$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b094d55b-7e77-3a52-8d96-6cad81675cb2.roa File: b094d55b-7e77-3a52-8d96-6cad81675cb2.roa (raw, json) Hash identifier: Ryc/yHWrGfwPwSp/1PgQznlc9nid2a7nPe3tx+N30RI= Subject key identifier: 5C:B5:9B:77:E2:EA:CA:5F:37:BD:03:EB:66:93:4C:7D:D3:AC:AA:97 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1AA34131506D84015300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b094d55b-7e77-3a52-8d96-6cad81675cb2.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 65.22.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1a:a3:41:31:50:6d:84:01:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=5a58b94d-087d-476d-9464-d38d996279a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5e:09:fd:f3:ac:13:b5:36:b3:08:a5:15:68: 13:a8:29:fd:41:23:0a:3c:0c:2d:20:e7:07:63:86: c1:ef:ba:eb:2f:8b:53:74:d8:78:64:db:5b:69:84: 2b:7b:aa:4c:8f:e4:db:f3:60:78:ce:8e:c0:82:cb: 64:73:ec:34:0c:b0:af:5a:5f:e8:04:8c:7e:70:23: d9:34:70:95:5b:8e:3e:dd:0b:36:51:73:b5:d5:81: 58:88:26:51:5b:22:3c:ff:a7:b1:79:7e:81:8f:b7: 51:31:41:5e:59:ad:89:cf:78:ab:d7:d2:ac:c6:8f: 5f:ed:a3:65:48:98:a6:71:d8:0e:42:bb:d9:6a:4a: f6:ee:cc:98:4c:67:ef:96:91:f4:7a:d7:7f:1b:c1: d6:28:55:44:fa:7d:9b:9c:f1:85:77:72:dc:c6:af: 82:d4:fe:41:78:41:40:a1:ec:b5:b3:13:f3:b4:03: da:7d:74:50:53:a8:2b:6a:48:c5:ec:46:91:1d:9a: 90:1a:f5:c9:2e:4a:f1:37:9e:a4:f2:2b:a6:6a:4c: 98:23:0d:25:27:7e:eb:7b:67:0b:5d:b4:c9:e8:96: 6c:a6:14:25:02:b1:a9:bd:2d:55:39:9f:d9:3a:cd: 42:ec:1c:40:ad:e8:16:97:77:d1:f0:17:e9:6f:13: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:9B:77:E2:EA:CA:5F:37:BD:03:EB:66:93:4C:7D:D3:AC:AA:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b094d55b-7e77-3a52-8d96-6cad81675cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3d:db:e1:88:a3:d3:69:a8:3e:a2:67:58:c5:13:a4:97:b7: 97:69:1a:16:90:21:86:c3:38:12:2e:05:dc:80:1f:ee:61:43: 07:76:1e:48:6b:92:8e:91:91:bf:6b:9d:cb:d1:10:33:9e:0a: 63:d2:39:8c:cc:57:a4:15:b5:15:a5:d9:8c:36:4c:be:15:20: 08:2f:bd:14:9e:0e:36:27:c0:c8:c1:d4:c2:76:97:ae:24:f6: f3:33:16:3a:d6:27:9b:6c:be:07:c4:b2:4f:fb:47:62:c2:05: 2b:fc:76:1b:dc:00:83:61:32:61:c3:f2:92:5e:3a:83:74:b2: 1b:dd:2f:2b:91:66:e1:aa:c7:47:1f:e4:e7:c3:01:7a:94:93: 24:74:a1:a5:ac:7d:6f:75:19:28:b9:0b:4a:41:84:e9:1a:e7: 1d:b9:f2:4b:70:ca:af:12:de:07:e3:07:87:82:01:a1:80:30: 98:44:dd:29:41:37:76:40:d4:18:1c:54:2a:cc:8e:a4:e0:a9: 43:54:35:9f:aa:77:20:f6:51:37:c0:25:e0:4a:6e:50:6f:ad: 48:cb:25:52:ff:b7:92:4f:81:93:31:e4:d0:17:e3:e7:06:b5: c8:f0:61:42:13:ec:cf:2f:1e:66:99:08:86:5a:05:d9:fd:91: e8:43:45:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehqjQTFQbYQBUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NWE1OGI5NGQtMDg3ZC00NzZkLTk0NjQtZDM4ZDk5NjI3OWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV4J/fOsE7U2swilFWgTqCn9QSMKPAwtIOcH Y4bB77rrL4tTdNh4ZNtbaYQre6pMj+Tb82B4zo7Agstkc+w0DLCvWl/oBIx+cCPZ NHCVW44+3Qs2UXO11YFYiCZRWyI8/6exeX6Bj7dRMUFeWa2Jz3ir19Ksxo9f7aNl SJimcdgOQrvZakr27syYTGfvlpH0etd/G8HWKFVE+n2bnPGFd3Lcxq+C1P5BeEFA oey1sxPztAPafXRQU6grakjF7EaRHZqQGvXJLkrxN56k8iumakyYIw0lJ37re2cL XbTJ6JZsphQlArGpvS1VOZ/ZOs1C7BxAregWl3fR8BfpbxPZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy1m3fi6spfN70D62aTTH3TrKqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjA5NGQ1NWItN2U3Ny0z YTUyLThkOTYtNmNhZDgxNjc1Y2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE92+GIo9NpqD6iZ1jFE6SXt5dpGhaQIYbDOBIuBdyAH+5hQwd2Hkhr ko6Rkb9rncvREDOeCmPSOYzMV6QVtRWl2Yw2TL4VIAgvvRSeDjYnwMjB1MJ2l64k 9vMzFjrWJ5tsvgfEsk/7R2LCBSv8dhvcAINhMmHD8pJeOoN0shvdLyuRZuGqx0cf 5OfDAXqUkyR0oaWsfW91GSi5C0pBhOka5x258ktwyq8S3gfjB4eCAaGAMJhE3SlB N3ZA1BgcVCrMjqTgqUNUNZ+qdyD2UTfAJeBKblBvrUjLJVL/t5JPgZMx5NAX4+cG tcjwYUIT7M8vHmaZCIZaBdn9kehDRWk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:46 2026 by rpki-client