$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f64dd5b-6fd0-341d-8504-a02adae27e53.roa File: 8f64dd5b-6fd0-341d-8504-a02adae27e53.roa (raw, json) Hash identifier: xagNKrMR+8r+fESbSDTON3c4RCr36q0nvTfEMkrELQM= Subject key identifier: 76:FE:63:A2:E0:DC:54:8F:EA:7C:03:E0:AC:D9:C2:A7:E4:22:3E:3A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A52CA21BA7656F4C07E80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f64dd5b-6fd0-341d-8504-a02adae27e53.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.115.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:52:ca:21:ba:76:56:f4:c0:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4b5ab079-babd-4c58-b360-812fb1e03190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:61:56:6c:a9:6d:6d:dd:68:70:77:3d:7a: 0d:24:50:e2:2f:1f:d7:9d:fd:74:01:72:d8:00:07: b6:7e:88:6c:01:97:92:08:37:c5:db:67:ba:19:07: 6e:bc:5f:e1:d2:86:23:32:be:99:7b:f8:49:ef:01: 82:45:5a:d5:df:aa:66:e4:95:72:e5:f5:e4:fc:0f: 4d:9f:f9:dd:a8:33:eb:78:65:ce:37:ec:da:e0:47: 78:e5:b6:42:d3:b5:87:40:6f:22:75:aa:2a:e6:41: 35:a9:28:72:94:81:43:e0:38:eb:2a:e4:8c:aa:db: 46:cb:b1:54:8d:86:9e:a7:05:57:27:79:f4:af:a1: c2:94:d9:36:54:0a:de:c7:c6:fc:8c:dc:d0:ee:5a: b5:85:54:05:63:de:fb:7e:d6:71:d7:21:0f:2e:39: b7:74:2c:e2:ef:3c:0a:ce:31:b8:13:8e:e9:c1:c8: 2c:64:69:34:91:7d:f7:3c:f9:c6:03:5a:ea:0c:f0: 13:a3:36:74:7b:0b:08:b6:74:dc:f0:4b:bb:68:a8: 03:49:00:43:1b:56:c4:ae:cb:af:c7:55:79:b4:98: f5:09:aa:8f:6b:07:fa:88:16:18:30:95:6b:ce:9f: 6f:a1:3c:ba:fb:a0:f4:32:e6:59:52:62:50:2c:df: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FE:63:A2:E0:DC:54:8F:EA:7C:03:E0:AC:D9:C2:A7:E4:22:3E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f64dd5b-6fd0-341d-8504-a02adae27e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:55:24:e4:1a:ac:18:b8:76:5d:2d:61:fc:c1:b8:09:f6:9d: d1:b5:a8:1b:49:94:69:bf:c4:17:ce:b4:01:3e:11:43:7d:0c: d4:90:47:45:d4:a9:3b:34:d7:9e:3b:2a:19:c3:8a:a2:80:54: f2:34:1f:e8:b5:02:ec:3c:92:ae:c7:9a:af:42:ce:da:c0:0a: 29:02:58:a3:69:03:6f:53:3b:a2:51:36:99:8f:ef:0e:96:6e: 3b:63:bc:e8:00:b3:23:27:9e:ed:58:d4:f4:dc:95:d8:2c:c2: 94:1d:28:67:e9:5b:a0:8d:3f:bd:81:12:76:43:c0:9f:6e:31: 9f:a1:71:b4:70:d4:5b:93:37:fe:a8:d9:67:0a:06:b8:8b:40: e9:03:f6:d2:fa:e3:dd:d3:e5:3b:04:91:f9:52:01:19:cd:f6: b4:b0:ac:e0:6d:27:13:dd:ee:f4:da:e2:a2:76:e7:11:9c:b4: b9:8d:e9:dc:95:5a:c3:e2:54:ad:28:97:1b:57:2c:94:82:e2: a7:ad:77:25:4a:9c:d5:ae:cc:58:43:6e:6e:db:54:3e:a1:86: aa:19:22:70:da:cb:5a:86:ce:a4:0b:40:43:ab:24:f2:07:21: c4:4b:35:c3:89:fa:d5:70:71:dc:e9:bd:5b:3d:41:b0:9c:4e: 56:e0:b8:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelLKIbp2VvTAfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGI1YWIwNzktYmFiZC00YzU4LWIzNjAtODEyZmIxZTAzMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZhhVmypbW3daHB3PXoNJFDiLx/Xnf10AXLY AAe2fohsAZeSCDfF22e6GQduvF/h0oYjMr6Ze/hJ7wGCRVrV36pm5JVy5fXk/A9N n/ndqDPreGXON+za4Ed45bZC07WHQG8idaoq5kE1qShylIFD4DjrKuSMqttGy7FU jYaepwVXJ3n0r6HClNk2VArex8b8jNzQ7lq1hVQFY977ftZx1yEPLjm3dCzi7zwK zjG4E47pwcgsZGk0kX33PPnGA1rqDPATozZ0ewsItnTc8Eu7aKgDSQBDG1bErsuv x1V5tJj1CaqPawf6iBYYMJVrzp9voTy6+6D0MuZZUmJQLN8ZeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHb+Y6Lg3FSP6nwD4KzZwqfkIj46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGY2NGRkNWItNmZkMC0z NDFkLTg1MDQtYTAyYWRhZTI3ZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3ObMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhVJOQarBi4dl0tYfzBuAn2ndG1qBtJlGm/xBfOtAE+EUN9DNSQR0XU qTs01547KhnDiqKAVPI0H+i1Auw8kq7Hmq9CztrACikCWKNpA29TO6JRNpmP7w6W bjtjvOgAsyMnnu1Y1PTcldgswpQdKGfpW6CNP72BEnZDwJ9uMZ+hcbRw1FuTN/6o 2WcKBriLQOkD9tL6493T5TsEkflSARnN9rSwrOBtJxPd7vTa4qJ25xGctLmN6dyV WsPiVK0olxtXLJSC4qetdyVKnNWuzFhDbm7bVD6hhqoZInDay1qGzqQLQEOrJPIH IcRLNcOJ+tVwcdzpvVs9QbCcTlbguEw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:37 2026 by rpki-client