$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa File: 536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa (raw, json) Hash identifier: O42IyZwrkzRORQM+7vBtozy9uXHZDhxeifM/xczMs9s= Subject key identifier: D9:0A:26:8C:64:26:D1:A8:A9:24:0B:DF:42:3B:87:9E:D2:9F:9D:02 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379FDFB8D2E8A8B2E660880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.253.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fd:fb:8d:2e:8a:8b:2e:66:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=5c27a148-acaf-49bd-afb9-4c75d7bc1cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2a:92:9b:39:b7:4a:6a:f0:f5:b5:76:03:3c: 32:2a:a9:f7:29:fa:54:5c:d9:8c:bb:eb:dc:77:11: 4a:84:da:89:c0:8b:44:1f:f3:69:b4:6d:d9:a2:76: 95:3c:d5:b9:d2:2f:20:8f:af:d1:e6:f9:f7:4b:a7: 82:5a:1f:19:ab:fa:e7:d6:fe:12:9f:df:92:9c:88: 10:f5:85:d7:f4:a6:33:8c:66:99:66:94:8e:54:d0: 3e:cd:47:83:12:23:14:3f:48:ee:5a:e3:53:b1:32: 3a:53:ec:61:33:d5:be:95:96:d1:cf:7f:92:0a:ae: 7f:19:bc:d7:81:b9:58:24:bf:97:26:78:96:0a:4c: b8:26:2d:83:b6:aa:d1:66:6b:84:5c:ea:47:3a:b5: f5:0b:d6:8f:c7:bf:62:35:10:da:3c:88:f3:ad:03: 19:ea:58:ed:24:4f:4a:97:55:d5:c5:23:50:54:b3: 32:d4:2a:30:00:7d:7d:05:05:ab:20:52:bd:70:9c: 43:8d:86:26:49:88:bc:ae:51:49:22:d3:39:e2:8a: 4a:1e:8c:0a:c5:f6:44:f4:4f:18:c5:3a:e4:fb:aa: b6:29:f1:f5:ed:ca:62:14:b9:74:95:b8:d4:56:e0: 74:dd:d8:1e:db:bd:6e:43:d0:69:83:27:dd:64:a1: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0A:26:8C:64:26:D1:A8:A9:24:0B:DF:42:3B:87:9E:D2:9F:9D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5f:f7:b2:05:c7:73:94:86:85:ce:78:13:1e:cd:aa:65:9d: ab:26:8b:26:04:36:f3:2e:99:80:01:67:29:d6:1f:38:e8:81: b3:c4:c4:e6:af:25:4b:51:19:d1:66:84:e6:46:eb:8b:10:1f: 17:c8:08:9e:76:63:4f:e3:8b:df:a1:ce:fa:0c:53:c1:ea:7e: 4c:41:16:13:a2:0f:91:25:f1:7b:8b:26:5a:21:fc:7d:88:d9: fb:3d:d6:ef:91:e6:bd:bd:64:16:6a:19:3a:e9:c2:a8:73:02: 5f:3c:17:b9:22:01:ca:34:16:19:2d:66:e5:fd:f1:99:82:20: c4:94:80:b9:e4:d8:e6:06:9e:4c:d3:02:51:24:01:68:1a:94: a6:19:db:49:b5:0a:45:e5:9d:21:f0:ff:2a:87:cc:88:d0:58: c9:d5:15:7f:eb:ec:fd:bf:7c:36:f2:e9:38:92:f5:dc:54:f2: 60:72:6e:16:73:81:be:86:2e:7c:18:c3:6a:52:09:10:bf:97: 85:53:e1:3c:4d:e0:52:16:93:33:f1:ba:bf:19:b7:81:45:80: 04:de:bd:8c:77:a5:a7:3b:5a:82:58:97:16:80:5c:52:11:6a: da:7c:f5:b7:c9:6b:d5:75:aa:4d:3c:50:14:96:9d:ec:83:1d: 18:9a:55:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jef37jS6Kiy5mCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NWMyN2ExNDgtYWNhZi00OWJkLWFmYjktNGM3NWQ3YmMxY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyqSmzm3Smrw9bV2AzwyKqn3KfpUXNmMu+vc dxFKhNqJwItEH/NptG3ZonaVPNW50i8gj6/R5vn3S6eCWh8Zq/rn1v4Sn9+SnIgQ 9YXX9KYzjGaZZpSOVNA+zUeDEiMUP0juWuNTsTI6U+xhM9W+lZbRz3+SCq5/GbzX gblYJL+XJniWCky4Ji2DtqrRZmuEXOpHOrX1C9aPx79iNRDaPIjzrQMZ6ljtJE9K l1XVxSNQVLMy1CowAH19BQWrIFK9cJxDjYYmSYi8rlFJItM54opKHowKxfZE9E8Y xTrk+6q2KfH17cpiFLl0lbjUVuB03dge271uQ9BpgyfdZKHL7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkKJoxkJtGoqSQL30I7h57Sn50CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTM2ZjY1ZmMtNWNjMC0z MGIzLWExZjYtODRkZTdjNzcxYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtf97IFx3OUhoXOeBMezaplnasmiyYENvMumYABZynWHzjogbPExOav JUtRGdFmhOZG64sQHxfICJ52Y0/ji9+hzvoMU8HqfkxBFhOiD5El8XuLJloh/H2I 2fs91u+R5r29ZBZqGTrpwqhzAl88F7kiAco0FhktZuX98ZmCIMSUgLnk2OYGnkzT AlEkAWgalKYZ20m1CkXlnSHw/yqHzIjQWMnVFX/r7P2/fDby6TiS9dxU8mBybhZz gb6GLnwYw2pSCRC/l4VT4TxN4FIWkzPxur8Zt4FFgATevYx3pac7WoJYlxaAXFIR atp89bfJa9V1qk08UBSWneyDHRiaVSE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:36 2026 by rpki-client