$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd3864df-24b5-341b-a471-671ea4c815ca.roa File: dd3864df-24b5-341b-a471-671ea4c815ca.roa (raw, json) Hash identifier: aKg4b6RSKnNcZvhckSHeUb35jlNslxhG+ld0UrxLEpw= Subject key identifier: 34:14:88:99:1E:9F:29:B2:AB:A5:4B:19:2C:E3:9B:53:5A:39:C5:24 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A2ABF8C7662A29C142300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd3864df-24b5-341b-a471-671ea4c815ca.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2a:bf:8c:76:62:a2:9c:14:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=2def6250-4fe9-4e54-9ec9-345b45157f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:09:f5:b7:c7:5d:b6:28:34:cf:77:3d:5d: 86:c3:14:72:6f:34:4c:a4:21:d2:86:ce:77:7e:08: bc:8a:d2:0a:aa:89:ab:53:47:72:23:6a:f7:95:00: e8:7c:ad:8e:83:56:4d:9e:ff:d6:cd:bb:87:5f:fd: ff:ca:4b:c8:ee:7a:42:be:b5:26:63:98:89:d5:ee: 99:6b:7e:3a:65:cd:e6:07:af:d3:94:6d:af:bf:c1: 9d:a7:77:09:e0:ac:2c:1b:46:86:4b:d5:d5:ea:d2: ed:21:e6:e5:fb:f9:a5:11:9d:d9:99:45:be:3e:99: c9:23:f0:71:36:77:d1:8f:97:d4:7e:1b:3b:fc:c7: f7:6f:66:57:96:c9:69:59:71:52:56:a1:a4:05:c0: 8a:2c:f5:f2:66:16:69:f7:a1:33:15:3c:7a:e9:f0: ca:24:09:73:ca:c0:c2:a3:7e:e5:6e:72:95:b0:a1: b1:b8:40:e6:10:8d:0c:4e:80:78:80:a0:2d:fa:e7: b4:1c:e8:32:0e:6c:2e:c3:a4:2f:31:06:2c:9d:76: cf:ce:7d:d9:f3:3e:25:bc:9a:80:e8:a3:f6:d9:57: 97:e2:51:71:d9:d4:0b:ee:a2:60:e7:ef:05:22:4a: e5:cd:c3:70:13:29:31:66:16:2c:9e:52:9c:6e:fa: 5f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:14:88:99:1E:9F:29:B2:AB:A5:4B:19:2C:E3:9B:53:5A:39:C5:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd3864df-24b5-341b-a471-671ea4c815ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b0:87:78:a6:2e:e5:fc:99:14:f2:10:50:dc:50:ee:91:a4: 66:28:66:c6:46:5a:0c:fa:be:3b:84:f5:46:c2:41:47:15:8b: 95:7f:fd:57:3e:56:69:9a:65:11:fe:95:af:33:e2:a5:a9:04: dc:3d:a2:bd:a2:08:27:29:7e:ce:df:e0:99:c5:61:ee:6b:cf: 8e:00:b6:b7:bd:fc:28:d9:88:42:7f:b8:93:71:17:e1:9d:e0: 19:a9:61:e1:76:13:53:11:26:c4:4d:c2:01:12:d3:8e:9a:b2: 90:ff:8b:7b:07:cd:e2:fd:79:fd:03:2f:ed:28:7f:b9:1d:33: ae:0b:d5:84:e1:66:b3:d4:3f:2d:ba:b3:f4:4a:5f:cf:e3:8c: 5d:f0:13:e1:bf:d1:1d:e2:52:c5:d1:99:3f:66:73:e9:13:50: 90:57:e3:04:7e:fa:ad:86:14:e4:11:d3:0d:0b:8f:29:c5:3e: 65:dc:19:ff:61:13:87:79:dd:e7:91:a8:5f:5c:0a:89:dc:25: 0d:39:2d:26:88:c9:94:39:78:96:82:97:9e:a7:67:f5:28:07: e9:c7:df:75:5c:25:fe:be:15:09:3f:b9:e4:3b:01:a1:71:c8: c4:12:2f:3a:8a:bc:c9:a5:45:1e:56:61:a9:4c:c8:89:e6:f2: e8:e1:ac:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiq/jHZiopwUIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MmRlZjYyNTAtNGZlOS00ZTU0LTllYzktMzQ1YjQ1MTU3ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27cJ9bfHXbYoNM93PV2GwxRybzRMpCHShs53 fgi8itIKqomrU0dyI2r3lQDofK2Og1ZNnv/WzbuHX/3/ykvI7npCvrUmY5iJ1e6Z a346Zc3mB6/TlG2vv8Gdp3cJ4KwsG0aGS9XV6tLtIebl+/mlEZ3ZmUW+PpnJI/Bx NnfRj5fUfhs7/Mf3b2ZXlslpWXFSVqGkBcCKLPXyZhZp96EzFTx66fDKJAlzysDC o37lbnKVsKGxuEDmEI0MToB4gKAt+ue0HOgyDmwuw6QvMQYsnXbPzn3Z8z4lvJqA 6KP22VeX4lFx2dQL7qJg5+8FIkrlzcNwEykxZhYsnlKcbvpfDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQUiJkenymyq6VLGSzjm1NaOcUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGQzODY0ZGYtMjRiNS0z NDFiLWE0NzEtNjcxZWE0YzgxNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmwh3imLuX8mRTyEFDcUO6RpGYoZsZGWgz6vjuE9UbCQUcVi5V//Vc+ VmmaZRH+la8z4qWpBNw9or2iCCcpfs7f4JnFYe5rz44Atre9/CjZiEJ/uJNxF+Gd 4BmpYeF2E1MRJsRNwgES046aspD/i3sHzeL9ef0DL+0of7kdM64L1YThZrPUPy26 s/RKX8/jjF3wE+G/0R3iUsXRmT9mc+kTUJBX4wR++q2GFOQR0w0LjynFPmXcGf9h E4d53eeRqF9cConcJQ05LSaIyZQ5eJaCl56nZ/UoB+nH33VcJf6+FQk/ueQ7AaFx yMQSLzqKvMmlRR5WYalMyInm8ujhrA4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:02 2026 by rpki-client