$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa File: 2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa (raw, json) Hash identifier: PLXXQghzR5S+aBU30JW0rCwNMzCUUKl6MJBd2BpRnTo= Subject key identifier: AE:C3:E8:5A:3F:9E:CE:B4:92:D5:3D:95:A7:15:3C:0F:42:49:D2:85 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A5EC19150F130654B3580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 199.249.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:5e:c1:91:50:f1:30:65:4b:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e5e1a41a-e772-4c78-a9ca-6b7718ddb0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:f5:a8:24:8b:de:47:94:11:09:c5:16:a7: b8:be:97:5d:cf:e1:f6:eb:2c:21:6d:6b:6d:2a:eb: b5:1b:16:62:18:64:71:dd:67:cf:1b:b2:04:e3:cd: 3b:13:42:41:91:92:86:6e:38:d6:be:73:1c:94:b3: 5f:e8:6e:cf:45:2a:cf:99:89:97:14:7b:45:f7:d8: 6c:a5:dd:0b:2a:0c:64:04:7a:de:74:08:43:38:05: a9:02:00:e2:5e:25:d0:90:09:81:35:ed:77:8b:70: 47:35:63:cf:35:a8:bc:f1:7d:ea:78:00:ef:84:2e: e5:d6:24:4d:4f:8d:7f:b7:d2:0b:28:a8:be:7f:95: 96:72:46:a7:59:4f:dc:0d:ec:49:56:3c:45:9e:f7: 3b:f3:6a:92:6e:d3:39:ce:9a:d1:46:e2:36:0b:b3: 4f:12:60:73:04:5f:25:1d:ad:e7:5d:fd:bc:0c:30: 27:21:f6:12:7d:27:45:33:58:fc:cf:f5:36:ae:25: 05:35:00:7c:58:0b:e0:f1:a5:e4:5c:1f:68:2b:38: ea:b6:ba:6c:6d:02:23:85:df:ae:63:2e:ab:52:a7: a7:7d:1e:3e:72:38:01:aa:53:f1:0a:7d:c7:b2:0f: 05:b2:68:7d:83:8b:80:3c:dd:cc:72:1a:cc:85:68: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C3:E8:5A:3F:9E:CE:B4:92:D5:3D:95:A7:15:3C:0F:42:49:D2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:39:ad:50:a5:a7:76:2b:71:2c:73:a8:e0:60:ee:cf:19:a8: f1:4c:21:42:13:e3:1a:dc:3a:0f:c4:f5:9b:b0:aa:ac:35:68: dd:53:2f:d5:4c:9b:9a:01:17:59:25:d4:63:86:a2:f5:34:81: 2e:db:44:1d:7f:c2:67:01:37:c7:67:39:32:1e:38:47:12:0d: b8:57:35:16:85:5d:d2:50:ba:7c:75:5e:42:33:2c:a7:24:36: 25:75:5e:ab:bb:68:08:41:e6:10:d4:a0:ed:f2:95:54:e9:9b: 2a:7c:46:fe:a3:fa:f5:cc:fe:f1:60:59:45:1b:23:29:c1:db: 51:54:9f:6c:6e:88:08:26:44:38:74:fe:3a:9a:b4:64:32:98: d9:e1:d5:02:11:83:08:c4:86:08:e3:fb:cf:df:13:f7:47:92: 52:51:bf:f3:35:25:11:b6:3b:ef:15:a8:11:16:1a:32:18:e9: 0e:44:05:01:f1:fd:39:08:33:2b:5e:44:cf:b1:db:52:ef:8b: 86:8c:27:a8:87:53:c7:8a:e3:da:3f:5c:72:99:13:d6:c5:82: 53:6e:ae:94:ca:a8:10:d9:95:86:c8:81:31:ba:ee:f2:a1:3f: 93:3e:5e:9c:37:19:cd:18:08:25:fc:b5:fb:d3:61:bc:7c:a6: ab:2b:e7:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jel7BkVDxMGVLNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTVlMWE0MWEtZTc3Mi00Yzc4LWE5Y2EtNmI3NzE4ZGRiMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAf1qCSL3keUEQnFFqe4vpddz+H26ywhbWtt Kuu1GxZiGGRx3WfPG7IE4807E0JBkZKGbjjWvnMclLNf6G7PRSrPmYmXFHtF99hs pd0LKgxkBHredAhDOAWpAgDiXiXQkAmBNe13i3BHNWPPNai88X3qeADvhC7l1iRN T41/t9ILKKi+f5WWckanWU/cDexJVjxFnvc782qSbtM5zprRRuI2C7NPEmBzBF8l Ha3nXf28DDAnIfYSfSdFM1j8z/U2riUFNQB8WAvg8aXkXB9oKzjqtrpsbQIjhd+u Yy6rUqenfR4+cjgBqlPxCn3Hsg8Fsmh9g4uAPN3MchrMhWh3NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7D6Fo/ns60ktU9lacVPA9CSdKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjIzMWI4ZWMtOWM0Yy0z ZmIwLTg4NmUtZjNlOGMxZjllNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKc5rVClp3YrcSxzqOBg7s8ZqPFMIUIT4xrcOg/E9Zuwqqw1aN1TL9VM m5oBF1kl1GOGovU0gS7bRB1/wmcBN8dnOTIeOEcSDbhXNRaFXdJQunx1XkIzLKck NiV1Xqu7aAhB5hDUoO3ylVTpmyp8Rv6j+vXM/vFgWUUbIynB21FUn2xuiAgmRDh0 /jqatGQymNnh1QIRgwjEhgjj+8/fE/dHklJRv/M1JRG2O+8VqBEWGjIY6Q5EBQHx /TkIMyteRM+x21Lvi4aMJ6iHU8eK49o/XHKZE9bFglNurpTKqBDZlYbIgTG67vKh P5M+Xpw3Gc0YCCX8tfvTYbx8pqsr5yY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:51 2026 by rpki-client