$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa File: 4575c36b-b988-3070-998f-2c18e11901f4.roa (raw, json) Hash identifier: 5M97V0kcQyYMQMCZitv9FeIo8+dTOEePqJvsL3dQpYQ= Subject key identifier: FF:A2:B4:15:44:1D:46:84:24:2D:1A:32:B9:99:69:9C:C6:C8:DD:9C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379F6C15E8BAE70D8410980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f6:c1:5e:8b:ae:70:d8:41:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=940a7793-42bc-4792-9d28-d7361ba59af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:99:50:d6:2b:28:76:86:8d:4b:a1:5c:18:47: 45:7a:44:b2:75:12:9c:17:70:cb:66:c5:fe:7c:09: 62:dd:fe:6b:4b:14:ea:12:4b:b8:88:c0:e0:39:34: d9:f1:c2:1a:a3:db:a3:c2:0c:4a:f9:d5:69:cf:3e: fd:c0:a3:ee:c1:f8:e0:41:cd:d7:be:67:3e:87:2a: 74:32:81:ec:69:4e:c6:80:f5:4e:13:56:22:68:0c: 5a:93:2a:a1:84:11:8c:43:09:38:d9:60:c5:7c:9e: 29:49:03:65:b1:07:8a:59:64:ed:1b:d4:ae:0e:17: a3:8f:e5:fb:5a:66:85:8b:55:c9:27:cd:7b:b8:1e: a7:d1:01:a4:58:44:32:41:06:67:4f:ee:bc:7b:10: b5:ea:cd:79:54:d8:a3:2a:91:dc:9a:3e:e2:7c:62: e0:c6:98:e7:5e:33:8d:72:de:22:a6:25:5d:73:af: b3:21:f2:8e:ec:76:ac:29:1c:6f:74:a8:14:3c:3c: 60:f2:b4:c1:1f:58:3a:5d:67:5f:19:5f:57:be:bc: 79:82:b3:41:4a:fa:37:22:0a:ad:ce:95:8d:1b:e4: cf:65:16:28:9c:b9:18:8b:ee:2f:12:0a:1b:6c:89: dd:ae:70:95:b7:3e:69:ce:cd:dc:60:5c:43:cc:0a: 9a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:B4:15:44:1D:46:84:24:2D:1A:32:B9:99:69:9C:C6:C8:DD:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4575c36b-b988-3070-998f-2c18e11901f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:d0:68:2d:dd:27:c2:8c:1d:5a:74:7e:f9:b3:1f:4a:fe:72: 26:6b:ba:56:7d:c1:a7:62:db:36:c6:67:7b:69:8a:f8:da:c7: ff:fa:51:ca:5e:b6:92:52:31:e7:11:40:31:e7:2b:5d:11:82: 7c:ca:b9:3f:38:c8:b2:3c:4f:d8:5a:2d:95:3c:f6:59:45:ed: c5:ab:e1:98:e3:3b:5f:e7:67:03:56:84:98:0d:a0:8d:4f:d6: d4:b8:81:22:28:93:6e:b6:cb:2e:5e:2f:5c:55:47:29:ce:a2: db:4c:11:2d:c0:91:e1:5b:82:39:bd:b1:95:56:93:88:54:73: a7:67:8b:b9:36:9f:b7:51:10:90:e5:16:c7:4c:31:76:de:f9: 29:fb:83:d2:23:25:94:5f:b3:5f:70:94:ba:dd:1c:a1:5a:b7: ea:01:d7:86:32:dc:5a:ff:44:e9:a5:4c:fd:ae:6a:dc:13:cf: 75:34:d3:df:b5:e7:e0:e4:e1:f5:8e:02:92:fb:36:a6:d2:ab: 36:b8:67:16:9e:ca:4b:c2:b7:e1:ae:91:26:f1:5d:fb:04:01: 8d:a5:79:e9:14:d8:d9:a5:b1:85:77:0a:03:c8:3f:89:f2:85: 31:91:94:01:c0:fc:61:ef:52:59:27:64:a0:f7:3f:cf:25:4c: cb:ce:94:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefbBXouucNhBCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTQwYTc3OTMtNDJiYy00NzkyLTlkMjgtZDczNjFiYTU5YWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7plQ1isodoaNS6FcGEdFekSydRKcF3DLZsX+ fAli3f5rSxTqEku4iMDgOTTZ8cIao9ujwgxK+dVpzz79wKPuwfjgQc3Xvmc+hyp0 MoHsaU7GgPVOE1YiaAxakyqhhBGMQwk42WDFfJ4pSQNlsQeKWWTtG9SuDhejj+X7 WmaFi1XJJ817uB6n0QGkWEQyQQZnT+68exC16s15VNijKpHcmj7ifGLgxpjnXjON ct4ipiVdc6+zIfKO7HasKRxvdKgUPDxg8rTBH1g6XWdfGV9Xvrx5grNBSvo3Igqt zpWNG+TPZRYonLkYi+4vEgobbIndrnCVtz5pzs3cYFxDzAqavQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+itBVEHUaEJC0aMrmZaZzGyN2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDU3NWMzNmItYjk4OC0z MDcwLTk5OGYtMmMxOGUxMTkwMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPQaC3dJ8KMHVp0fvmzH0r+ciZrulZ9wadi2zbGZ3tpivjax//6Ucpe tpJSMecRQDHnK10RgnzKuT84yLI8T9haLZU89llF7cWr4ZjjO1/nZwNWhJgNoI1P 1tS4gSIok262yy5eL1xVRynOottMES3AkeFbgjm9sZVWk4hUc6dni7k2n7dREJDl FsdMMXbe+Sn7g9IjJZRfs19wlLrdHKFat+oB14Yy3Fr/ROmlTP2uatwTz3U009+1 5+Dk4fWOApL7NqbSqza4ZxaeykvCt+GukSbxXfsEAY2leekU2NmlsYV3CgPIP4ny hTGRlAHA/GHvUlknZKD3P88lTMvOlKA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:36 2026 by rpki-client