$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dc505b5-ebe6-3e64-9df1-ea1e2a7dad76.roa File: 0dc505b5-ebe6-3e64-9df1-ea1e2a7dad76.roa (raw, json) Hash identifier: t2OADMeG8K0bihwkmrqPN4MBLeyLkQ4zi+YSJFtLsbs= Subject key identifier: 1B:CD:10:FC:0D:41:9E:1F:95:64:C7:3B:D0:34:F6:81:16:24:EB:67 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A54FF8FFA314951518040 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dc505b5-ebe6-3e64-9df1-ea1e2a7dad76.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.254.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:54:ff:8f:fa:31:49:51:51:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=159663de-3bc8-4b26-a8ea-007da5786730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:ad:59:f5:ef:65:0f:e2:6a:07:b5:40:5c: f3:8d:87:d2:34:8d:5d:a3:5e:99:94:dc:31:8b:08: 6f:dd:83:67:da:4f:69:12:0c:f5:0f:54:19:51:cd: cc:00:34:a3:83:2d:96:be:6f:fa:bc:25:d0:34:fb: 43:36:d1:10:c4:be:70:3c:19:5b:27:c1:66:d8:21: 18:f6:80:de:38:ba:d8:c6:db:8b:cf:d3:da:db:93: 5b:69:54:45:e4:dd:ae:4d:8e:e6:33:71:42:a9:f8: 19:5b:69:a8:26:78:79:66:b8:7a:25:37:cd:ef:05: 45:2e:c2:f9:af:8c:be:64:1e:44:2f:3a:af:94:f5: f6:ea:d6:9b:fa:9a:f1:40:53:12:60:c1:fb:08:01: f3:70:4f:a7:1d:13:fc:09:c3:8a:d6:1f:ec:c6:6d: ea:06:c6:21:26:0e:cf:b7:df:ee:40:c9:6e:71:49: 0b:14:0c:be:dd:b8:88:28:f2:57:88:97:15:e2:e2: e0:d1:41:ae:52:c2:a4:f8:be:54:cc:14:e1:0b:e3: 43:02:2a:85:d1:7e:d7:2e:01:ba:b7:95:25:f0:5c: 40:e9:4e:c7:bb:fd:c5:54:fc:06:63:71:ce:6f:d8: 7f:01:e5:da:51:db:c3:01:d5:43:4b:a0:5b:59:db: 3a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:10:FC:0D:41:9E:1F:95:64:C7:3B:D0:34:F6:81:16:24:EB:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dc505b5-ebe6-3e64-9df1-ea1e2a7dad76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8b:3a:7e:4c:8d:06:6d:fa:21:92:17:cb:6c:d0:5e:0d:fc: 04:79:e7:13:5f:48:c7:25:2a:b2:d7:b8:94:76:29:7a:8d:ca: 81:50:db:43:5e:df:00:06:8b:f0:2f:6d:66:72:d6:f3:ea:cb: 8f:88:2e:94:2f:ce:28:7a:ce:12:b9:d8:04:62:67:3e:03:2a: 2e:20:0e:f9:08:12:50:9c:50:e7:31:e8:e7:49:e7:a7:2d:d5: 47:fc:fd:80:3a:bf:86:08:7f:90:78:8a:46:91:60:fa:bc:a7: 55:e4:b5:eb:83:1b:85:08:9f:56:eb:63:a1:0e:78:65:e0:77: 77:87:41:a4:de:11:f3:b3:ee:d3:75:c8:38:30:fc:91:5d:ce: 87:ff:01:5e:1c:3a:df:0c:e5:b5:fd:ff:a0:14:79:ee:31:9d: c6:32:e6:33:82:51:de:15:94:5f:6b:39:73:f2:ba:dc:0e:d7: 07:1a:fd:6a:40:75:57:02:5b:78:6d:32:9e:58:ba:1d:35:16: fb:43:e9:a6:fd:0f:ed:bb:63:f3:e9:cd:3e:f7:2a:99:3e:61: 75:fd:2d:1d:9f:3b:16:21:62:d2:87:d4:5c:54:f6:8b:e0:fd: d6:87:c0:60:ef:04:7e:d3:f0:7f:58:fc:87:6c:41:69:50:9d: 4b:cf:eb:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelT/j/oxSVFRgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTU5NjYzZGUtM2JjOC00YjI2LWE4ZWEtMDA3ZGE1Nzg2NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZStWfXvZQ/iage1QFzzjYfSNI1do16ZlNwx iwhv3YNn2k9pEgz1D1QZUc3MADSjgy2Wvm/6vCXQNPtDNtEQxL5wPBlbJ8Fm2CEY 9oDeOLrYxtuLz9Pa25NbaVRF5N2uTY7mM3FCqfgZW2moJnh5Zrh6JTfN7wVFLsL5 r4y+ZB5ELzqvlPX26tab+prxQFMSYMH7CAHzcE+nHRP8CcOK1h/sxm3qBsYhJg7P t9/uQMlucUkLFAy+3biIKPJXiJcV4uLg0UGuUsKk+L5UzBThC+NDAiqF0X7XLgG6 t5Ul8FxA6U7Hu/3FVPwGY3HOb9h/AeXaUdvDAdVDS6BbWds6GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvNEPwNQZ4flWTHO9A09oEWJOtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGRjNTA1YjUtZWJlNi0z ZTY0LTlkZjEtZWExZTJhN2RhZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmLOn5MjQZt+iGSF8ts0F4N/AR55xNfSMclKrLXuJR2KXqNyoFQ20Ne 3wAGi/AvbWZy1vPqy4+ILpQvzih6zhK52ARiZz4DKi4gDvkIElCcUOcx6OdJ56ct 1Uf8/YA6v4YIf5B4ikaRYPq8p1XkteuDG4UIn1brY6EOeGXgd3eHQaTeEfOz7tN1 yDgw/JFdzof/AV4cOt8M5bX9/6AUee4xncYy5jOCUd4VlF9rOXPyutwO1wca/WpA dVcCW3htMp5Yuh01FvtD6ab9D+27Y/PpzT73Kpk+YXX9LR2fOxYhYtKH1FxU9ovg /daHwGDvBH7T8H9Y/IdsQWlQnUvP6zA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:17 2026 by rpki-client