$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e39fc82-127b-32cc-b0d9-2fb55839611a.roa File: 8e39fc82-127b-32cc-b0d9-2fb55839611a.roa (raw, json) Hash identifier: Y7MyT+yXv55V3q4koKsp3OO3SKb3awdof5OoIM4UCl8= Subject key identifier: 70:B0:CF:13:65:0E:1E:E0:77:AC:CB:F5:ED:F9:3A:26:02:ED:7D:5E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A6F6E1242592A6AF20C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e39fc82-127b-32cc-b0d9-2fb55839611a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 199.249.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:6f:6e:12:42:59:2a:6a:f2:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e5ee90cd-d9a3-4ccf-b94c-2616e8491396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:76:f8:ae:a2:c6:2f:80:90:30:68:c9:b9:cd: 3d:4f:13:0e:96:3b:a6:83:c0:4f:1f:c7:47:86:86: 45:08:89:f3:9a:97:fd:de:cc:54:8e:7c:68:63:29: 1d:94:99:e3:43:32:d5:0d:dd:72:92:ce:40:39:8f: 69:e0:07:1b:0d:21:1a:f4:45:93:fe:80:f3:53:79: 95:13:50:f3:fb:24:03:3d:41:27:67:f1:e5:60:13: 75:38:de:77:12:bd:56:a6:f8:25:e1:56:5c:52:69: 6b:f0:1f:38:ed:85:6e:51:ca:28:66:bb:02:13:63: 3a:18:44:c7:df:3f:fa:9f:cd:f1:02:b8:af:8b:ad: 4e:1e:f4:7c:45:bb:68:8c:1d:a3:43:6c:9b:11:35: 72:7b:b0:f0:77:4e:e0:ce:2c:f5:78:57:06:57:77: 0f:f3:6e:c6:32:b1:e3:03:02:3d:76:7a:dd:18:02: 49:f1:ef:c7:1b:c3:78:6c:e9:b4:0a:79:0f:c9:92: 63:44:14:d3:3f:18:4a:8e:ec:42:fb:fa:f2:0c:e8: 49:0c:ce:45:6d:d8:ca:14:37:c9:e4:72:ba:22:41: 93:62:4a:38:04:5c:0f:3c:0a:cb:96:b0:c2:7f:8f: c6:09:7d:73:a8:c1:f2:41:c6:30:a1:5d:2e:b1:4e: 67:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B0:CF:13:65:0E:1E:E0:77:AC:CB:F5:ED:F9:3A:26:02:ED:7D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e39fc82-127b-32cc-b0d9-2fb55839611a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:bb:60:31:58:82:72:09:db:a6:ee:c2:3a:4c:08:f9:ad:85: 2b:77:51:eb:ee:25:c4:9f:e8:49:dd:f5:70:a3:70:e8:34:6d: 98:69:92:b0:20:f1:b9:1e:92:aa:79:78:21:01:35:b1:f8:a8: ae:ad:b4:b6:60:9d:38:b3:1e:32:4b:78:92:75:3a:ac:43:7b: 05:75:84:89:b2:a7:91:3a:78:15:1b:d4:2d:09:d4:26:db:86: 2e:29:b3:7d:e4:fd:98:e1:ca:96:cf:63:c1:78:bd:bb:a5:6a: e0:ea:5a:e9:ed:69:4d:b6:c6:cd:1b:4b:5a:1d:94:7f:41:34: 80:68:31:61:b4:8a:c0:25:58:c1:b8:93:ea:f6:0c:61:e4:0c: 98:01:2d:1d:82:04:7c:1e:8c:a6:46:21:f2:a9:f6:09:f5:bc: 21:88:72:27:d5:9f:54:4c:82:9e:b9:87:5e:3a:66:67:7a:0d: 13:56:7d:f5:61:13:37:81:80:1b:88:59:e3:25:85:68:65:6c: 4f:69:eb:e6:a6:f8:28:b5:78:b5:27:b8:e2:2a:0f:de:5f:cf: c6:18:54:22:67:c3:6b:b6:a1:85:d2:48:e4:d6:9b:ec:29:16: d5:b0:c0:d5:76:c6:3a:2c:be:19:9e:81:46:0e:64:27:6a:68: 1f:b6:b3:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jem9uEkJZKmryDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTVlZTkwY2QtZDlhMy00Y2NmLWI5NGMtMjYxNmU4NDkxMzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3b4rqLGL4CQMGjJuc09TxMOljumg8BPH8dH hoZFCInzmpf93sxUjnxoYykdlJnjQzLVDd1yks5AOY9p4AcbDSEa9EWT/oDzU3mV E1Dz+yQDPUEnZ/HlYBN1ON53Er1Wpvgl4VZcUmlr8B847YVuUcooZrsCE2M6GETH 3z/6n83xArivi61OHvR8RbtojB2jQ2ybETVye7Dwd07gziz1eFcGV3cP827GMrHj AwI9dnrdGAJJ8e/HG8N4bOm0CnkPyZJjRBTTPxhKjuxC+/ryDOhJDM5FbdjKFDfJ 5HK6IkGTYko4BFwPPArLlrDCf4/GCX1zqMHyQcYwoV0usU5n5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCwzxNlDh7gd6zL9e35OiYC7X1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGUzOWZjODItMTI3Yi0z MmNjLWIwZDktMmZiNTU4Mzk2MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm7YDFYgnIJ26buwjpMCPmthSt3UevuJcSf6End9XCjcOg0bZhpkrAg 8bkekqp5eCEBNbH4qK6ttLZgnTizHjJLeJJ1OqxDewV1hImyp5E6eBUb1C0J1Cbb hi4ps33k/ZjhypbPY8F4vbulauDqWuntaU22xs0bS1odlH9BNIBoMWG0isAlWMG4 k+r2DGHkDJgBLR2CBHwejKZGIfKp9gn1vCGIcifVn1RMgp65h146Zmd6DRNWffVh EzeBgBuIWeMlhWhlbE9p6+am+Ci1eLUnuOIqD95fz8YYVCJnw2u2oYXSSOTWm+wp FtWwwNV2xjosvhmegUYOZCdqaB+2s4Y= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:47 2026 by rpki-client