$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/54a69069-5b41-3a84-8040-6cb02eca775b.roa File: 54a69069-5b41-3a84-8040-6cb02eca775b.roa (raw, json) Hash identifier: kiP6HcIXjtCZVyg1JIrzjNUnpq/vHkQbvIw0FLYpX+Q= Subject key identifier: 09:15:CE:2B:B8:28:1B:DB:44:8C:5E:8A:E1:91:8F:0E:EE:9F:32:C5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1D93A9BF73E3A89ECAE4 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/54a69069-5b41-3a84-8040-6cb02eca775b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1d:93:a9:bf:73:e3:a8:9e:ca:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=148dd0a7-e528-44ca-a262-13ff9486b5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:b4:bf:fa:39:05:80:cd:b3:3d:96:57:31: c0:f8:60:53:ef:92:97:4e:66:0e:80:73:c0:c2:80: 03:bb:ff:40:75:8a:8e:6d:cd:c4:fb:03:5c:58:9e: d0:10:56:9a:0d:07:ae:52:2c:85:fc:7f:68:09:24: 1a:08:f8:72:53:f4:34:b2:1f:3c:55:0f:24:04:a7: 04:88:d8:8d:0c:0e:74:f9:1e:33:f7:c4:b4:44:4d: ba:df:d8:f8:c9:33:3d:27:7d:9d:e5:be:a3:cb:3a: 96:54:45:1a:91:bc:5c:d7:66:89:f6:ca:7e:5f:26: 76:95:7d:40:8d:5f:ba:74:41:fc:ce:36:77:9d:b3: dd:97:d2:a3:34:23:02:38:1b:a1:32:cd:53:cb:58: c9:b4:d9:b7:18:4e:88:24:a1:fc:c4:d0:b7:f9:89: e1:8c:13:08:00:2e:24:af:94:45:fc:d6:3b:08:80: d6:c1:16:9a:5c:06:49:86:4d:ed:31:b0:dc:ef:7b: de:9b:f0:19:92:6b:4f:71:f4:4c:5f:73:3b:78:19: a0:18:5e:9f:07:40:5f:89:c1:68:9b:85:44:4e:b8: 7f:3b:20:84:c1:1b:7b:d2:00:13:33:e9:2d:5b:9b: 99:38:78:5b:eb:57:c4:eb:ef:d6:f0:d6:3c:c9:67: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:CE:2B:B8:28:1B:DB:44:8C:5E:8A:E1:91:8F:0E:EE:9F:32:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/54a69069-5b41-3a84-8040-6cb02eca775b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e7:59:8e:ab:e0:42:1b:6a:dc:c9:3c:0c:00:76:33:c2:82: 44:21:e9:9c:63:c8:e5:7e:04:8c:cd:2e:dc:08:e7:65:1a:6f: a3:bc:90:fc:16:e2:48:09:54:97:e9:ce:1b:4c:20:de:ce:9b: 2a:a8:92:60:99:36:11:53:3f:59:d6:67:a8:70:8d:db:fb:a0: f7:92:49:c1:6b:dc:54:24:aa:a6:02:a2:e0:08:59:68:71:40: 85:83:41:75:b9:74:60:6e:b0:91:ee:19:b8:76:f4:9c:4b:38: f8:b2:22:93:58:22:c5:ea:a3:00:0d:78:8a:37:74:ec:46:34: 7d:b0:e8:ee:fc:18:12:b9:34:b8:06:ad:a9:71:64:d7:c0:9f: a7:87:eb:c0:a5:33:ad:f1:2f:5c:ab:57:9a:8b:c1:2f:81:f8: 5a:5c:2b:00:29:68:54:cd:f9:ce:ec:01:65:9f:1a:d9:53:51: 1b:fc:e5:29:82:07:f8:44:91:42:a6:a0:91:da:42:52:2c:32: 75:3f:54:da:c2:e1:05:82:6e:39:1e:41:4b:ca:db:f2:17:1a: 7a:52:d7:53:2e:f6:00:37:a3:5a:d2:7f:b6:4c:fb:3e:90:5a: 33:69:96:63:82:e4:d6:00:5d:c4:39:d5:37:05:48:a8:28:b6: 9b:f5:3e:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeh2Tqb9z46ieyuQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTQ4ZGQwYTctZTUyOC00NGNhLWEyNjItMTNmZjk0ODZiNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfm0v/o5BYDNsz2WVzHA+GBT75KXTmYOgHPA woADu/9AdYqObc3E+wNcWJ7QEFaaDQeuUiyF/H9oCSQaCPhyU/Q0sh88VQ8kBKcE iNiNDA50+R4z98S0RE2639j4yTM9J32d5b6jyzqWVEUakbxc12aJ9sp+XyZ2lX1A jV+6dEH8zjZ3nbPdl9KjNCMCOBuhMs1Ty1jJtNm3GE6IJKH8xNC3+YnhjBMIAC4k r5RF/NY7CIDWwRaaXAZJhk3tMbDc73vem/AZkmtPcfRMX3M7eBmgGF6fB0BficFo m4VETrh/OyCEwRt70gATM+ktW5uZOHhb61fE6+/W8NY8yWff1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkVziu4KBvbRIxeiuGRjw7unzLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTRhNjkwNjktNWI0MS0z YTg0LTgwNDAtNmNiMDJlY2E3NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjnWY6r4EIbatzJPAwAdjPCgkQh6ZxjyOV+BIzNLtwI52Uab6O8kPwW 4kgJVJfpzhtMIN7OmyqokmCZNhFTP1nWZ6hwjdv7oPeSScFr3FQkqqYCouAIWWhx QIWDQXW5dGBusJHuGbh29JxLOPiyIpNYIsXqowANeIo3dOxGNH2w6O78GBK5NLgG ralxZNfAn6eH68ClM63xL1yrV5qLwS+B+FpcKwApaFTN+c7sAWWfGtlTURv85SmC B/hEkUKmoJHaQlIsMnU/VNrC4QWCbjkeQUvK2/IXGnpS11Mu9gA3o1rSf7ZM+z6Q WjNplmOC5NYAXcQ51TcFSKgotpv1Ptk= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:28 2026 by rpki-client