$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/78ae3e2f-e6c2-3e2c-9bde-1e4021d49824.roa File: 78ae3e2f-e6c2-3e2c-9bde-1e4021d49824.roa (raw, json) Hash identifier: /K7B5AJFWJylpKOqKY3c3BVFCKwk1oQJVoZ5o9jM66M= Subject key identifier: 47:56:26:76:E8:71:F4:8F:99:A9:1C:6A:FC:AD:58:EB:52:8B:6A:A2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A040A77B16D12B11D69F8 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/78ae3e2f-e6c2-3e2c-9bde-1e4021d49824.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.254.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:04:0a:77:b1:6d:12:b1:1d:69:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=c82bab43-3da7-4c32-bf78-c20dd56790bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:04:83:33:5b:40:e5:01:eb:dc:f9:40:d5: 8b:61:46:bf:96:4a:e2:86:0a:87:a5:37:0b:ab:ce: 87:14:f9:f4:db:a8:94:49:78:9e:59:83:5a:f4:7b: f5:6a:b1:88:a2:17:05:36:06:80:45:bc:3b:9a:98: 01:d0:64:b2:56:38:ad:47:50:07:36:69:34:e5:e8: a9:d9:64:66:4d:4c:b8:72:50:a2:79:cd:cd:03:a7: 3a:21:00:5c:e5:5e:f1:f5:44:c3:b1:d5:ea:f8:de: a7:07:0f:a1:f5:db:a2:0e:35:c4:a1:61:b0:6c:93: 43:3d:68:0e:cc:7e:62:8a:97:b1:d4:d2:a7:55:2d: 9a:0a:7f:70:cd:4b:15:15:05:45:e9:e5:f1:2f:cd: 71:1a:92:f7:0a:84:d2:d8:ec:bf:74:9c:04:34:1b: 80:02:d2:17:75:64:fb:a5:2a:34:b7:b3:c4:a0:15: 4b:1f:2d:8e:8f:3d:81:99:68:79:21:84:9e:38:db: cb:9d:9c:18:ed:1f:51:31:ba:81:b5:4b:2f:e4:7e: 23:f1:71:b0:fa:5f:6e:74:8a:0d:ff:be:51:aa:f7: f8:46:88:64:1d:95:ed:9f:bb:3d:5d:4b:48:f3:31: 11:66:41:23:9a:5d:8a:87:5e:91:f3:cc:3d:98:c3: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:56:26:76:E8:71:F4:8F:99:A9:1C:6A:FC:AD:58:EB:52:8B:6A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/78ae3e2f-e6c2-3e2c-9bde-1e4021d49824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c3:6c:47:34:d5:fe:dc:e0:33:89:c3:ab:86:6a:ba:42:05: b8:6a:04:98:76:0e:03:d3:c3:0d:c1:d6:7b:bc:91:be:ec:7e: 7e:39:5a:cb:87:ba:13:7b:19:d9:ae:e5:ab:4e:72:77:ec:96: e4:82:ea:09:d9:78:9b:29:f4:da:ae:a0:7f:07:d7:d2:6b:05: 86:8b:ae:f4:19:b7:12:bf:5a:80:97:78:d0:c0:5e:ed:c9:de: e1:0f:89:2f:36:61:a0:3e:45:55:19:4a:25:d1:f7:c3:61:3f: 55:bc:27:04:be:24:4f:9c:32:a4:f9:8b:72:a2:2a:57:ee:fd: 48:5f:47:85:4a:de:33:9c:c5:4a:00:3f:4d:4a:44:12:f6:54: ad:f6:77:db:ea:e8:d1:fd:6c:f3:e8:49:c0:9f:db:c8:76:04: 9d:d3:e2:24:c8:65:0c:6f:25:9a:c8:f3:99:d0:d4:42:ce:75: 6f:f9:9c:ff:d3:b1:3d:fa:a3:72:31:b9:64:ef:57:77:0a:c4: f0:3c:d3:18:45:2c:8f:f1:76:d9:78:95:8d:79:b7:15:f2:1f: 60:fc:2f:c8:d2:44:87:39:7e:a9:64:17:72:2e:19:bb:6b:ca: a6:54:5f:cb:f2:b0:e7:b3:50:2f:b8:91:c0:20:5d:58:43:61: 49:11:5f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegQKd7FtErEdafgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YzgyYmFiNDMtM2RhNy00YzMyLWJmNzgtYzIwZGQ1Njc5MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthsEgzNbQOUB69z5QNWLYUa/lkrihgqHpTcL q86HFPn026iUSXieWYNa9Hv1arGIohcFNgaARbw7mpgB0GSyVjitR1AHNmk05eip 2WRmTUy4clCiec3NA6c6IQBc5V7x9UTDsdXq+N6nBw+h9duiDjXEoWGwbJNDPWgO zH5iipex1NKnVS2aCn9wzUsVFQVF6eXxL81xGpL3CoTS2Oy/dJwENBuAAtIXdWT7 pSo0t7PEoBVLHy2Ojz2BmWh5IYSeONvLnZwY7R9RMbqBtUsv5H4j8XGw+l9udIoN /75Rqvf4RohkHZXtn7s9XUtI8zERZkEjml2Kh16R88w9mMM4owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdWJnbocfSPmakcavytWOtSi2qiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzhhZTNlMmYtZTZjMi0z ZTJjLTliZGUtMWU0MDIxZDQ5ODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3DbEc01f7c4DOJw6uGarpCBbhqBJh2DgPTww3B1nu8kb7sfn45WsuH uhN7Gdmu5atOcnfsluSC6gnZeJsp9NquoH8H19JrBYaLrvQZtxK/WoCXeNDAXu3J 3uEPiS82YaA+RVUZSiXR98NhP1W8JwS+JE+cMqT5i3KiKlfu/UhfR4VK3jOcxUoA P01KRBL2VK32d9vq6NH9bPPoScCf28h2BJ3T4iTIZQxvJZrI85nQ1ELOdW/5nP/T sT36o3IxuWTvV3cKxPA80xhFLI/xdtl4lY15txXyH2D8L8jSRIc5fqlkF3IuGbtr yqZUX8vysOezUC+4kcAgXVhDYUkRX/o= -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:10 2026 by rpki-client