$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa File: cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa (raw, json) Hash identifier: ofriKZLl3irP3AI+l3OEf7qRlKnCucYsuU1ZiC6s1rI= Subject key identifier: 63:96:8D:BD:B8:1D:45:D6:5C:E1:66:A6:A2:10:FA:B1:CC:61:E8:8F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A4DD745C01B6EDE52E780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.182.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4d:d7:45:c0:1b:6e:de:52:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=2d0cdca1-947d-472a-93e3-20e0ae8aa0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:98:0d:5f:77:48:fe:57:9a:07:85:58:f9: 6b:c1:04:bb:24:f3:9c:e9:0e:c0:68:3f:34:8d:86: 12:1d:7d:8a:b6:e8:ec:1c:9b:d1:44:dc:88:c7:72: ce:4c:7e:ca:2c:3c:c1:1a:38:be:94:67:b2:3e:0e: 54:9d:54:61:de:bb:d8:bd:c6:be:9e:3c:a1:b9:6c: 91:d3:4e:77:8e:a3:5d:e2:55:e7:a7:da:fc:2d:27: 47:c0:00:d9:56:60:ea:20:81:a2:93:bb:65:10:f2: bb:a2:9a:65:fa:e0:1a:6c:16:40:19:29:27:78:a2: 01:f9:7a:7f:1c:74:f4:ca:80:c7:65:ad:a0:53:a9: d0:3b:c2:af:17:44:94:b5:fc:73:1a:ac:3e:41:60: ab:1a:4c:50:cc:31:55:3d:61:e6:bf:dc:e7:0c:28: 34:2e:87:57:a3:06:fc:31:9b:d2:e9:aa:88:75:b0: 02:65:d1:cf:bc:ea:b0:05:40:70:03:84:d6:83:08: b4:ab:e0:20:8e:4f:77:fc:af:58:ea:fa:95:f9:99: b3:29:01:b2:ec:59:02:66:5e:6e:79:f9:05:82:14: a2:0a:e3:4c:b6:cd:0d:b7:a4:f7:5e:48:4d:4f:5e: 15:13:8b:43:98:c3:82:b9:99:f9:bf:c2:2c:33:52: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:96:8D:BD:B8:1D:45:D6:5C:E1:66:A6:A2:10:FA:B1:CC:61:E8:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:01:04:37:b8:3d:62:53:90:b6:d6:43:56:50:a1:16:5c:c2: 3d:86:94:23:a3:31:35:c2:fb:ea:c2:f3:6e:09:bf:6b:ca:0e: 56:29:4e:7d:7e:e0:32:f1:4d:ba:5a:60:20:eb:6a:f9:b1:8f: b6:b3:df:cd:aa:b6:22:27:c1:89:c9:45:0c:33:7d:29:64:ce: 6e:3e:3f:3f:a5:0e:f2:5d:d3:98:39:ea:63:1a:bb:89:10:61: 42:fd:44:eb:c8:66:42:13:54:40:9a:c3:ca:92:7d:c5:df:46: cc:94:13:67:c6:3e:b3:65:10:20:27:30:87:47:d0:44:34:8c: 67:d4:23:c1:2e:98:70:6e:e6:79:90:8d:96:a7:aa:70:43:36: f8:58:59:79:80:2e:7f:60:8b:68:5f:1d:a2:81:02:81:68:cb: 43:74:e7:76:7a:31:48:49:4e:d8:bd:10:4a:4c:4f:2a:da:f0: 63:74:3b:1e:34:a5:ac:f1:4f:ee:ec:a8:f5:ab:08:55:c2:09: 04:2e:c3:0e:76:92:fb:72:90:58:eb:4a:68:93:a1:01:c6:f9: 1a:24:98:79:84:65:60:8d:77:a1:ff:df:e1:b8:e0:2e:af:31: bd:3f:99:44:d5:21:a9:ec:db:ba:cc:8f:d1:ae:a6:6b:5b:32: 2a:4a:58:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jek3XRcAbbt5S54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MmQwY2RjYTEtOTQ3ZC00NzJhLTkzZTMtMjBlMGFlOGFhMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT6YDV93SP5XmgeFWPlrwQS7JPOc6Q7AaD80 jYYSHX2KtujsHJvRRNyIx3LOTH7KLDzBGji+lGeyPg5UnVRh3rvYvca+njyhuWyR 0053jqNd4lXnp9r8LSdHwADZVmDqIIGik7tlEPK7oppl+uAabBZAGSkneKIB+Xp/ HHT0yoDHZa2gU6nQO8KvF0SUtfxzGqw+QWCrGkxQzDFVPWHmv9znDCg0LodXowb8 MZvS6aqIdbACZdHPvOqwBUBwA4TWgwi0q+Agjk93/K9Y6vqV+ZmzKQGy7FkCZl5u efkFghSiCuNMts0Nt6T3XkhNT14VE4tDmMOCuZn5v8IsM1KALQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOWjb24HUXWXOFmpqIQ+rHMYeiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2Q4YzA5MDUtYWM4MC0z ODA2LWE5OGUtZTA3YmQ1ZmM1YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0BBDe4PWJTkLbWQ1ZQoRZcwj2GlCOjMTXC++rC824Jv2vKDlYpTn1+ 4DLxTbpaYCDravmxj7az382qtiInwYnJRQwzfSlkzm4+Pz+lDvJd05g56mMau4kQ YUL9ROvIZkITVECaw8qSfcXfRsyUE2fGPrNlECAnMIdH0EQ0jGfUI8EumHBu5nmQ jZanqnBDNvhYWXmALn9gi2hfHaKBAoFoy0N053Z6MUhJTti9EEpMTyra8GN0Ox40 pazxT+7sqPWrCFXCCQQuww52kvtykFjrSmiToQHG+RokmHmEZWCNd6H/3+G44C6v Mb0/mUTVIans27rMj9GupmtbMipKWKk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:14 2026 by rpki-client