$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa File: 3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa (raw, json) Hash identifier: REcv3oUMSljLTEkzhw4y+4WW+I5N/V4FU34uudhh5DI= Subject key identifier: CE:FD:0E:BE:63:A3:AB:51:BC:FB:B9:33:F2:E5:EA:26:C3:AD:BC:8F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3F03FCB503001D3BA5E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.253.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3f:03:fc:b5:03:00:1d:3b:a5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=321d8e32-4cd7-4639-b8c4-a0002fb24b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:41:9a:6a:0c:e0:df:d0:bc:ae:5d:b1:3b:95: c5:41:64:cf:69:aa:d7:93:34:15:03:b6:84:af:ff: a2:67:41:24:bd:4a:8d:09:35:7f:39:da:a5:7c:f6: 96:c4:91:9c:45:e9:cd:bb:ff:22:b6:8b:2d:ca:ff: 2b:6f:fa:e7:fa:24:23:ce:c1:38:f5:42:0c:32:38: e2:1c:75:24:a7:c2:87:fc:8b:1e:c4:40:99:fb:1b: 16:92:0e:58:bd:52:6d:b2:e4:2b:4c:db:90:62:c7: 3c:6f:81:52:77:d6:b9:21:32:62:d4:ef:54:28:47: b3:6e:f1:c2:14:95:0a:07:e2:84:3f:c4:a8:46:c7: 6e:7c:87:f1:59:72:5f:b5:e9:8c:b4:bc:a8:ca:1b: 93:1a:fe:ee:8c:a3:f9:c7:f7:71:e1:a3:40:10:21: c8:83:6f:cf:c2:22:b1:2b:72:c8:75:77:b8:a2:d1: c7:c5:aa:52:1d:71:92:48:a9:6a:f1:f6:99:3a:30: fb:c4:de:fe:46:00:e7:54:e1:e8:df:c2:8d:b3:19: b1:6e:26:e1:4a:39:b5:d5:6a:9c:a9:4a:db:82:c6: 6a:a0:6e:7d:84:55:1e:af:29:13:84:22:59:69:01: 9a:7f:43:01:ed:56:41:70:e0:14:4e:7c:45:bb:ab: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FD:0E:BE:63:A3:AB:51:BC:FB:B9:33:F2:E5:EA:26:C3:AD:BC:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6e:d0:96:30:6c:ed:7d:90:97:a6:0c:87:33:72:f1:5a:99: 9f:0d:71:37:c2:65:7f:f7:43:7a:f5:8d:6c:3c:7b:71:d8:e7: f3:23:83:82:b4:c1:1a:38:b4:68:da:55:31:ec:42:33:71:84: a6:9f:b5:93:b8:75:55:6f:27:53:5c:25:28:32:0a:4a:24:d0: b1:32:6c:8d:15:8a:55:71:64:99:3c:7f:15:81:f6:ef:f5:78: 9e:99:8f:76:d3:b4:6c:7b:8f:5e:ed:1b:86:75:cd:3e:26:8a: 79:d1:8b:1f:8e:92:72:10:44:a0:0d:6f:49:f8:1a:e0:c4:65: 69:6a:c2:36:8e:9f:e4:06:30:8e:d3:21:cf:e4:0f:71:6c:2e: c0:51:5b:f3:09:2f:94:76:5c:b0:16:93:9a:f3:ab:a0:1b:44: 8e:54:a1:79:b3:3e:81:9e:51:90:76:66:23:5b:e6:38:11:ae: 1a:4c:2a:f5:bd:a8:20:38:7f:e0:ca:2b:1a:f5:a0:b1:92:6c: e3:9b:c6:ca:59:12:06:67:a3:47:90:99:f0:28:92:5b:7c:b1: 7b:a1:1a:64:76:52:07:39:7a:1e:cc:6c:51:a2:c6:98:b4:6b: 77:49:bb:c0:c2:a2:d4:1d:e5:20:b5:f2:61:42:b0:6b:67:ab: 09:c9:d1:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jej8D/LUDAB07peAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzIxZDhlMzItNGNkNy00NjM5LWI4YzQtYTAwMDJmYjI0YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/kGaagzg39C8rl2xO5XFQWTPaarXkzQVA7aE r/+iZ0EkvUqNCTV/OdqlfPaWxJGcRenNu/8itostyv8rb/rn+iQjzsE49UIMMjji HHUkp8KH/IsexECZ+xsWkg5YvVJtsuQrTNuQYsc8b4FSd9a5ITJi1O9UKEezbvHC FJUKB+KEP8SoRsdufIfxWXJftemMtLyoyhuTGv7ujKP5x/dx4aNAECHIg2/PwiKx K3LIdXe4otHHxapSHXGSSKlq8faZOjD7xN7+RgDnVOHo38KNsxmxbibhSjm11Wqc qUrbgsZqoG59hFUerykThCJZaQGaf0MB7VZBcOAUTnxFu6uyvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM79Dr5jo6tRvPu5M/Ll6ibDrbyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzk1M2NjYmQtM2M5ZC0z N2FlLWEzYWUtZWY3NjAxNjcwMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdu0JYwbO19kJemDIczcvFamZ8NcTfCZX/3Q3r1jWw8e3HY5/Mjg4K0 wRo4tGjaVTHsQjNxhKaftZO4dVVvJ1NcJSgyCkok0LEybI0VilVxZJk8fxWB9u/1 eJ6Zj3bTtGx7j17tG4Z1zT4minnRix+OknIQRKANb0n4GuDEZWlqwjaOn+QGMI7T Ic/kD3FsLsBRW/MJL5R2XLAWk5rzq6AbRI5UoXmzPoGeUZB2ZiNb5jgRrhpMKvW9 qCA4f+DKKxr1oLGSbOObxspZEgZno0eQmfAoklt8sXuhGmR2Ugc5eh7MbFGixpi0 a3dJu8DCotQd5SC18mFCsGtnqwnJ0c4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:42 2026 by rpki-client