$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa File: 479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa (raw, json) Hash identifier: xcmI5KnHWApmbhlciAID5lOnEJx43GJMc2hprkyjddo= Subject key identifier: 72:AA:EF:D9:31:ED:30:E2:68:97:A0:76:BD:0D:18:D9:3D:11:34:02 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4EC9908C2EABD8DA44E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 13714 IP address blocks: 192.149.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4e:c9:90:8c:2e:ab:d8:da:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=89bbc54a-8e35-470c-8b6a-0efeb00fc150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:57:05:9d:14:da:6e:bd:a7:19:fe:53:b0: 52:28:0e:bc:fe:99:46:a7:32:93:d0:2c:26:38:6d: 6a:ed:c5:36:11:15:ca:10:49:b0:09:32:28:e5:5f: 83:2c:d8:b4:32:36:e6:df:f7:8b:50:60:1b:bf:76: 4e:3d:86:8f:92:87:16:ff:ef:e2:4e:3a:72:37:b3: af:4e:9b:f8:d3:dd:c6:65:31:1b:09:e4:47:25:03: 82:1b:f2:54:23:98:08:bf:67:9e:5b:a2:0c:b0:e6: 99:01:bf:e4:13:5e:8e:c5:e3:6d:c0:0e:01:2f:53: 81:3e:8d:a7:f9:6c:1e:8f:76:01:ee:30:c8:0a:20: ce:fe:00:a9:f0:a3:a5:ee:e3:fc:f4:04:20:59:d1: 9f:f3:d0:66:fa:9d:de:e0:77:8b:da:06:9c:ad:c4: d6:26:47:eb:87:21:5a:6b:04:83:78:93:2d:4f:4d: 55:5a:55:3d:f2:c4:b2:73:0e:54:55:c8:92:a7:59: 98:21:50:9c:01:9b:19:92:30:f0:ab:c8:96:69:d8: 22:62:c4:91:a6:4c:8f:68:68:75:fc:5b:b0:d0:fa: 0e:ff:9f:78:9e:70:a9:ba:25:7d:6c:5a:ab:5f:ea: 62:4c:2f:bd:e9:f3:ad:3a:f5:b1:cd:e6:e0:91:1d: 16:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:EF:D9:31:ED:30:E2:68:97:A0:76:BD:0D:18:D9:3D:11:34:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 192.149.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b0:bd:4c:ec:e8:7d:60:d2:c4:25:dc:37:97:ef:37:34:cc: d7:d9:1e:6c:da:40:37:7e:40:b8:09:21:2f:d8:1f:b5:ed:09: 5b:17:bf:9a:1b:ee:a5:b2:02:13:cc:1c:06:38:b9:b8:76:54: f4:65:b8:96:95:5b:54:c2:09:91:09:34:59:95:eb:00:5b:f6: db:d3:0a:3e:5a:ff:35:c8:31:a6:ab:9a:f8:fc:e8:40:00:e0: eb:b4:99:eb:73:65:2d:58:c3:7d:cf:b1:9a:24:11:56:35:50: d7:c8:38:6b:e8:25:b3:94:ea:82:21:3b:ae:a3:d6:d8:0c:5d: cb:11:ad:d9:87:38:b8:b0:7f:ec:a7:31:76:04:8f:d1:44:1c: 20:1b:1a:9f:9a:42:8b:9d:33:2f:f4:37:b5:d7:45:fd:4d:a2: 86:b3:1c:e9:d7:bb:ef:3c:c0:c0:c8:ae:f4:bf:cf:be:10:a8: 9b:93:6b:36:ec:ad:1f:42:ad:81:e3:25:ad:04:15:11:ff:fa: 59:c8:bf:4d:f5:b4:50:e0:92:2c:d4:26:cb:fa:55:3c:26:fa: 18:ad:c1:2f:dd:56:ab:05:7a:e7:b7:41:cc:70:21:6d:2f:7c: 7e:f9:d2:8e:fe:c4:60:0c:bb:b8:65:09:e4:50:ce:78:9f:53: fd:89:49:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jek7JkIwuq9jaROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODliYmM1NGEtOGUzNS00NzBjLThiNmEtMGVmZWIwMGZjMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8ZXBZ0U2m69pxn+U7BSKA68/plGpzKT0Cwm OG1q7cU2ERXKEEmwCTIo5V+DLNi0Mjbm3/eLUGAbv3ZOPYaPkocW/+/iTjpyN7Ov Tpv4093GZTEbCeRHJQOCG/JUI5gIv2eeW6IMsOaZAb/kE16OxeNtwA4BL1OBPo2n +Wwej3YB7jDICiDO/gCp8KOl7uP89AQgWdGf89Bm+p3e4HeL2gacrcTWJkfrhyFa awSDeJMtT01VWlU98sSycw5UVciSp1mYIVCcAZsZkjDwq8iWadgiYsSRpkyPaGh1 /Fuw0PoO/594nnCpuiV9bFqrX+piTC+96fOtOvWxzebgkR0WFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKq79kx7TDiaJegdr0NGNk9ETQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDc5YzZiODEtOWZiMS0z NmU1LTkyODMtZjhiNGM0ZjBmYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJU/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGwvUzs6H1g0sQl3DeX7zc0zNfZHmzaQDd+QLgJIS/YH7XtCVsXv5ob 7qWyAhPMHAY4ubh2VPRluJaVW1TCCZEJNFmV6wBb9tvTCj5a/zXIMaarmvj86EAA 4Ou0metzZS1Yw33PsZokEVY1UNfIOGvoJbOU6oIhO66j1tgMXcsRrdmHOLiwf+yn MXYEj9FEHCAbGp+aQoudMy/0N7XXRf1NooazHOnXu+88wMDIrvS/z74QqJuTazbs rR9CrYHjJa0EFRH/+lnIv031tFDgkizUJsv6VTwm+hitwS/dVqsFeue3QcxwIW0v fH750o7+xGAMu7hlCeRQznifU/2JSTI= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:36 2026 by rpki-client