$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa File: 594c4987-02d1-3bc5-a8c0-729e094b6649.roa (raw, json) Hash identifier: FPM6m1dk942VL1ylsrWEh+cQgwr0wzmlAvtiF2E2Flw= Subject key identifier: 64:39:A1:D5:E8:E1:55:3C:23:F3:2B:D9:D0:68:48:98:D3:40:C3:39 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379F8938BA693F98F0366C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f8:93:8b:a6:93:f9:8f:03:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=b6cd2166-0955-405b-ab73-f4dba135bbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:2e:b8:5f:be:29:06:52:53:b6:3e:89:39: 08:48:bb:22:5d:0b:0b:54:46:5f:01:d7:29:ea:94: c9:cd:37:c5:b3:b1:58:c1:19:e9:26:9f:89:74:f7: 5a:6d:b0:04:31:0b:ba:e0:30:66:1a:97:ea:38:51: 19:d1:b8:3d:af:b4:37:79:65:33:d3:f5:68:8a:d5: e3:23:71:f4:0b:a1:33:88:a0:39:1b:da:50:b5:30: 0b:fb:bb:30:b2:1b:b1:b3:9b:69:3f:0e:60:a3:f0: 9a:e4:a8:e0:d5:79:17:c6:0a:75:1d:aa:91:30:63: cc:64:09:11:af:42:6e:bc:66:a6:32:fc:7d:3b:b8: dd:2e:50:d0:ad:26:83:ed:4b:b7:aa:52:a7:f3:c7: 75:57:35:8e:64:56:70:4a:74:4c:83:2f:9b:ba:4d: 08:40:1b:e6:58:78:3d:94:ff:66:00:79:8a:8a:16: 69:a0:42:76:00:24:4c:30:bf:c3:00:3d:ed:ab:10: 9c:34:9d:3e:5e:ac:dc:4e:a6:8d:0c:17:bf:32:7a: cc:79:19:5b:bc:fb:8e:45:1a:f3:30:c3:05:7a:1a: 86:a5:9e:fb:0a:d0:88:0b:33:e4:c2:ea:1f:dd:8c: 36:55:98:b4:e1:54:54:9e:1a:ab:94:df:39:03:d2: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:39:A1:D5:E8:E1:55:3C:23:F3:2B:D9:D0:68:48:98:D3:40:C3:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/594c4987-02d1-3bc5-a8c0-729e094b6649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:1b:61:73:70:d4:fd:3c:eb:50:5d:7b:89:06:84:5f:23:8a: 18:f0:9c:9d:3a:cd:c4:8a:a4:09:80:4a:35:94:05:5c:d5:b7: e7:ba:74:c5:3c:02:f6:00:10:a7:5c:0f:85:7f:84:26:7f:80: 3e:d6:2b:bb:d7:32:16:13:70:92:80:aa:76:f5:bf:f4:20:9c: 5e:2a:54:26:37:cb:36:6d:2b:a5:01:07:0b:94:15:c6:34:d4: 5b:ce:19:f5:6a:27:87:37:f1:ac:b6:74:23:77:b5:5e:83:ee: 8c:39:1c:69:38:42:94:33:b7:74:85:4a:8c:01:da:1f:93:81: b2:93:09:9d:b9:e8:b1:f0:26:ee:31:00:b4:cb:ce:ce:dc:11: 27:65:f5:6d:8b:ac:dd:6d:74:65:83:d9:91:3d:24:4f:dd:6c: 64:9a:ba:79:91:27:3f:a2:3b:4b:3d:84:82:f6:e0:5b:5b:59: 86:91:e5:bc:f9:c3:6c:68:7c:2d:c8:7f:90:12:6f:4e:8b:6f: 6b:8b:3c:9a:ed:ad:4f:2b:d5:2f:6c:1b:f6:fe:d6:fb:f4:41: 15:b1:24:4d:b6:f2:ea:df:6d:18:8c:35:97:5c:1a:89:a1:de: cd:73:91:a8:3d:6b:1c:18:5e:40:29:f4:8a:30:ca:af:d3:8e: 86:47:db:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefiTi6aT+Y8DZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YjZjZDIxNjYtMDk1NS00MDViLWFiNzMtZjRkYmExMzViYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2cuuF++KQZSU7Y+iTkISLsiXQsLVEZfAdcp 6pTJzTfFs7FYwRnpJp+JdPdabbAEMQu64DBmGpfqOFEZ0bg9r7Q3eWUz0/VoitXj I3H0C6EziKA5G9pQtTAL+7swshuxs5tpPw5go/Ca5Kjg1XkXxgp1HaqRMGPMZAkR r0JuvGamMvx9O7jdLlDQrSaD7Uu3qlKn88d1VzWOZFZwSnRMgy+buk0IQBvmWHg9 lP9mAHmKihZpoEJ2ACRMML/DAD3tqxCcNJ0+XqzcTqaNDBe/MnrMeRlbvPuORRrz MMMFehqGpZ77CtCICzPkwuof3Yw2VZi04VRUnhqrlN85A9JbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ5odXo4VU8I/Mr2dBoSJjTQMM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTk0YzQ5ODctMDJkMS0z YmM1LWE4YzAtNzI5ZTA5NGI2NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkbYXNw1P0861Bde4kGhF8jihjwnJ06zcSKpAmASjWUBVzVt+e6dMU8 AvYAEKdcD4V/hCZ/gD7WK7vXMhYTcJKAqnb1v/QgnF4qVCY3yzZtK6UBBwuUFcY0 1FvOGfVqJ4c38ay2dCN3tV6D7ow5HGk4QpQzt3SFSowB2h+TgbKTCZ256LHwJu4x ALTLzs7cESdl9W2LrN1tdGWD2ZE9JE/dbGSaunmRJz+iO0s9hIL24FtbWYaR5bz5 w2xofC3If5ASb06Lb2uLPJrtrU8r1S9sG/b+1vv0QRWxJE228urfbRiMNZdcGomh 3s1zkag9axwYXkAp9Iowyq/TjoZH260= -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:29 2026 by rpki-client