$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa File: 9bb59be7-0b44-33d9-a9d6-b806d4424238.roa (raw, json) Hash identifier: c44n5dDTGGJfAObEu7QnQTBnFN1C0lahG/Ks0IH8zms= Subject key identifier: ED:0E:3F:60:5A:77:F9:0B:BE:23:9F:60:62:09:33:B4:22:BA:CE:5D Certificate issuer: /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312 Certificate serial: 010D0C9F4328584D59EA5D22C113C0380284A600 Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14618 IP address blocks: 65.20.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5d:22:c1:13:c0:38:02:84:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=cbdc1e90-ac1c-4cb7-9088-bac0607b104f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:be:51:22:97:87:bf:1e:80:e7:1d:09:94: 91:b3:93:72:34:35:f9:13:11:e7:0b:c8:74:6d:59: 4d:34:ae:c5:73:c4:81:da:10:66:54:a1:6e:63:7e: fe:9d:bd:18:65:b6:78:79:41:1d:88:ad:40:59:57: e9:fa:42:5f:fc:8b:9d:79:09:64:ba:31:d9:42:92: 5b:5a:b0:07:8f:c1:8b:69:80:ed:14:80:22:e2:a3: f9:65:5d:4c:84:78:32:19:d0:24:e4:57:0c:fb:0b: f2:6f:f0:fc:e5:ce:81:73:3d:56:71:f8:64:f5:37: 1f:06:65:7c:8e:9f:7a:6b:9c:cf:98:4d:8e:98:1f: fd:5b:3b:e2:a0:fe:1d:70:fb:42:f8:c0:f5:76:57: fd:e2:32:c9:99:e3:3a:21:ce:98:2e:72:50:78:40: a6:32:21:54:77:ae:01:9a:20:c2:b2:54:70:88:18: 9f:22:ba:ed:75:b2:cc:be:ba:ab:c4:60:3e:40:00: b0:46:74:05:d2:47:ce:b9:4d:10:d3:c1:4c:15:2c: 20:c7:c0:f0:aa:74:53:b4:2d:29:4e:91:89:bd:57: db:6b:30:d5:92:b6:63:f6:9f:fa:ee:55:b8:2d:b6: ea:46:3f:3f:3c:0e:ff:59:8f:4b:4a:99:47:f0:7b: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0E:3F:60:5A:77:F9:0B:BE:23:9F:60:62:09:33:B4:22:BA:CE:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl X509v3 Authority Key Identifier: keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer sbgp-ipAddrBlock: critical IPv4: 65.20.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d6:1f:e9:07:6e:36:3d:a5:ca:95:f9:22:5b:c3:39:b3:38: 8a:07:4a:42:16:58:1c:3c:32:99:6c:5f:c7:ed:7b:3b:5a:30: f8:c1:4f:f2:11:55:1a:d4:e2:16:63:fc:a4:db:4c:bc:e5:9d: c4:27:cc:7b:5b:c2:61:b9:89:a4:51:d8:49:64:0a:32:30:96: b8:dd:57:67:ba:38:10:84:f2:44:5f:d6:f1:ee:3b:41:4b:7f: d5:39:df:3d:24:8d:9d:41:e7:0a:a7:4c:57:85:83:e9:c7:e5: 43:c6:b4:ac:d1:bb:6b:e5:6c:8d:40:83:e6:f4:a3:24:81:8f: 22:30:4b:ed:5f:05:c5:03:a1:f0:5d:a3:97:54:d0:1d:fe:aa: d4:1d:f6:41:38:38:89:6a:85:68:c6:3e:6e:c1:a4:3f:3e:ab: d9:13:0b:2f:ba:16:5a:8e:59:e0:f0:47:17:25:75:f1:67:e5: 0d:33:54:17:29:2c:e2:9c:66:96:6d:f7:c8:87:b0:93:e7:41: 0d:c0:26:b1:ca:97:05:8f:00:bd:6a:bf:d2:48:97:11:cc:46: 31:77:69:06:8c:ab:ad:bb:ec:65:bf:be:cc:95:70:9b:40:b9: 44:99:9d:88:7e:9d:b9:96:52:f8:9d:ac:f0:85:51:ca:08:6d: 62:f5:a3:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6l0iwRPAOAKEpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmM2NjYTEtNmNkNC00MjMwLTkyZDMtMjBhYmY0ZGI3 MzEyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Y2JkYzFlOTAtYWMxYy00Y2I3LTkwODgtYmFjMDYwN2IxMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG2+USKXh78egOcdCZSRs5NyNDX5ExHnC8h0 bVlNNK7Fc8SB2hBmVKFuY37+nb0YZbZ4eUEdiK1AWVfp+kJf/IudeQlkujHZQpJb WrAHj8GLaYDtFIAi4qP5ZV1MhHgyGdAk5FcM+wvyb/D85c6Bcz1Wcfhk9TcfBmV8 jp96a5zPmE2OmB/9WzvioP4dcPtC+MD1dlf94jLJmeM6Ic6YLnJQeECmMiFUd64B miDCslRwiBifIrrtdbLMvrqrxGA+QACwRnQF0kfOuU0Q08FMFSwgx8DwqnRTtC0p TpGJvVfbazDVkrZj9p/67lW4LbbqRj8/PA7/WY9LSplH8HshJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0OP2Bad/kLviOfYGIJM7Qius5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZmYz Y2NhMS02Y2Q0LTQyMzAtOTJkMy0yMGFiZjRkYjczMTIvOWJiNTliZTctMGI0NC0z M2Q5LWE5ZDYtYjgwNmQ0NDI0MjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2ZmM2NjYTEtNmNkNC00MjMwLTky ZDMtMjBhYmY0ZGI3MzEyL2NmZjNjY2ExLTZjZDQtNDIzMC05MmQzLTIwYWJmNGRi NzMxMi5jcmwwHwYDVR0jBBgwFoAUd+NEOHMzmN13phfC24B3cczjtZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZmYzY2NhMS02Y2Q0LTQyMzAtOTJkMy0yMGFi ZjRkYjczMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnWH+kHbjY9pcqV+SJbwzmzOIoHSkIWWBw8MplsX8fteztaMPjBT/IR VRrU4hZj/KTbTLzlncQnzHtbwmG5iaRR2ElkCjIwlrjdV2e6OBCE8kRf1vHuO0FL f9U53z0kjZ1B5wqnTFeFg+nH5UPGtKzRu2vlbI1Ag+b0oySBjyIwS+1fBcUDofBd o5dU0B3+qtQd9kE4OIlqhWjGPm7BpD8+q9kTCy+6FlqOWeDwRxcldfFn5Q0zVBcp LOKcZpZt98iHsJPnQQ3AJrHKlwWPAL1qv9JIlxHMRjF3aQaMq6277GW/vsyVcJtA uUSZnYh+nbmWUvidrPCFUcoIbWL1o1w= -----END CERTIFICATE-----Generated at Fri Apr 17 12:06:21 2026 by rpki-client