$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa File: ddc8d858-035c-3840-a15e-407ffbe6818e.roa (raw, json) Hash identifier: DCNKLxVYfu+73T3FvjuMheQrTjJRiO5ofdxnR0Q+mWw= Subject key identifier: 58:59:C7:D8:DD:87:2D:E6:BE:74:20:41:7C:DA:43:5E:F9:58:EA:2E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A48AA5AAD7F404BF50400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:48:aa:5a:ad:7f:40:4b:f5:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f10d7204-6f32-4bb5-ab31-14c85e1c2db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b5:34:ab:5e:0e:44:b4:aa:74:44:7e:0b:a7: 2e:cf:c8:00:cc:74:5e:77:a2:ee:f7:92:05:6f:e8: 9b:a2:32:1a:04:22:23:93:71:9f:ba:de:ae:ea:d4: 7c:c8:0b:20:65:fa:dd:e0:f5:67:79:10:0e:82:5e: 0e:ee:a6:35:10:8d:8c:73:0e:e7:77:54:62:cc:e2: ec:09:c0:12:fb:8e:ed:9f:92:fe:e6:41:4a:ce:9c: b5:59:5c:ef:a5:e1:88:f8:f9:4a:3b:46:9d:96:64: d2:e7:09:c9:ad:af:4f:41:ec:cb:b5:ae:ea:2c:ef: fe:a7:00:07:77:e7:49:ee:93:d8:b6:49:1f:2b:c8: a7:f9:58:d4:15:23:00:b2:e0:14:02:c5:94:54:d6: 83:14:d2:37:43:e6:95:5b:dc:3d:35:04:45:6b:cc: 2c:ba:16:e5:1e:f2:af:b5:3b:20:93:22:ca:6d:66: 2f:7b:8f:60:e9:e9:70:04:ed:2c:d3:d6:55:74:26: 70:fe:16:4c:8b:3c:84:a5:c7:92:24:4b:4b:dc:15: ff:6b:0f:71:71:d9:5f:d1:cd:d1:dc:84:9d:b6:3c: 07:95:4b:1c:d4:aa:1b:29:f8:90:61:85:a9:62:19: 59:5a:85:47:85:f5:7e:fb:9e:a0:11:26:90:ee:fe: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:59:C7:D8:DD:87:2D:E6:BE:74:20:41:7C:DA:43:5E:F9:58:EA:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddc8d858-035c-3840-a15e-407ffbe6818e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:10:88:78:11:b7:c3:b5:1f:ac:00:7b:71:42:09:78:90:70: a9:44:cd:f5:b9:97:b2:bd:57:33:69:5b:78:94:20:4d:df:47: 98:90:4f:8e:de:38:48:2c:fe:59:93:52:ea:c3:21:14:81:44: 7e:01:93:8a:d5:9b:25:52:05:33:43:33:82:a0:8e:3f:3c:2d: 69:7b:1d:01:a5:da:f6:7c:e0:bc:61:af:e4:71:9c:b6:f7:1e: fd:df:95:cd:59:8c:31:0c:14:b0:6e:f2:9d:bf:0b:04:41:c4: b7:08:55:2d:ac:57:81:37:c7:1f:94:3f:66:d8:e0:8d:65:7b: a5:33:ec:98:c3:ae:50:d3:92:02:1e:98:78:dc:dd:60:b2:f3: ee:05:c4:65:71:9d:db:05:32:63:f2:0a:56:c8:de:4c:e9:35: 36:ff:0d:1d:3e:36:b3:90:06:78:e1:33:05:f2:a5:d1:49:33: b2:c8:4b:ed:3f:5f:75:52:41:3d:89:9b:ec:52:d0:d7:50:a7: 33:85:8e:1c:a3:79:79:67:cd:58:5b:03:83:e2:d4:fe:f7:f4: a4:18:f8:7a:2e:2e:3f:77:cb:0e:e8:08:fb:d6:a3:f0:17:ce: 9a:0f:34:86:c5:f3:69:03:a9:77:4a:5f:7e:4d:04:6c:e0:44: a5:8c:6a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekiqWq1/QEv1BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjEwZDcyMDQtNmYzMi00YmI1LWFiMzEtMTRjODVlMWMyZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LU0q14ORLSqdER+C6cuz8gAzHRed6Lu95IF b+ibojIaBCIjk3Gfut6u6tR8yAsgZfrd4PVneRAOgl4O7qY1EI2Mcw7nd1RizOLs CcAS+47tn5L+5kFKzpy1WVzvpeGI+PlKO0adlmTS5wnJra9PQezLta7qLO/+pwAH d+dJ7pPYtkkfK8in+VjUFSMAsuAUAsWUVNaDFNI3Q+aVW9w9NQRFa8wsuhblHvKv tTsgkyLKbWYve49g6elwBO0s09ZVdCZw/hZMizyEpceSJEtL3BX/aw9xcdlf0c3R 3ISdtjwHlUsc1KobKfiQYYWpYhlZWoVHhfV++56gESaQ7v7r/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhZx9jdhy3mvnQgQXzaQ175WOouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGRjOGQ4NTgtMDM1Yy0z ODQwLWExNWUtNDA3ZmZiZTY4MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEQiHgRt8O1H6wAe3FCCXiQcKlEzfW5l7K9VzNpW3iUIE3fR5iQT47e OEgs/lmTUurDIRSBRH4Bk4rVmyVSBTNDM4Kgjj88LWl7HQGl2vZ84Lxhr+RxnLb3 Hv3flc1ZjDEMFLBu8p2/CwRBxLcIVS2sV4E3xx+UP2bY4I1le6Uz7JjDrlDTkgIe mHjc3WCy8+4FxGVxndsFMmPyClbI3kzpNTb/DR0+NrOQBnjhMwXypdFJM7LIS+0/ X3VSQT2Jm+xS0NdQpzOFjhyjeXlnzVhbA4Pi1P739KQY+HouLj93yw7oCPvWo/AX zpoPNIbF82kDqXdKX35NBGzgRKWMask= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:06 2026 by rpki-client