$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8850ef7-4877-342e-a07c-5523438747d6.roa File: b8850ef7-4877-342e-a07c-5523438747d6.roa (raw, json) Hash identifier: effijXHq/3vvK0tpbpCUCFDkEGiuW4r13M/rwJiTOQM= Subject key identifier: B5:DB:F3:A2:8F:3B:81:46:9B:E0:E8:D5:2D:02:6E:CB:B3:87:CF:B1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A733B29933987A64A7580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8850ef7-4877-342e-a07c-5523438747d6.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 199.249.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:73:3b:29:93:39:87:a6:4a:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=bca7311f-ef1e-4816-8ee4-93115150faf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:e9:05:65:d3:55:89:9e:b4:5c:5e:fa:c8: c1:a4:69:eb:23:a5:e3:f1:b0:da:05:47:64:50:7c: fc:24:c5:3c:8d:80:20:74:ce:26:36:b3:3f:9f:c6: 19:cf:54:39:d6:9b:6b:28:1a:45:dd:63:ff:64:61: b4:82:3f:a0:c8:f7:27:f3:b5:96:21:6e:4f:a1:5f: 3a:97:50:93:ad:24:6e:8b:23:db:94:0c:16:d6:87: 2d:4c:8a:e0:46:29:7e:5b:3b:04:43:c5:c0:bf:89: 13:9c:38:81:b0:8b:fe:24:5e:aa:7b:8a:53:ee:b0: 57:3d:43:fa:41:66:2d:ce:aa:bf:65:c2:1d:8b:41: 9e:b9:00:41:bd:cb:65:87:0b:02:97:8d:4c:85:b3: 5a:36:18:d3:95:ec:6d:aa:1b:87:de:c4:0d:f4:1e: 7d:67:e4:a5:0f:20:1e:54:fc:df:ba:25:05:7e:f3: ca:62:0a:c1:8d:f6:e8:8a:fd:3a:09:95:d2:8c:8f: ef:34:f6:c8:35:35:d5:d5:bb:d8:f9:28:bf:e0:a8: 47:d7:7d:40:59:1d:24:5d:b2:5d:27:6f:4a:31:b1: fb:02:e0:a7:06:f9:98:42:d7:b2:fa:7b:cb:f8:80: 37:8b:15:fb:9f:8c:dc:48:7d:76:3b:08:2b:ee:33: ec:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:F3:A2:8F:3B:81:46:9B:E0:E8:D5:2D:02:6E:CB:B3:87:CF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8850ef7-4877-342e-a07c-5523438747d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:68:83:45:ec:3e:09:7a:c3:9f:63:32:ce:cc:90:a5:a8:8d: 94:5f:dc:28:5b:4c:ce:b7:4c:c6:4e:f4:d9:69:ae:5f:31:e1: da:37:1b:e3:be:d0:e9:79:42:88:71:9d:4e:fc:c8:5a:3e:c4: 5a:63:2a:f3:eb:64:4b:41:fb:69:5b:30:ee:9e:19:98:fa:83: 40:9f:63:06:7a:35:a1:26:17:e2:5c:36:f4:ac:65:10:90:66: e8:4b:d2:5f:3e:ca:df:e1:79:71:c4:7f:eb:6c:0f:64:43:af: 9b:c5:34:c1:84:86:08:bd:31:47:26:3e:dd:da:bb:00:b6:f9: c8:44:47:b9:19:82:e2:aa:3b:94:98:40:ef:73:59:b0:15:81: 43:70:1c:af:9c:72:bf:95:06:b7:6e:a9:66:38:62:b9:43:71: ed:70:c1:52:df:83:ce:8e:9e:94:77:1d:fb:b8:1e:50:73:40: 05:46:2b:d2:95:f0:83:f2:7e:5a:4e:48:33:dc:b8:af:3b:67: 71:54:5d:8f:78:99:99:bf:a5:aa:46:eb:c7:83:b9:31:5d:3c: 06:8e:40:b6:6e:31:4c:02:1d:c2:80:f7:39:f5:a8:8c:80:af: 9a:b9:8e:18:dd:2d:3c:5e:12:d0:b6:1f:84:77:5e:7f:cc:a1: e3:fa:7a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jenM7KZM5h6ZKdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YmNhNzMxMWYtZWYxZS00ODE2LThlZTQtOTMxMTUxNTBmYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pXpBWXTVYmetFxe+sjBpGnrI6Xj8bDaBUdk UHz8JMU8jYAgdM4mNrM/n8YZz1Q51ptrKBpF3WP/ZGG0gj+gyPcn87WWIW5PoV86 l1CTrSRuiyPblAwW1octTIrgRil+WzsEQ8XAv4kTnDiBsIv+JF6qe4pT7rBXPUP6 QWYtzqq/ZcIdi0GeuQBBvctlhwsCl41MhbNaNhjTlextqhuH3sQN9B59Z+SlDyAe VPzfuiUFfvPKYgrBjfboiv06CZXSjI/vNPbINTXV1bvY+Si/4KhH131AWR0kXbJd J29KMbH7AuCnBvmYQtey+nvL+IA3ixX7n4zcSH12Owgr7jPsQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXb86KPO4FGm+Do1S0Cbsuzh8+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjg4NTBlZjctNDg3Ny0z NDJlLWEwN2MtNTUyMzQzODc0N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBog0XsPgl6w59jMs7MkKWojZRf3ChbTM63TMZO9Nlprl8x4do3G+O+ 0Ol5QohxnU78yFo+xFpjKvPrZEtB+2lbMO6eGZj6g0CfYwZ6NaEmF+JcNvSsZRCQ ZuhL0l8+yt/heXHEf+tsD2RDr5vFNMGEhgi9MUcmPt3auwC2+chER7kZguKqO5SY QO9zWbAVgUNwHK+ccr+VBrduqWY4YrlDce1wwVLfg86OnpR3Hfu4HlBzQAVGK9KV 8IPyflpOSDPcuK87Z3FUXY94mZm/papG68eDuTFdPAaOQLZuMUwCHcKA9zn1qIyA r5q5jhjdLTxeEtC2H4R3Xn/MoeP6eig= -----END CERTIFICATE-----Generated at Thu Mar 26 13:22:33 2026 by rpki-client