$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83249b09-da78-3496-b35d-3cddaa31c30b.roa File: 83249b09-da78-3496-b35d-3cddaa31c30b.roa (raw, json) Hash identifier: HZttLWejcuLa3sHvgszpgE+wzowozY2GjTPAqHR5r1o= Subject key identifier: 49:0C:A7:CD:B6:7F:55:80:9A:9E:DA:CC:4F:FB:41:88:D6:CF:67:32 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3B35E0EFD0C54F286380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83249b09-da78-3496-b35d-3cddaa31c30b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.253.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3b:35:e0:ef:d0:c5:4f:28:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=bdd79dfa-e676-40da-952b-5a2c8d38ab3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:74:7f:e1:5a:0e:d1:a5:7d:98:09:81:27:87: a4:c8:99:b1:29:70:47:75:ae:cf:fa:be:83:5f:1d: 78:5e:f9:1c:17:38:6d:0a:35:6d:43:18:69:8e:83: 05:b6:9c:45:21:1d:eb:8c:fb:ba:47:18:5a:d4:1a: 5e:70:70:53:ba:85:00:70:38:5d:a4:1c:95:5a:96: 7f:dd:f9:f6:7e:e4:27:7a:54:da:b5:cc:00:18:96: 18:8e:36:c7:2f:41:01:a1:5c:f0:dd:c1:43:e3:3c: b7:0b:ff:31:d2:f6:0a:73:fa:f7:32:04:37:14:3d: 0c:46:34:b9:21:20:ea:28:48:ba:68:90:9b:03:bf: 92:e4:03:6e:2c:81:37:70:9d:cd:60:5e:11:6a:3c: c7:1e:79:52:b7:fc:c4:03:da:6d:d6:77:c7:03:28: 78:69:26:02:2e:2e:82:f3:eb:4b:7c:fb:ce:a3:6d: 22:2f:12:5d:0e:02:c0:ea:6c:6b:d5:45:6a:fc:16: d0:0c:46:81:2e:25:97:b0:bd:a1:61:20:3f:a6:f4: 2b:5d:bc:c5:0a:0d:da:24:f3:9d:16:57:e5:b9:3e: 52:74:74:7b:f2:11:a5:66:3b:11:17:88:bc:9f:ed: 9a:0a:ab:a6:f8:45:28:5a:b9:45:9b:d5:64:58:4f: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0C:A7:CD:B6:7F:55:80:9A:9E:DA:CC:4F:FB:41:88:D6:CF:67:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83249b09-da78-3496-b35d-3cddaa31c30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:56:bd:8f:dd:c2:c2:b2:f3:53:b7:8a:ee:d0:5d:a2:e2:93: a7:17:d4:77:de:2f:57:80:3c:e1:94:e5:2f:29:bb:d1:a0:32: 23:0a:66:1d:ce:c3:90:50:3d:89:de:0f:98:35:1b:50:34:a7: fc:5c:64:2f:19:6d:1d:9b:73:ff:41:a3:2a:4c:21:b2:80:65: 96:2e:45:37:69:2a:9d:bf:46:7a:1d:e0:99:68:cc:43:ba:0d: f5:51:0b:b1:d0:b0:ea:de:29:83:d0:59:8b:b0:fa:fd:b6:73: 92:da:2c:f7:5b:96:2d:4d:1b:65:9d:7e:bd:98:15:08:af:e6: b7:a9:7c:24:34:64:c3:30:73:6b:01:46:44:a3:71:63:e7:0b: 28:8b:22:e4:c9:81:3c:d8:54:de:58:73:1d:98:60:50:97:82: 07:ed:ba:d2:db:40:5b:dd:e1:49:1c:c9:de:44:f4:93:97:4a: bf:fb:92:90:39:4a:ce:d4:10:5c:40:66:33:d6:ae:b1:c2:39: a0:13:2d:0e:90:10:12:2a:29:b5:09:7e:94:ac:ff:88:1d:25: d8:2c:40:90:04:8a:38:fa:40:69:68:3c:2f:98:34:df:14:4d: 91:4a:c7:5b:24:f1:cd:10:89:b8:18:5b:d4:7f:d4:33:ed:3a: 6b:b0:57:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejs14O/QxU8oY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YmRkNzlkZmEtZTY3Ni00MGRhLTk1MmItNWEyYzhkMzhhYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3R/4VoO0aV9mAmBJ4ekyJmxKXBHda7P+r6D Xx14XvkcFzhtCjVtQxhpjoMFtpxFIR3rjPu6Rxha1BpecHBTuoUAcDhdpByVWpZ/ 3fn2fuQnelTatcwAGJYYjjbHL0EBoVzw3cFD4zy3C/8x0vYKc/r3MgQ3FD0MRjS5 ISDqKEi6aJCbA7+S5ANuLIE3cJ3NYF4RajzHHnlSt/zEA9pt1nfHAyh4aSYCLi6C 8+tLfPvOo20iLxJdDgLA6mxr1UVq/BbQDEaBLiWXsL2hYSA/pvQrXbzFCg3aJPOd FlfluT5SdHR78hGlZjsRF4i8n+2aCqum+EUoWrlFm9VkWE/PmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkMp822f1WAmp7azE/7QYjWz2cyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODMyNDliMDktZGE3OC0z NDk2LWIzNWQtM2NkZGFhMzFjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/05MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBWvY/dwsKy81O3iu7QXaLik6cX1HfeL1eAPOGU5S8pu9GgMiMKZh3O w5BQPYneD5g1G1A0p/xcZC8ZbR2bc/9BoypMIbKAZZYuRTdpKp2/Rnod4JlozEO6 DfVRC7HQsOreKYPQWYuw+v22c5LaLPdbli1NG2Wdfr2YFQiv5repfCQ0ZMMwc2sB RkSjcWPnCyiLIuTJgTzYVN5Ycx2YYFCXggftutLbQFvd4Ukcyd5E9JOXSr/7kpA5 Ss7UEFxAZjPWrrHCOaATLQ6QEBIqKbUJfpSs/4gdJdgsQJAEijj6QGloPC+YNN8U TZFKx1sk8c0QibgYW9R/1DPtOmuwV/Q= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:22 2026 by rpki-client