$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa File: dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa (raw, json) Hash identifier: Z139kLtu/c1bXwcUo42vcW2HWh2t2bNYamF3dvq7zLI= Subject key identifier: FC:57:27:31:51:16:14:6C:F9:51:DC:8B:B1:4B:C5:72:E1:1E:1D:EE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A44B641F342A56E518AC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:44:b6:41:f3:42:a5:6e:51:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=26240367-4b20-47e9-b40d-0f0bfdc3b790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:68:56:2a:ef:11:eb:99:a1:63:89:8e:8e: 96:53:ce:73:84:b0:f2:1c:77:69:b7:51:df:8d:27: ee:47:f9:a9:75:9b:d5:a5:20:35:2c:69:d9:50:dd: 4b:f5:75:3b:f3:b8:44:59:75:0e:b7:82:c1:83:af: 0b:1d:4c:41:95:13:63:78:2b:0d:7b:48:91:c9:31: 17:83:9c:8b:b9:26:64:69:67:37:b4:24:a1:0b:10: 37:4e:06:da:26:bf:65:d6:51:b8:ae:20:ea:57:85: ab:ab:6a:12:ca:63:60:48:d5:72:e1:1b:0f:2f:64: 5b:0a:69:37:30:ac:77:cc:77:7f:41:af:01:f8:5e: c1:d2:16:9a:5f:78:20:98:70:10:86:01:5a:8a:42: 5e:a5:a6:63:3e:67:2d:1b:19:0e:0a:9b:7b:cb:37: f0:45:fa:bf:90:31:5d:5e:f1:24:f1:b7:6d:02:07: f1:e0:d9:eb:7e:5a:a9:eb:e6:53:cf:64:41:5f:3c: 3c:28:33:69:e5:f1:1f:39:34:12:f8:94:d0:36:b8: 23:05:16:99:d6:50:ce:c8:ed:4d:f3:fa:72:0e:ad: 71:c3:21:fc:f2:f7:d6:4e:aa:73:fe:ec:e5:cc:fa: d6:c6:4d:ab:60:30:4a:a8:bf:e3:9b:75:15:60:63: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:57:27:31:51:16:14:6C:F9:51:DC:8B:B1:4B:C5:72:E1:1E:1D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:7c:02:a4:2b:16:92:24:2a:97:db:66:7f:91:6b:3a:8c:f8: 0c:c3:d8:6f:63:11:8d:88:a7:e2:48:72:2e:78:4a:bb:d3:68: 6d:09:bd:86:c3:d4:22:12:51:6a:74:d6:2e:99:9b:39:8c:17: c8:10:f9:e8:59:ea:aa:d7:f1:fc:43:00:5c:f7:8e:9f:93:1d: 20:ae:83:2c:df:e1:43:57:92:11:b9:77:6c:8e:8a:07:36:de: c2:3a:c9:b0:d3:c4:b9:98:06:5a:7a:7f:25:47:c7:73:16:88: e9:00:89:66:84:e5:0d:2a:6a:c9:6b:ff:8a:a6:bb:4f:3a:93: 30:bf:73:1e:dd:d6:58:f5:cb:e4:6c:45:28:2f:c1:de:3c:b7: 4d:ce:59:f6:59:7d:71:62:fa:c4:d6:02:c7:46:b7:a7:b9:d9: c4:42:50:73:0d:e1:9e:09:95:6d:6a:16:32:da:49:9f:d5:71: b5:d9:7f:8d:a3:bd:f2:a1:9e:dd:5a:c7:3c:5b:ff:3e:60:89: 6c:19:b4:28:8a:00:e5:b7:5f:cf:e0:08:fa:56:be:0a:66:82: ba:3b:bf:51:a9:a9:2e:b1:f6:86:af:f6:54:59:ce:7a:f0:04: 18:85:b1:4a:40:d1:f6:aa:b6:39:0f:fa:b8:52:b2:dd:ae:39: 54:e7:2c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekS2QfNCpW5RisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjYyNDAzNjctNGIyMC00N2U5LWI0MGQtMGYwYmZkYzNiNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6loVirvEeuZoWOJjo6WU85zhLDyHHdpt1Hf jSfuR/mpdZvVpSA1LGnZUN1L9XU787hEWXUOt4LBg68LHUxBlRNjeCsNe0iRyTEX g5yLuSZkaWc3tCShCxA3TgbaJr9l1lG4riDqV4Wrq2oSymNgSNVy4RsPL2RbCmk3 MKx3zHd/Qa8B+F7B0haaX3ggmHAQhgFaikJepaZjPmctGxkOCpt7yzfwRfq/kDFd XvEk8bdtAgfx4Nnrflqp6+ZTz2RBXzw8KDNp5fEfOTQS+JTQNrgjBRaZ1lDOyO1N 8/pyDq1xwyH88vfWTqpz/uzlzPrWxk2rYDBKqL/jm3UVYGPYiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxXJzFRFhRs+VHci7FLxXLhHh3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGZmOTliYTgtY2IxZi0z NDI3LWE4NDEtNmExMzYyY2QyNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh8AqQrFpIkKpfbZn+RazqM+AzD2G9jEY2Ip+JIci54SrvTaG0JvYbD 1CISUWp01i6ZmzmMF8gQ+ehZ6qrX8fxDAFz3jp+THSCugyzf4UNXkhG5d2yOigc2 3sI6ybDTxLmYBlp6fyVHx3MWiOkAiWaE5Q0qaslr/4qmu086kzC/cx7d1lj1y+Rs RSgvwd48t03OWfZZfXFi+sTWAsdGt6e52cRCUHMN4Z4JlW1qFjLaSZ/VcbXZf42j vfKhnt1axzxb/z5giWwZtCiKAOW3X8/gCPpWvgpmgro7v1GpqS6x9oav9lRZznrw BBiFsUpA0faqtjkP+rhSst2uOVTnLJE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:41 2026 by rpki-client