$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a24d7f0-c7fa-3f97-9fc4-b9ca3905a36e.roa File: 6a24d7f0-c7fa-3f97-9fc4-b9ca3905a36e.roa (raw, json) Hash identifier: FEqotkZ1MReTMQlqEtMyBbMQdsg2HSoz8dSXuzgDNV0= Subject key identifier: D4:A6:0F:A7:F4:C9:FF:90:41:D6:2A:AA:08:D2:38:9C:79:C0:E2:77 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4A535B45E26BAE85E3A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a24d7f0-c7fa-3f97-9fc4-b9ca3905a36e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.182.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4a:53:5b:45:e2:6b:ae:85:e3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e13f8cad-e6d4-4206-a0b6-050d36d1f2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:37:fa:37:69:b8:7e:c6:f1:ad:94:0f:27: a1:0c:d0:bd:9e:33:b6:d7:df:37:52:ce:d3:8b:15: 00:06:e7:86:03:cb:7b:6e:3f:4b:83:93:a5:c4:7c: 08:92:c3:b3:b7:bb:01:62:47:ca:38:38:39:f5:8a: a7:29:67:84:25:79:91:f7:b8:bf:d0:f3:53:d1:f4: 87:46:7d:0a:7e:72:14:dd:da:77:2a:f9:c8:76:fc: 34:eb:7f:2a:b7:21:11:61:76:dd:c9:00:38:e4:11: 0b:9a:93:2b:49:2b:4d:86:63:dd:3e:cf:5c:93:29: e7:7a:95:db:19:af:74:f5:64:04:42:22:fd:4f:6a: 20:f9:23:fd:52:3b:c6:32:9e:e9:4c:b7:17:db:21: 72:c4:ab:29:c9:bd:2b:dc:02:bd:01:eb:46:eb:db: 58:4b:ac:31:b5:db:d3:2b:9a:5a:2f:cb:99:af:83: 00:70:3b:36:78:13:c7:69:58:85:75:87:55:c0:fb: a8:55:29:f0:54:b6:16:13:00:66:65:df:41:ce:39: 65:17:b4:c1:ec:c0:0e:88:73:db:59:4a:62:50:f5: b9:3b:7f:73:c2:cd:78:4b:d5:c7:77:db:2a:46:d4: 36:7b:e7:6c:42:ea:4e:7a:0e:80:3b:f2:f4:ba:e5: 4d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A6:0F:A7:F4:C9:FF:90:41:D6:2A:AA:08:D2:38:9C:79:C0:E2:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a24d7f0-c7fa-3f97-9fc4-b9ca3905a36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b8:ba:83:31:7d:b3:82:98:d4:91:4f:b3:33:18:54:f8:00: 41:4b:d6:7f:65:0c:36:60:87:3e:8a:9a:b4:43:5d:60:28:98: cd:f4:be:c9:c0:c9:2f:2f:a1:7f:c0:84:9e:34:ab:e6:8d:22: 7d:5c:21:3f:71:dc:97:14:af:2c:54:4e:24:08:4a:e7:40:3e: eb:98:40:6f:7c:69:5c:43:68:86:0a:01:9d:68:15:38:16:70: e8:9c:f0:03:1a:7d:7f:17:9b:03:bb:c0:2d:80:32:1d:b5:b0: af:fc:04:98:89:68:d7:98:e5:75:a3:8b:a4:ee:f1:5d:97:01: d1:18:73:5b:01:7c:a0:a4:28:67:96:9c:5e:43:4e:83:e9:10: ac:df:72:2e:78:94:a0:fe:4f:24:91:45:a4:12:fa:2d:55:23: 21:86:35:3d:3a:4c:bf:8d:28:9f:a2:a4:8b:e3:df:31:b4:ca: e2:81:a9:d1:1e:0d:83:44:0e:48:8d:9b:19:f9:d8:a5:f3:a0: 44:ca:3f:6b:59:4f:74:89:c9:56:19:51:33:8e:21:88:a4:58: 25:41:d3:73:24:fa:de:9e:7d:71:a4:94:75:98:9e:cc:5b:92: 53:09:46:d3:d3:65:06:d6:71:b4:ef:e5:97:77:93:09:4b:1a: 00:a6:9f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekpTW0Xia66F46AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTEzZjhjYWQtZTZkNC00MjA2LWEwYjYtMDUwZDM2ZDFmMmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo543+jdpuH7G8a2UDyehDNC9njO21983Us7T ixUABueGA8t7bj9Lg5OlxHwIksOzt7sBYkfKODg59YqnKWeEJXmR97i/0PNT0fSH Rn0KfnIU3dp3KvnIdvw0638qtyERYXbdyQA45BELmpMrSStNhmPdPs9ckynnepXb Ga909WQEQiL9T2og+SP9UjvGMp7pTLcX2yFyxKspyb0r3AK9AetG69tYS6wxtdvT K5paL8uZr4MAcDs2eBPHaViFdYdVwPuoVSnwVLYWEwBmZd9BzjllF7TB7MAOiHPb WUpiUPW5O39zws14S9XHd9sqRtQ2e+dsQupOeg6AO/L0uuVNHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSmD6f0yf+QQdYqqgjSOJx5wOJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmEyNGQ3ZjAtYzdmYS0z Zjk3LTlmYzQtYjljYTM5MDVhMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC4uoMxfbOCmNSRT7MzGFT4AEFL1n9lDDZghz6KmrRDXWAomM30vsnA yS8voX/AhJ40q+aNIn1cIT9x3JcUryxUTiQISudAPuuYQG98aVxDaIYKAZ1oFTgW cOic8AMafX8XmwO7wC2AMh21sK/8BJiJaNeY5XWji6Tu8V2XAdEYc1sBfKCkKGeW nF5DToPpEKzfci54lKD+TySRRaQS+i1VIyGGNT06TL+NKJ+ipIvj3zG0yuKBqdEe DYNEDkiNmxn52KXzoETKP2tZT3SJyVYZUTOOIYikWCVB03Mk+t6efXGklHWYnsxb klMJRtPTZQbWcbTv5Zd3kwlLGgCmn5k= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:27 2026 by rpki-client