$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa File: cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa (raw, json) Hash identifier: SFN3sUPRZMCSqkZvtqvKJTKJtKJ8vmeFpvXU0BtFozo= Subject key identifier: FB:C0:14:46:C8:AB:93:6D:10:EC:E7:73:DB:87:39:D0:52:6B:EA:28 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379F1FEB471EFE6175E3D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.249.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f1:fe:b4:71:ef:e6:17:5e:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=329edeaf-0260-4f1d-a97a-fd305b80a694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:84:28:ff:69:c1:96:5a:ca:b1:23:00:b1: 46:3f:66:d3:30:02:c5:cd:ea:f7:e0:5e:7a:74:12: 43:a0:d9:48:bc:1f:43:18:9a:92:b6:ac:1f:9d:e6: b9:b5:8f:23:bb:e3:4f:2a:38:da:cb:92:c0:ae:a0: 9c:1c:6f:b7:12:3a:10:8c:8c:25:51:18:dc:16:0a: 52:21:5d:9d:53:ac:14:4a:0f:1b:ca:66:d6:0e:8b: 92:64:bc:cd:94:96:98:ca:27:bf:56:c2:e8:ef:3e: d9:89:ba:ba:0c:23:cf:d9:c1:aa:28:b4:bf:f9:3e: c6:d0:98:d1:8a:29:07:b3:a7:ac:0c:de:89:34:3d: a3:32:c3:fe:a7:fc:eb:d8:05:b2:d2:99:1a:60:3a: 53:0e:02:7e:81:28:71:17:77:f6:50:2b:41:cd:57: fc:eb:c7:2d:a6:a4:c7:08:bf:68:8b:0e:ea:81:10: ff:78:92:25:94:54:55:a6:c6:d5:41:d8:b6:76:c0: fc:71:66:26:31:c4:ca:5e:96:a8:45:86:26:7b:81: 7b:34:83:64:85:1c:31:0d:06:49:ae:60:68:03:51: 90:95:01:d5:60:64:10:81:1c:cc:2d:f5:1c:cf:d5: 24:84:e8:d9:a1:fc:7c:2b:3c:94:fd:bd:24:d3:0d: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C0:14:46:C8:AB:93:6D:10:EC:E7:73:DB:87:39:D0:52:6B:EA:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:df:5d:c2:f5:51:64:1b:e3:ca:0c:37:94:35:3e:90:24:f0: 8d:a4:44:c9:41:45:64:64:55:20:e0:a9:74:dd:bc:97:1a:1d: a2:ce:66:69:6e:4a:fe:66:49:ed:99:78:17:c5:f8:0a:5c:61: 27:a2:c4:b1:bc:96:4a:54:45:2b:1a:55:33:e9:36:08:3e:c3: bb:50:29:67:2c:8a:83:ac:41:68:0d:08:c1:f0:1c:f8:7d:f0: e7:c4:6c:53:b7:db:cd:59:14:b5:55:50:cd:37:be:3b:6c:54: 53:60:1a:05:72:76:74:97:e5:c1:8e:95:14:c9:74:c3:10:a6: f7:2f:a6:7e:89:19:2b:c3:d7:75:b8:57:07:cd:0d:2a:da:e4: 96:d2:3b:54:77:35:bf:dc:a4:33:58:65:09:5d:8b:a2:cc:82: 5c:80:ef:45:03:fa:cf:e6:07:1e:0c:39:ab:12:51:c2:35:45: 51:62:87:02:73:6c:c6:78:2a:10:e0:97:b6:c3:7f:63:f1:c0: 5d:f6:09:7d:ca:cb:59:34:39:55:d1:61:22:a0:99:ca:bc:ae: 29:b8:c8:b5:bf:8f:0c:d5:00:69:bb:42:09:21:d6:d6:3b:c4: 82:2d:d1:56:bc:72:bb:2e:35:fc:bb:94:ce:df:29:a8:73:24: 12:a1:de:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefH+tHHv5hdePQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzI5ZWRlYWYtMDI2MC00ZjFkLWE5N2EtZmQzMDViODBhNjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkReEKP9pwZZayrEjALFGP2bTMALFzer34F56 dBJDoNlIvB9DGJqStqwfnea5tY8ju+NPKjjay5LArqCcHG+3EjoQjIwlURjcFgpS IV2dU6wUSg8bymbWDouSZLzNlJaYyie/VsLo7z7Zibq6DCPP2cGqKLS/+T7G0JjR iikHs6esDN6JND2jMsP+p/zr2AWy0pkaYDpTDgJ+gShxF3f2UCtBzVf868ctpqTH CL9oiw7qgRD/eJIllFRVpsbVQdi2dsD8cWYmMcTKXpaoRYYme4F7NINkhRwxDQZJ rmBoA1GQlQHVYGQQgRzMLfUcz9UkhOjZofx8KzyU/b0k0w2DYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvAFEbIq5NtEOznc9uHOdBSa+ooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2RjM2RjOTQtNDNjMC0z ZTVlLTkwZjQtNDkxMWMyOTljNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFffXcL1UWQb48oMN5Q1PpAk8I2kRMlBRWRkVSDgqXTdvJcaHaLOZmlu Sv5mSe2ZeBfF+ApcYSeixLG8lkpURSsaVTPpNgg+w7tQKWcsioOsQWgNCMHwHPh9 8OfEbFO3281ZFLVVUM03vjtsVFNgGgVydnSX5cGOlRTJdMMQpvcvpn6JGSvD13W4 VwfNDSra5JbSO1R3Nb/cpDNYZQldi6LMglyA70UD+s/mBx4MOasSUcI1RVFihwJz bMZ4KhDgl7bDf2PxwF32CX3Ky1k0OVXRYSKgmcq8rim4yLW/jwzVAGm7Qgkh1tY7 xIIt0Va8crsuNfy7lM7fKahzJBKh3ng= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:29 2026 by rpki-client