$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/017ce832-0b91-3a35-93c1-693688264fd4.roa File: 017ce832-0b91-3a35-93c1-693688264fd4.roa (raw, json) Hash identifier: YgnzCp/cl03QUuphYGLUHb5s8lwjiZb3z26Dbo86638= Subject key identifier: 53:4A:A2:23:98:5E:4D:2A:CB:DC:98:4E:32:63:0F:E9:11:6B:FD:E1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1DB771B264F0C4C496D8 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/017ce832-0b91-3a35-93c1-693688264fd4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.19.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1d:b7:71:b2:64:f0:c4:c4:96:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ac7d4abb-f48b-46b2-b53d-b744787435f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:0d:82:10:d7:2a:1b:62:33:62:ba:a4:b2: 7c:12:66:10:74:4b:89:ea:c3:b8:40:2b:25:38:c1: c9:38:98:d3:e0:31:ac:a9:5d:e5:65:f5:dd:e3:b8: 5e:74:35:09:c6:61:12:fb:4b:0f:b9:78:9b:f6:85: f4:f4:ed:e2:73:fa:7e:0a:9b:cd:13:b6:82:cb:95: c3:9c:c3:ab:9b:5c:16:ea:5e:c5:ea:6d:e7:ed:37: 43:28:2d:aa:e8:9a:1c:0d:a1:c5:1e:55:f3:b7:ed: e8:08:ff:5a:ef:e0:60:d5:b7:e4:f1:67:d4:a3:14: 16:27:1c:88:70:bd:36:d2:f1:d1:5d:7f:b9:41:a6: c4:fe:93:0e:f6:31:db:c2:87:17:94:22:55:95:72: 56:2a:d2:60:53:c3:e2:13:ce:25:20:ac:bf:eb:7f: ed:27:70:9a:22:f3:c6:2d:c8:bb:f4:22:37:9b:0e: 89:a6:d5:d5:2b:76:15:f7:56:51:57:28:c7:59:b7: e4:61:cd:9b:66:e8:87:fc:0b:61:1e:8e:3a:bc:dc: 8c:39:83:4e:88:dd:1a:b8:cd:ed:84:5d:4a:0d:05: c2:a9:2a:d8:38:19:3a:8f:fa:a0:bb:74:5d:cc:7e: e9:15:d8:09:82:3e:66:9d:1e:60:14:43:7a:a0:71: e0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4A:A2:23:98:5E:4D:2A:CB:DC:98:4E:32:63:0F:E9:11:6B:FD:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/017ce832-0b91-3a35-93c1-693688264fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.19.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:94:9b:87:59:c5:4d:73:9e:65:b0:6c:d9:b4:fb:c9:3c:8e: 04:51:31:25:c9:63:af:a4:1e:dd:f4:6f:35:ca:68:2b:31:13: f0:93:fa:7b:c1:cd:c0:ef:62:21:2a:2f:a9:a0:72:fb:df:a8: 1f:39:f3:86:a9:df:82:91:5a:54:71:13:87:83:1a:21:c6:35: 2c:be:36:02:27:ea:24:ad:31:30:46:01:7b:3b:c7:fe:46:c2: db:f4:d2:05:aa:43:89:bc:cf:bb:78:dd:1b:c5:ae:99:0a:85: 17:6e:1d:8f:31:cf:a7:88:e7:2c:4c:54:16:d8:fe:f4:83:b6: 51:b5:46:9f:56:cc:cc:47:0b:fc:87:24:43:2e:08:7f:ee:8b: 3d:20:6d:bb:b0:32:02:27:3d:61:75:56:3e:c8:42:0a:a1:ff: 34:d6:3c:f9:01:92:f3:f4:17:65:4d:04:f0:73:57:9c:c1:f6: 60:e8:70:db:49:a7:8a:de:8b:c7:a3:a1:8d:c1:01:7e:54:fb: 4a:46:c5:1a:81:ce:db:f8:bd:ea:48:8a:69:83:d4:4b:22:c8: 14:d2:20:25:b9:71:4c:a4:a3:48:82:59:2d:33:df:c9:4c:a3: 14:ed:22:41:9a:0a:cf:0c:2b:b9:26:e7:98:3c:fd:7d:4e:be: d6:51:29:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeh23cbJk8MTEltgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YWM3ZDRhYmItZjQ4Yi00NmIyLWI1M2QtYjc0NDc4NzQzNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5gNghDXKhtiM2K6pLJ8EmYQdEuJ6sO4QCsl OMHJOJjT4DGsqV3lZfXd47hedDUJxmES+0sPuXib9oX09O3ic/p+CpvNE7aCy5XD nMOrm1wW6l7F6m3n7TdDKC2q6JocDaHFHlXzt+3oCP9a7+Bg1bfk8WfUoxQWJxyI cL020vHRXX+5QabE/pMO9jHbwocXlCJVlXJWKtJgU8PiE84lIKy/63/tJ3CaIvPG Lci79CI3mw6JptXVK3YV91ZRVyjHWbfkYc2bZuiH/AthHo46vNyMOYNOiN0auM3t hF1KDQXCqSrYOBk6j/qgu3RdzH7pFdgJgj5mnR5gFEN6oHHgowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNKoiOYXk0qy9yYTjJjD+kRa/3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDE3Y2U4MzItMGI5MS0z YTM1LTkzYzEtNjkzNjg4MjY0ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxM1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2Um4dZxU1znmWwbNm0+8k8jgRRMSXJY6+kHt30bzXKaCsxE/CT+nvB zcDvYiEqL6mgcvvfqB8584ap34KRWlRxE4eDGiHGNSy+NgIn6iStMTBGAXs7x/5G wtv00gWqQ4m8z7t43RvFrpkKhRduHY8xz6eI5yxMVBbY/vSDtlG1Rp9WzMxHC/yH JEMuCH/uiz0gbbuwMgInPWF1Vj7IQgqh/zTWPPkBkvP0F2VNBPBzV5zB9mDocNtJ p4rei8ejoY3BAX5U+0pGxRqBztv4vepIimmD1EsiyBTSICW5cUyko0iCWS0z38lM oxTtIkGaCs8MK7km55g8/X1OvtZRKeQ= -----END CERTIFICATE-----Generated at Thu Mar 26 21:09:59 2026 by rpki-client