$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa File: 7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa (raw, json) Hash identifier: T9qh4O4oOKMtBGc0Pw4ds2hgbIJbNVn+Ron2ognMG+0= Subject key identifier: C3:27:56:54:64:3D:DD:4C:A7:3B:29:59:7D:2F:C1:5E:67:E5:65:3B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A25A14BC2A899E4319AC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.254.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:25:a1:4b:c2:a8:99:e4:31:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6e14c31e-3be0-4a74-b54e-ac4e67c04e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:9f:79:2f:3e:3d:2f:5b:93:2c:99:ee:1f: 98:c2:28:ee:af:9f:4f:b4:48:06:c3:0f:6f:e1:0c: 08:8d:f9:dc:14:d7:74:26:86:d0:d8:b8:ef:10:55: c5:23:03:9d:53:24:28:d9:db:bb:ce:93:6d:17:40: 65:fa:e5:f5:2c:24:52:73:15:81:5a:4c:42:93:fa: 8a:0f:d1:fe:97:97:9b:43:44:68:42:00:58:69:dc: aa:0c:4e:b3:91:92:60:15:82:c9:8c:2a:25:1c:27: 62:3f:fa:ce:da:b3:ae:69:5d:f8:a2:d1:56:29:c4: 01:f5:40:af:45:84:a7:3e:73:84:6b:c9:91:e0:70: a1:0f:10:67:bf:df:04:e9:88:8c:76:d2:49:a6:cc: ac:6a:35:9f:ff:9e:5e:39:cf:39:02:8d:26:c7:4a: 30:3b:e6:e9:af:cc:d8:0f:27:2f:70:3e:52:ac:4b: fb:19:5a:01:0d:58:b4:df:71:29:63:b2:c2:16:d6: 75:8d:5e:c1:00:df:32:1e:49:9a:90:1c:23:ea:e4: 7f:8d:d3:ed:64:e2:ff:a7:0b:5d:ed:74:c2:c9:21: 42:d2:26:12:02:5f:cd:f1:b0:ce:08:f9:92:ec:0d: 31:7c:76:52:42:b7:4a:6b:44:f2:c0:46:0a:72:5d: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:27:56:54:64:3D:DD:4C:A7:3B:29:59:7D:2F:C1:5E:67:E5:65:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fd:30:97:89:35:83:a1:54:d4:6b:15:43:74:ea:ec:5f:b7: a0:47:e9:d2:6c:52:82:6c:92:c4:fb:87:50:c5:50:1a:30:17: 40:80:ec:26:32:4e:cf:d8:91:15:ae:a2:58:91:fe:ea:05:0f: 23:70:7d:9b:0a:23:b0:d8:5d:9b:98:0d:04:d3:55:9e:1b:1c: d7:c9:92:c8:e3:7c:e3:f7:81:4c:fc:de:30:59:df:e0:0c:77: 44:3b:b9:c2:1a:5b:5e:f5:2c:0f:fc:62:5c:66:3c:e5:b1:2d: 6e:3a:4c:6f:12:69:78:92:a6:89:fd:ce:ee:33:3d:17:83:46: c9:65:0f:36:3f:fd:01:42:46:42:64:a2:bb:1c:54:3b:1b:5d: 05:52:6a:70:72:55:2d:d7:3a:17:bf:65:ce:ca:51:e6:f4:8e: 3b:e4:00:77:04:e4:db:90:e7:e8:a4:c7:25:3f:b2:8e:0e:b2: f2:94:ce:79:13:16:1f:82:cd:09:32:32:fd:59:97:1b:b5:2b: 54:a0:64:94:6b:25:62:b1:1f:44:01:1c:db:1e:d7:a1:79:24: a9:56:8c:12:2a:af:40:f8:86:8d:e7:51:ca:97:7c:67:40:16: 87:4d:e3:90:2a:a2:d6:13:74:c7:8e:6f:e4:d7:52:00:ac:8c: 14:58:bb:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiWhS8KomeQxmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmUxNGMzMWUtM2JlMC00YTc0LWI1NGUtYWM0ZTY3YzA0ZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZWfeS8+PS9bkyyZ7h+Ywijur59PtEgGww9v 4QwIjfncFNd0JobQ2LjvEFXFIwOdUyQo2du7zpNtF0Bl+uX1LCRScxWBWkxCk/qK D9H+l5ebQ0RoQgBYadyqDE6zkZJgFYLJjColHCdiP/rO2rOuaV34otFWKcQB9UCv RYSnPnOEa8mR4HChDxBnv98E6YiMdtJJpsysajWf/55eOc85Ao0mx0owO+bpr8zY DycvcD5SrEv7GVoBDVi033EpY7LCFtZ1jV7BAN8yHkmakBwj6uR/jdPtZOL/pwtd 7XTCySFC0iYSAl/N8bDOCPmS7A0xfHZSQrdKa0TywEYKcl36CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMnVlRkPd1MpzspWX0vwV5n5WU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2MyNWY2MGQtZTY1Mi0z OWMyLWFkM2ItZTdiY2I0NmVlMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr9MJeJNYOhVNRrFUN06uxft6BH6dJsUoJsksT7h1DFUBowF0CA7CYy Ts/YkRWuoliR/uoFDyNwfZsKI7DYXZuYDQTTVZ4bHNfJksjjfOP3gUz83jBZ3+AM d0Q7ucIaW171LA/8YlxmPOWxLW46TG8SaXiSpon9zu4zPReDRsllDzY//QFCRkJk orscVDsbXQVSanByVS3XOhe/Zc7KUeb0jjvkAHcE5NuQ5+ikxyU/so4OsvKUznkT Fh+CzQkyMv1Zlxu1K1SgZJRrJWKxH0QBHNse16F5JKlWjBIqr0D4ho3nUcqXfGdA FodN45AqotYTdMeOb+TXUgCsjBRYuw4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:44 2026 by rpki-client