$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91ff832b-f9dc-3719-9e9f-6e7ef9922f82.roa File: 91ff832b-f9dc-3719-9e9f-6e7ef9922f82.roa (raw, json) Hash identifier: 7PyLvDAF4BHQpg/xgkfDD1ISFb4tZEDnNqje6JWxbdM= Subject key identifier: CC:EC:9B:CE:0A:F1:A2:33:FA:47:9A:0D:96:2F:CE:F1:1B:5E:61:02 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A2244FABDA88ED0E00680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91ff832b-f9dc-3719-9e9f-6e7ef9922f82.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.249.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:22:44:fa:bd:a8:8e:d0:e0:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=0cf4dd84-cfae-46c7-9649-16175702a6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8e:12:46:67:cd:c6:16:91:c0:92:a4:98:02: 29:d6:a5:84:a2:06:fd:54:37:0f:09:14:61:8b:6f: d9:19:10:b9:75:f7:71:ce:63:95:d3:68:ca:3d:7a: ca:cb:e2:06:37:4f:a4:88:30:2f:6b:09:89:e3:8f: d6:cb:84:20:46:0f:64:50:b7:13:6f:ae:89:62:e3: 52:a4:6d:f6:93:b5:57:63:d6:4f:86:53:00:53:0a: bd:52:06:c5:46:9a:47:77:0a:d1:e7:d7:83:47:1e: 83:ec:f2:25:3a:dc:23:73:1c:e8:c5:9f:e6:32:64: 25:b5:0b:3e:d0:43:a2:67:a1:e1:f8:01:0b:66:e4: ff:a0:0f:31:5d:fb:d9:bb:ab:9e:ca:cb:1b:c5:9d: f7:33:4f:6b:fd:f3:d9:2c:46:d6:5a:a6:9a:3a:cd: b0:c9:f2:1b:96:54:fc:06:1a:a7:b4:15:5c:ba:d0: 6d:c2:6e:5c:44:c5:6f:d1:29:c0:78:cf:54:44:db: bc:d9:cc:86:a6:55:e7:02:a9:5b:a3:bb:bd:a5:06: 53:eb:5b:49:ee:36:48:02:88:3c:40:f2:a9:85:05: d1:d6:58:a6:18:55:51:51:00:4c:86:9c:d8:13:c6: de:ef:57:af:b8:20:c9:44:b5:46:83:6a:42:f1:2d: 26:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EC:9B:CE:0A:F1:A2:33:FA:47:9A:0D:96:2F:CE:F1:1B:5E:61:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91ff832b-f9dc-3719-9e9f-6e7ef9922f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:3d:d6:a7:d6:b3:ab:4e:00:ab:53:b5:14:b9:0a:cc:d8:0e: 64:c1:6e:74:4f:04:cf:ca:10:14:35:b8:86:fd:d8:83:e8:86: c6:a2:e3:c5:52:b1:2f:10:ce:df:dc:d9:23:2c:c6:4c:59:9c: c4:51:62:72:a5:43:84:d8:59:6b:8e:a1:31:90:bd:6f:03:cf: 20:5b:c9:5d:ff:2a:81:f9:c8:dd:81:18:6d:0e:82:11:db:9f: bd:48:de:13:46:d7:ed:1f:10:21:7f:52:50:25:dd:c1:ac:a3: 82:46:f6:d2:2a:b8:55:d6:b9:3f:33:40:46:1b:05:74:3d:2f: 6b:9b:dd:53:0d:30:55:6c:6d:82:6e:ca:18:64:f7:7c:82:05: 52:12:6f:0b:e0:1a:fd:f7:61:39:12:03:32:23:ed:70:90:1c: 2b:e6:8e:75:68:e4:df:50:80:a6:ba:07:68:98:76:7d:a1:7b: 90:5a:be:67:ed:a9:c1:6f:4e:41:bd:07:d5:ac:24:8b:4f:b9: 83:fb:05:70:12:c8:54:eb:00:4d:65:a5:75:5d:7e:72:3b:2b: cf:8a:f2:e6:c7:a5:38:f1:39:f3:05:e4:d5:c9:54:e1:62:c2: 37:1c:eb:69:24:a9:2d:d4:1c:a2:d8:67:3e:d5:d7:37:80:4e: 65:e2:ab:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiJE+r2ojtDgBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MGNmNGRkODQtY2ZhZS00NmM3LTk2NDktMTYxNzU3MDJhNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA744SRmfNxhaRwJKkmAIp1qWEogb9VDcPCRRh i2/ZGRC5dfdxzmOV02jKPXrKy+IGN0+kiDAvawmJ44/Wy4QgRg9kULcTb66JYuNS pG32k7VXY9ZPhlMAUwq9UgbFRppHdwrR59eDRx6D7PIlOtwjcxzoxZ/mMmQltQs+ 0EOiZ6Hh+AELZuT/oA8xXfvZu6ueyssbxZ33M09r/fPZLEbWWqaaOs2wyfIbllT8 BhqntBVcutBtwm5cRMVv0SnAeM9URNu82cyGplXnAqlbo7u9pQZT61tJ7jZIAog8 QPKphQXR1limGFVRUQBMhpzYE8be71evuCDJRLVGg2pC8S0myQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzsm84K8aIz+keaDZYvzvEbXmECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTFmZjgzMmItZjlkYy0z NzE5LTllOWYtNmU3ZWY5OTIyZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU91qfWs6tOAKtTtRS5CszYDmTBbnRPBM/KEBQ1uIb92IPohsai48VS sS8Qzt/c2SMsxkxZnMRRYnKlQ4TYWWuOoTGQvW8DzyBbyV3/KoH5yN2BGG0OghHb n71I3hNG1+0fECF/UlAl3cGso4JG9tIquFXWuT8zQEYbBXQ9L2ub3VMNMFVsbYJu yhhk93yCBVISbwvgGv33YTkSAzIj7XCQHCvmjnVo5N9QgKa6B2iYdn2he5Bavmft qcFvTkG9B9WsJItPuYP7BXASyFTrAE1lpXVdfnI7K8+K8ubHpTjxOfMF5NXJVOFi wjcc62kkqS3UHKLYZz7V1zeATmXiq3E= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:33 2026 by rpki-client