$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46c5202a-9d84-3a1d-8956-f6014181cec4.roa File: 46c5202a-9d84-3a1d-8956-f6014181cec4.roa (raw, json) Hash identifier: xhlJsDyVVw36joxazV7B9UVmVJP6Bfy4ycn3QEPykfA= Subject key identifier: B0:EF:D1:9B:80:D7:B5:10:10:E5:BD:74:26:62:65:07:BB:0C:C9:B0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A074B2CCB839C9A61AC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46c5202a-9d84-3a1d-8956-f6014181cec4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.249.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:07:4b:2c:cb:83:9c:9a:61:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f9b2bad8-5334-479f-af5c-8252b1df6410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:b9:ef:e1:b6:65:e3:89:5e:af:bb:fc:36: 1d:26:27:08:bc:45:3e:97:2b:71:4a:f3:98:e0:58: 71:28:12:43:0c:8d:89:48:0f:cb:c8:56:a4:c7:1c: 5e:17:7d:8c:f4:c9:e7:20:4e:75:64:c0:c1:2c:f5: 06:40:c0:54:6b:91:45:fb:fa:4c:28:7d:aa:41:22: aa:71:68:19:41:24:85:61:d4:6c:22:d3:88:14:fc: 35:a5:6d:3c:d2:24:b1:a0:f1:df:de:0e:d7:b4:52: 15:49:a1:c8:e0:4c:c2:22:09:bd:12:fd:ad:95:d6: aa:97:36:01:a5:0f:fc:99:33:e1:bd:41:47:64:d8: 44:d0:62:01:6f:2f:60:ad:3c:2a:4e:a0:4b:ff:82: 2a:70:14:50:b0:c7:37:f6:64:c0:51:4b:eb:e3:1c: 58:62:61:e5:f1:39:c5:7f:7b:6b:b2:9a:9f:c3:de: 34:16:1f:07:e0:d8:6c:11:9a:19:4a:aa:41:36:cf: 99:ba:51:d5:e0:9d:c5:76:88:4c:8e:70:ca:6b:81: d4:64:fc:a9:de:aa:1c:e0:6c:47:be:9f:58:a6:f0: 98:7a:33:d0:94:7a:66:17:41:10:e7:c2:bd:64:dd: 2f:05:65:56:3a:77:32:1c:6d:a7:05:65:91:ee:4d: 4f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EF:D1:9B:80:D7:B5:10:10:E5:BD:74:26:62:65:07:BB:0C:C9:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46c5202a-9d84-3a1d-8956-f6014181cec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2f:b5:e0:9e:ed:ee:16:82:e4:d8:f4:e2:79:5b:f8:15:e7: 44:f5:6c:64:82:af:46:79:3f:81:f8:48:1d:e8:cc:d8:1c:a5: f4:9c:c4:ed:b4:5c:f7:bb:12:93:21:60:4f:49:b4:be:40:a6: 48:95:31:3b:fa:ee:8c:de:8a:d9:48:ec:66:fd:25:9a:97:d5: 72:53:58:bc:c8:a4:14:ca:3e:25:0c:72:18:f2:79:4b:3d:14: 47:c6:05:99:0b:16:87:ce:62:de:04:b5:d3:31:73:76:e8:93: a7:a1:6a:7e:fd:df:9b:4b:75:21:d4:fd:22:21:55:04:53:bd: 63:a6:fa:23:da:ce:09:08:aa:36:c4:e1:a6:56:dc:e7:b0:dd: 8c:6b:db:55:49:a9:32:31:26:97:87:fc:ef:53:51:39:72:29: 60:00:aa:e0:53:3e:aa:d1:e8:54:9a:0b:e4:d9:ee:82:f3:08: 15:ee:4b:92:02:2b:fd:37:76:a0:8f:3d:37:ed:d6:8b:11:9f: 5b:bb:0e:b4:ad:78:25:9c:db:3e:58:93:ee:db:d6:4e:f7:4e: 2d:47:ed:41:3d:d6:71:2f:b2:73:a3:66:24:ef:d5:f7:da:48: 97:3f:63:52:6a:3f:f8:a8:68:e5:b0:2c:44:c1:c5:ca:5c:b6: 2f:20:33:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegdLLMuDnJphrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjliMmJhZDgtNTMzNC00NzlmLWFmNWMtODI1MmIxZGY2NDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKq57+G2ZeOJXq+7/DYdJicIvEU+lytxSvOY 4FhxKBJDDI2JSA/LyFakxxxeF32M9MnnIE51ZMDBLPUGQMBUa5FF+/pMKH2qQSKq cWgZQSSFYdRsItOIFPw1pW080iSxoPHf3g7XtFIVSaHI4EzCIgm9Ev2tldaqlzYB pQ/8mTPhvUFHZNhE0GIBby9grTwqTqBL/4IqcBRQsMc39mTAUUvr4xxYYmHl8TnF f3trspqfw940Fh8H4NhsEZoZSqpBNs+ZulHV4J3FdohMjnDKa4HUZPyp3qoc4GxH vp9YpvCYejPQlHpmF0EQ58K9ZN0vBWVWOncyHG2nBWWR7k1P2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDv0ZuA17UQEOW9dCZiZQe7DMmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDZjNTIwMmEtOWQ4NC0z YTFkLTg5NTYtZjYwMTQxODFjZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkvteCe7e4WguTY9OJ5W/gV50T1bGSCr0Z5P4H4SB3ozNgcpfScxO20 XPe7EpMhYE9JtL5ApkiVMTv67ozeitlI7Gb9JZqX1XJTWLzIpBTKPiUMchjyeUs9 FEfGBZkLFofOYt4EtdMxc3bok6ehan7935tLdSHU/SIhVQRTvWOm+iPazgkIqjbE 4aZW3Oew3Yxr21VJqTIxJpeH/O9TUTlyKWAAquBTPqrR6FSaC+TZ7oLzCBXuS5IC K/03dqCPPTft1osRn1u7DrSteCWc2z5Yk+7b1k73Ti1H7UE91nEvsnOjZiTv1ffa SJc/Y1JqP/ioaOWwLETBxcpcti8gM1o= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:18 2026 by rpki-client