$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa File: a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa (raw, json) Hash identifier: WDxevE62H50SliCiSWRiHPz9Bc2BbvyXdvBD/2O09e8= Subject key identifier: 00:49:98:FF:F4:AE:12:DF:86:A9:7B:76:78:F6:87:2B:47:82:BB:44 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A001BD29F4FDC2E02F400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.254.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:00:1b:d2:9f:4f:dc:2e:02:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=828f007d-4673-4e53-b7e2-545212dea613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:ba:95:3a:bd:50:cd:9b:01:3c:37:b9:f9: de:1f:6b:d4:69:dc:f3:fa:d7:0b:71:b6:a1:89:49: 50:a8:74:93:18:82:cf:1b:ec:78:35:68:71:f9:9d: 5c:dd:37:02:0d:df:9e:82:95:9a:f2:29:72:45:8f: fc:3d:66:2a:8b:bf:c0:4f:0a:95:21:5e:ad:0b:72: 93:c8:d2:76:f9:15:9c:67:90:29:73:f1:27:39:5e: 2b:78:b5:7a:f1:bf:f8:b9:68:ee:9c:d5:80:8e:98: 32:eb:9e:9a:36:84:e2:1c:81:72:8e:d4:d3:74:ed: 17:3a:3c:4a:cb:68:58:ef:87:5d:cd:c2:38:bc:3a: 9c:a3:e8:66:7e:e3:77:f4:9c:dc:0b:d7:3f:2d:7e: 6e:69:c8:cf:63:da:dc:7b:79:ff:92:40:36:e6:2d: 4d:33:a0:34:c6:b4:f0:4b:62:84:a4:5c:dc:e7:b8: b3:45:ac:ad:16:85:5c:9b:86:7f:69:e9:2c:46:30: d7:0e:b4:98:76:3f:61:ec:e8:3d:6d:5d:69:4c:ff: 5d:f4:12:dc:13:48:c2:3d:0b:b5:34:b6:74:27:d2: ad:ad:ff:92:b0:1e:77:d4:87:8e:f7:5c:28:a5:be: 93:60:20:a3:83:d0:4b:c8:88:bd:1f:d2:b2:b1:1b: 4c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:49:98:FF:F4:AE:12:DF:86:A9:7B:76:78:F6:87:2B:47:82:BB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:7b:3a:bc:53:53:10:c7:25:b9:df:fa:2c:c7:47:40:f3:1c: c0:99:ac:5b:ec:5c:75:42:92:cc:3d:e0:ef:88:4b:2a:06:bc: 44:88:28:f7:57:41:79:1e:3a:74:ca:93:c1:c1:dc:28:86:04: 24:5e:1e:13:b7:53:ea:43:2a:0d:c7:42:e0:10:b8:db:57:2b: e2:97:10:3d:19:56:5b:36:83:bb:46:fe:25:49:be:2d:21:44: c4:d1:1d:c7:ba:3d:09:aa:d3:cd:b7:ba:3c:d0:28:fa:43:a8: ab:50:5e:df:93:1c:71:bf:b0:83:81:6f:46:5a:03:85:1f:30: 50:22:ce:73:c1:70:31:ce:df:24:45:ea:0f:d9:97:99:fb:9b: 92:7d:33:48:8b:fa:f2:e0:c6:93:b6:a8:c2:a7:63:b0:eb:45: ed:d6:a0:1c:0c:e1:c0:a5:47:3a:7c:49:ea:7c:92:19:70:45: eb:86:1a:fb:21:40:ec:60:e7:26:35:96:46:c7:9e:f5:ce:0e: 87:ae:4d:da:cc:8c:57:67:2c:49:eb:15:54:5f:48:d9:1e:47: e0:dc:9b:41:80:cf:31:42:05:43:b0:4a:9e:9b:cf:02:30:b9: 07:98:20:d9:d8:d2:dd:7e:db:82:38:5f:31:05:59:11:8f:04: 04:e7:cb:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegAb0p9P3C4C9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODI4ZjAwN2QtNDY3My00ZTUzLWI3ZTItNTQ1MjEyZGVhNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9e6lTq9UM2bATw3ufneH2vUadzz+tcLcbah iUlQqHSTGILPG+x4NWhx+Z1c3TcCDd+egpWa8ilyRY/8PWYqi7/ATwqVIV6tC3KT yNJ2+RWcZ5Apc/EnOV4reLV68b/4uWjunNWAjpgy656aNoTiHIFyjtTTdO0XOjxK y2hY74ddzcI4vDqco+hmfuN39JzcC9c/LX5uacjPY9rce3n/kkA25i1NM6A0xrTw S2KEpFzc57izRaytFoVcm4Z/aeksRjDXDrSYdj9h7Og9bV1pTP9d9BLcE0jCPQu1 NLZ0J9Ktrf+SsB531IeO91wopb6TYCCjg9BLyIi9H9KysRtMSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABJmP/0rhLfhql7dnj2hytHgrtEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYThiNzBkMjMtNzFiMy0z OTg5LWI2ZjEtN2NhMTMzZWMzOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp7OrxTUxDHJbnf+izHR0DzHMCZrFvsXHVCksw94O+ISyoGvESIKPdX QXkeOnTKk8HB3CiGBCReHhO3U+pDKg3HQuAQuNtXK+KXED0ZVls2g7tG/iVJvi0h RMTRHce6PQmq0823ujzQKPpDqKtQXt+THHG/sIOBb0ZaA4UfMFAiznPBcDHO3yRF 6g/Zl5n7m5J9M0iL+vLgxpO2qMKnY7DrRe3WoBwM4cClRzp8Sep8khlwReuGGvsh QOxg5yY1lkbHnvXODoeuTdrMjFdnLEnrFVRfSNkeR+Dcm0GAzzFCBUOwSp6bzwIw uQeYINnY0t1+24I4XzEFWRGPBATnyy4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:35 2026 by rpki-client