$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/497fed05-f30a-3532-96a3-e283e59854ba.roa File: 497fed05-f30a-3532-96a3-e283e59854ba.roa (raw, json) Hash identifier: XQ9LcFna1Jgmr17MqmJNo2e6khjnfg0PudBGn25b1dI= Subject key identifier: 75:A8:A5:7B:17:C4:B0:D9:76:73:15:DE:64:13:DC:43:DA:0D:F1:1B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A0853B6332E8788903F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/497fed05-f30a-3532-96a3-e283e59854ba.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.182.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:08:53:b6:33:2e:87:88:90:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=39258d37-6831-4642-acd5-750e95c03074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d2:a6:79:13:82:75:39:11:31:ec:87:a8:ff: 33:13:d2:1a:1e:e4:5b:e9:29:8d:14:ec:91:2e:97: 14:15:fd:ea:09:83:02:e9:f0:52:6e:dd:84:1a:b5: 4c:a7:37:4a:e9:4b:20:e6:73:f9:03:c1:59:41:5a: 9e:82:48:7f:ec:7e:f9:47:5b:eb:49:4b:dc:82:12: 15:29:70:da:33:b4:3c:86:6e:a9:26:46:71:54:4e: 8e:e4:99:a1:e4:51:ad:79:35:61:c6:53:f4:14:85: 6e:d7:a9:e1:86:fd:ab:76:c4:3e:12:5b:14:a5:16: 83:b8:22:e5:cb:89:d9:55:6a:cb:0c:6e:92:0a:6a: 74:73:9e:46:f6:08:58:4e:85:8f:23:be:11:fe:a3: 14:dd:c8:a5:f4:ac:64:a8:92:66:19:0e:3b:1e:31: 93:db:42:97:6f:34:bd:aa:50:90:13:63:49:1b:40: 79:92:6c:c2:34:ce:bc:e7:3d:38:9f:60:da:13:60: b1:68:bc:d7:91:01:55:c8:a7:5a:c6:11:b5:8a:43: e4:ec:95:a5:bc:de:52:87:52:42:61:26:51:75:e9: 95:23:9e:41:7b:77:1c:ea:c0:63:bc:e7:c9:44:b7: ba:1b:c8:4f:31:74:5d:06:1b:1b:25:22:79:02:c6: 13:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A8:A5:7B:17:C4:B0:D9:76:73:15:DE:64:13:DC:43:DA:0D:F1:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/497fed05-f30a-3532-96a3-e283e59854ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f7:af:5a:e9:a9:13:1c:ae:d2:0f:04:11:dc:e3:58:5d:2a: bd:7c:18:02:c6:64:f3:67:37:51:8c:a7:fd:bf:57:1d:dd:b4: db:00:5f:98:ba:16:c2:fe:b2:b2:cd:85:46:e3:c2:a3:30:f2: 2d:a1:53:86:63:ca:52:b8:e9:d1:bd:d0:f5:78:71:11:34:e3: 3a:54:d1:4b:77:76:c2:ec:0b:ce:e4:60:e6:1a:db:48:4e:7e: 9a:3b:23:57:8e:f0:f6:6d:10:23:38:26:9d:e4:ec:9d:a3:f4: 29:f5:4d:76:39:2b:e4:33:d8:45:c1:b5:4f:d2:cd:e8:08:a4: f6:59:03:df:1e:b0:59:39:56:78:5b:eb:43:37:4c:2a:cb:25: d6:b7:48:9e:d9:70:55:4e:0c:a8:ba:d3:06:70:e8:19:4b:d1: a5:57:6d:75:f0:7c:34:a9:69:ad:6f:8b:1d:80:14:70:00:40: e2:1a:82:8f:7d:99:a9:b1:cd:c0:0c:86:a0:c8:66:2e:ee:7d: 29:6e:e3:92:ab:8f:4f:60:09:b8:4a:85:4c:82:1f:33:71:c7: 2e:a4:82:d3:37:72:3d:c9:0a:18:c3:6b:4b:2f:53:eb:56:ef: 56:b5:ae:30:af:30:e1:2d:a6:30:8b:e9:2c:43:1c:45:de:02: 3a:ff:2a:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeghTtjMuh4iQPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzkyNThkMzctNjgzMS00NjQyLWFjZDUtNzUwZTk1YzAzMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9KmeROCdTkRMeyHqP8zE9IaHuRb6SmNFOyR LpcUFf3qCYMC6fBSbt2EGrVMpzdK6Usg5nP5A8FZQVqegkh/7H75R1vrSUvcghIV KXDaM7Q8hm6pJkZxVE6O5Jmh5FGteTVhxlP0FIVu16nhhv2rdsQ+ElsUpRaDuCLl y4nZVWrLDG6SCmp0c55G9ghYToWPI74R/qMU3cil9KxkqJJmGQ47HjGT20KXbzS9 qlCQE2NJG0B5kmzCNM685z04n2DaE2CxaLzXkQFVyKdaxhG1ikPk7JWlvN5Sh1JC YSZRdemVI55Be3cc6sBjvOfJRLe6G8hPMXRdBhsbJSJ5AsYTSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWopXsXxLDZdnMV3mQT3EPaDfEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDk3ZmVkMDUtZjMwYS0z NTMyLTk2YTMtZTI4M2U1OTg1NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn3r1rpqRMcrtIPBBHc41hdKr18GALGZPNnN1GMp/2/Vx3dtNsAX5i6 FsL+srLNhUbjwqMw8i2hU4ZjylK46dG90PV4cRE04zpU0Ut3dsLsC87kYOYa20hO fpo7I1eO8PZtECM4Jp3k7J2j9Cn1TXY5K+Qz2EXBtU/SzegIpPZZA98esFk5Vnhb 60M3TCrLJda3SJ7ZcFVODKi60wZw6BlL0aVXbXXwfDSpaa1vix2AFHAAQOIago99 mamxzcAMhqDIZi7ufSlu45Krj09gCbhKhUyCHzNxxy6kgtM3cj3JChjDa0svU+tW 71a1rjCvMOEtpjCL6SxDHEXeAjr/Ku8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:26 2026 by rpki-client