f:62:dd:76:64:61:50:ca:83:50:8b:e8:26:ad:bc: 34:e2:46:a4:e4:e2:98:51:9d:ed:48:f3:c8:34:48: fc:00:01:47:03:34:2b:0e:3a:ed:3a:e2:89:b0:b4: 55:50:b3:e1:1a:83:9c:4c:45:a2:06:df:72:d8:1c: 21:14:7e:7d:8b:8c:4f:53:65:6e:19:2e:d3:f9:1f: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:96:E4:F2:05:C9:65:B6:19:73:B7:7D:96:10:C7:F9:8F:35:E5:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/68a418f7-c02c-3b15-9da7-d471baa2eaed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:81:1c:67:88:99:6b:2f:0a:78:88:7b:65:16:5a:de:f1:a0: dd:23:af:c1:af:1b:72:41:c7:f3:d6:5f:fd:de:67:a8:06:79: 74:64:ea:37:db:03:04:53:8b:76:15:84:6c:2d:bd:4a:9e:27: 59:09:c4:7d:1a:cf:c0:0d:54:1a:66:da:e6:36:80:92:28:3b: 7c:6f:9c:91:7a:c0:d1:66:cc:45:4a:da:b3:da:d0:44:81:a5: c1:f3:f6:fa:fc:8e:45:24:cf:99:af:f0:b6:75:03:8f:1a:ae: 97:8e:c9:6a:45:da:dd:b0:e8:60:3e:cf:d5:49:2a:80:88:4e: 9c:2a:ae:ad:87:b5:44:34:2b:88:79:8c:30:1c:36:db:3c:d4: 07:40:80:00:c9:d7:3c:70:2c:2a:c7:5c:8f:0b:47:5d:ed:8d: f5:36:a2:59:35:4a:7f:80:83:82:98:cf:5e:e9:44:2b:97:b2: f0:48:3e:0f:b9:4e:3f:ed:a7:fe:1f:4c:27:e5:0d:0f:09:e3: 4b:75:03:8b:7d:43:ec:0d:ce:be:94:68:49:02:34:3a:16:f5: 3c:5e:e4:53:45:87:31:9a:49:b8:b0:74:57:a2:49:e6:1e:31: f4:f6:a1:cf:b5:f0:f7:5d:2f:d1:a8:f4:32:a8:d2:ef:ba:b6: 47:a6:fd:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jej/W5n3HJgOu4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTlhMzJjZDEtYjU5My00YTA5LTg5NjYtMzE0YmE0N2EzZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt+A+jjcUOoFCY9CSaUZ5DxyHtfR8FxSme5+ +PiDejXd4XnmWYEE1GJlwWvsi/9Yre0eTO+R/gin5/G9yh6VoWvEzfvM30Ng73oo eDbLLD6oak7Eqb4mmZdK27tps8IlHnA9Bk+tmNLQg/C2n9SQNhir9Dk8MHcSSNBe zY13ii1krfWNRmD/zHSSZa/EYSsp0KSiI/XG4tq3ha8v1lL3Kc+kfXayL3JKSq5k Uxl4XZaTbANPYt12ZGFQyoNQi+gmrbw04kak5OKYUZ3tSPPINEj8AAFHAzQrDjrt OuKJsLRVULPhGoOcTEWiBt9y2BwhFH59i4xPU2VuGS7T+R/cZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2W5PIFyWW2GXO3fZYQx/mPNeXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjhhNDE4ZjctYzAyYy0z YjE1LTlkYTctZDQ3MWJhYTJlYWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKBHGeImWsvCniIe2UWWt7xoN0jr8GvG3JBx/PWX/3eZ6gGeXRk6jfb AwRTi3YVhGwtvUqeJ1kJxH0az8ANVBpm2uY2gJIoO3xvnJF6wNFmzEVK2rPa0ESB pcHz9vr8jkUkz5mv8LZ1A48arpeOyWpF2t2w6GA+z9VJKoCITpwqrq2HtUQ0K4h5 jDAcNts81AdAgADJ1zxwLCrHXI8LR13tjfU2olk1Sn+Ag4KYz17pRCuXsvBIPg+5 Tj/tp/4fTCflDQ8J40t1A4t9Q+wNzr6UaEkCNDoW9Txe5FNFhzGaSbiwdFeiSeYe MfT2oc+18PddL9Go9DKo0u+6tkem/e0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:11 2026 by rpki-client