$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/25288322-c799-369c-9460-850a0e2897f4.roa File: 25288322-c799-369c-9460-850a0e2897f4.roa (raw, json) Hash identifier: Q9sHxK5KQruNdhAEKDwpPIFc10lmaPho7VgUKBEqnqk= Subject key identifier: F1:1D:DF:4F:F9:5F:97:42:9C:5F:3D:60:3A:FC:76:68:73:8F:48:6D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3F3C6965BF7F9F3AC600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/25288322-c799-369c-9460-850a0e2897f4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.182.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3f:3c:69:65:bf:7f:9f:3a:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=89e03f19-8207-421a-93bc-10b1f99e329c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:de:b4:bb:f1:f6:6a:3b:cf:14:9d:b2:56: 78:6e:0f:9f:6e:67:ec:17:20:3d:a7:33:b0:b5:d8: a0:b9:cb:a5:2a:87:4c:a2:ab:e6:e5:83:b0:17:c5: e3:55:da:08:ac:23:63:ee:f3:4b:27:30:62:a7:7e: e7:8c:fe:51:ff:d2:4f:f5:54:5a:00:5a:05:96:fd: 7f:71:5f:6b:c7:00:a6:94:10:5b:bd:3b:75:95:28: 9f:81:d6:19:41:11:25:08:53:4e:6c:d6:ff:60:a6: 48:db:f5:b1:c6:c6:fb:2f:72:5f:d8:a7:d3:29:f6: a4:15:fb:36:db:5c:e1:b0:ca:67:56:a3:9d:35:c7: e7:21:51:ae:82:2b:eb:0b:99:6e:53:ed:b3:19:4b: a8:2a:36:80:7d:f4:27:0e:cf:52:fe:b5:5f:49:b2: b1:61:e4:12:71:79:5c:c5:58:0f:ec:87:cf:ed:b7: bb:4c:d5:f4:75:09:a0:dc:fb:64:63:5a:a0:32:61: 65:6e:04:43:5e:77:10:00:45:13:f3:5a:48:ad:ca: d1:19:8a:d9:0f:39:1b:98:0d:b4:08:26:22:dc:41: 3d:38:c9:ca:50:ec:d7:6e:78:33:cc:29:e5:2f:c0: 08:ec:08:d3:4b:8c:4b:b3:e9:c5:13:34:0c:da:89: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1D:DF:4F:F9:5F:97:42:9C:5F:3D:60:3A:FC:76:68:73:8F:48:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/25288322-c799-369c-9460-850a0e2897f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e8:5e:60:db:9a:94:9e:f1:39:c7:5c:fa:c2:93:9a:17:54: 86:af:11:e6:e4:17:8b:f5:c7:b4:4b:58:81:f5:69:9e:5c:ab: cc:54:65:69:11:ec:45:12:53:c8:6f:77:df:9c:5a:d6:51:c9: 25:a0:f0:a8:83:65:6f:49:53:99:c6:8d:57:a8:33:e9:14:9c: 4a:36:6c:a3:62:d0:a8:4e:a1:62:f3:4f:6d:42:1f:be:fa:c6: bf:ae:20:09:d2:ce:e5:51:a0:7d:2b:9a:38:0b:e4:8e:dc:ec: d4:e3:85:f6:45:00:57:1b:cc:2f:3e:52:0a:97:d3:04:40:c8: b3:8c:02:bd:04:a7:cd:7d:1f:1e:3c:c0:25:8b:8d:d5:2f:cc: a8:e7:5b:8d:95:40:07:a9:8b:69:97:a3:cc:db:39:c3:33:ae: 10:af:de:01:55:ca:d1:8c:16:93:12:54:43:95:0b:8a:0c:e3: af:b2:dd:70:fb:a9:cf:9b:61:cb:a7:ba:92:39:4f:64:01:e3: e2:01:06:8e:81:a1:64:16:6c:23:9e:94:5f:8c:59:7b:ef:77: 77:fb:6e:39:6f:89:00:30:58:97:b4:ab:20:45:8e:53:d3:01: 80:99:f9:03:d0:ca:23:c0:ec:0d:6f:7d:7d:17:5f:4e:96:d4: 76:57:f8:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jej88aWW/f586xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODllMDNmMTktODIwNy00MjFhLTkzYmMtMTBiMWY5OWUzMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjczetLvx9mo7zxSdslZ4bg+fbmfsFyA9pzOw tdiguculKodMoqvm5YOwF8XjVdoIrCNj7vNLJzBip37njP5R/9JP9VRaAFoFlv1/ cV9rxwCmlBBbvTt1lSifgdYZQRElCFNObNb/YKZI2/Wxxsb7L3Jf2KfTKfakFfs2 21zhsMpnVqOdNcfnIVGugivrC5luU+2zGUuoKjaAffQnDs9S/rVfSbKxYeQScXlc xVgP7IfP7be7TNX0dQmg3PtkY1qgMmFlbgRDXncQAEUT81pIrcrRGYrZDzkbmA20 CCYi3EE9OMnKUOzXbngzzCnlL8AI7AjTS4xLs+nFEzQM2omxmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEd30/5X5dCnF89YDr8dmhzj0htMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjUyODgzMjItYzc5OS0z NjljLTk0NjAtODUwYTBlMjg5N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDoXmDbmpSe8TnHXPrCk5oXVIavEebkF4v1x7RLWIH1aZ5cq8xUZWkR 7EUSU8hvd9+cWtZRySWg8KiDZW9JU5nGjVeoM+kUnEo2bKNi0KhOoWLzT21CH776 xr+uIAnSzuVRoH0rmjgL5I7c7NTjhfZFAFcbzC8+UgqX0wRAyLOMAr0Ep819Hx48 wCWLjdUvzKjnW42VQAepi2mXo8zbOcMzrhCv3gFVytGMFpMSVEOVC4oM46+y3XD7 qc+bYcunupI5T2QB4+IBBo6BoWQWbCOelF+MWXvvd3f7bjlviQAwWJe0qyBFjlPT AYCZ+QPQyiPA7A1vfX0XX06W1HZX+Nw= -----END CERTIFICATE-----Generated at Thu Mar 26 12:46:58 2026 by rpki-client