$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa File: cdd97578-6813-332c-a0bf-22a87019cc3f.roa (raw, json) Hash identifier: Wca6bCfS+AwNUHesc+03/PpaWbPyFPssTlogxZEQR3w= Subject key identifier: 02:AF:5A:4B:19:CA:3F:B1:BF:74:49:BD:48:34:6F:3C:3F:C7:84:6D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A031C88611724571F3D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.254.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:03:1c:88:61:17:24:57:1f:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=343c1666-ad09-4bfc-abe0-a1818a1e24d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:62:5f:1f:b3:62:e4:63:71:a1:00:9b:00: ff:95:4c:21:de:a6:f6:6f:3a:0e:81:06:ac:23:91: 2a:90:63:a6:b1:21:43:be:d6:4d:aa:9e:22:1c:ad: 68:4d:78:07:77:66:9c:c5:73:46:a6:63:22:a9:69: 70:95:d9:89:07:05:0b:2b:d7:5f:0f:2d:3b:eb:49: 59:d4:e2:7c:b2:55:88:98:ce:b5:1e:d3:0c:59:5c: e1:d9:fa:1b:cf:ab:0b:1c:d1:87:38:95:75:a0:dd: 22:75:c9:09:08:25:cc:9c:c4:dd:20:5a:0a:c9:d8: a6:87:90:7e:fa:41:78:eb:ff:73:6b:af:c0:92:cb: 77:45:7b:21:68:89:02:07:9b:ef:56:c9:21:38:27: c2:68:4c:e9:84:4f:d3:a0:98:0f:26:d6:91:7e:37: 13:fc:20:b0:95:f7:f7:8a:dd:a9:50:ad:de:a7:73: c0:a5:c9:27:7d:ec:03:ff:24:c5:78:5f:eb:ff:ab: 43:51:4e:f3:24:3c:6c:4c:42:e7:93:ad:51:b9:ae: c3:df:08:2b:fe:53:96:5b:54:12:fe:75:b2:e1:b9: 52:96:9a:f0:26:bc:8e:dd:5d:80:b8:ea:e0:22:45: 0b:a3:d3:3b:0a:29:d4:08:25:0b:4a:12:73:8b:92: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AF:5A:4B:19:CA:3F:B1:BF:74:49:BD:48:34:6F:3C:3F:C7:84:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:14:e1:4b:c7:b1:5c:0f:f4:78:25:71:96:79:29:64:a3:c5: b5:47:5b:8e:f0:d1:13:5c:ed:0b:50:6f:fb:cd:55:e7:45:c2: 92:53:9a:b6:98:5f:71:2f:e6:d9:a3:ea:3f:fa:a1:e0:dc:96: 45:b0:9b:17:f1:d3:e0:c1:7a:61:b6:0f:6d:0e:0d:f7:65:5f: c2:58:99:ad:0a:d7:d1:15:56:59:9e:34:3a:27:9c:34:68:a6: 36:e2:86:8d:96:c6:88:3f:d6:81:82:86:5f:22:4e:58:2d:69: 77:71:f5:a1:11:45:e5:af:44:d9:5b:0d:f5:17:84:ac:94:42: 51:9e:fc:fe:c0:f2:37:8b:ed:9d:6c:ce:dc:28:a6:90:fa:e0: 34:4e:4d:93:4a:49:66:d2:38:4c:0c:ed:83:26:b1:08:db:9c: e8:d8:1f:9f:d6:ff:af:fd:ed:a5:d8:fe:ff:4a:70:b5:ad:1b: cf:fd:4a:d1:19:20:5c:10:5a:18:7b:5f:5f:8d:84:4b:3a:43: 15:09:b6:f4:d0:d9:ea:2c:c5:4c:35:10:75:77:d7:e9:12:db: e1:8e:5f:94:9c:5b:88:bd:cb:88:8f:dd:b7:a8:34:e9:59:05: 6e:9f:f0:d2:53:d6:38:b1:76:c0:5f:e3:70:c4:82:e8:7a:53: 6f:4b:7d:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegMciGEXJFcfPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzQzYzE2NjYtYWQwOS00YmZjLWFiZTAtYTE4MThhMWUyNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjBiXx+zYuRjcaEAmwD/lUwh3qb2bzoOgQas I5EqkGOmsSFDvtZNqp4iHK1oTXgHd2acxXNGpmMiqWlwldmJBwULK9dfDy0760lZ 1OJ8slWImM61HtMMWVzh2fobz6sLHNGHOJV1oN0idckJCCXMnMTdIFoKydimh5B+ +kF46/9za6/Akst3RXshaIkCB5vvVskhOCfCaEzphE/ToJgPJtaRfjcT/CCwlff3 it2pUK3ep3PApcknfewD/yTFeF/r/6tDUU7zJDxsTELnk61Rua7D3wgr/lOWW1QS /nWy4blSlprwJryO3V2AuOrgIkULo9M7CinUCCULShJzi5KAqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKvWksZyj+xv3RJvUg0bzw/x4RtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2RkOTc1NzgtNjgxMy0z MzJjLWEwYmYtMjJhODcwMTljYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUU4UvHsVwP9HglcZZ5KWSjxbVHW47w0RNc7QtQb/vNVedFwpJTmraY X3Ev5tmj6j/6oeDclkWwmxfx0+DBemG2D20ODfdlX8JYma0K19EVVlmeNDonnDRo pjbiho2Wxog/1oGChl8iTlgtaXdx9aERReWvRNlbDfUXhKyUQlGe/P7A8jeL7Z1s ztwoppD64DROTZNKSWbSOEwM7YMmsQjbnOjYH5/W/6/97aXY/v9KcLWtG8/9StEZ IFwQWhh7X1+NhEs6QxUJtvTQ2eosxUw1EHV31+kS2+GOX5ScW4i9y4iP3beoNOlZ BW6f8NJT1jixdsBf43DEguh6U29Lfdg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:19:56 2026 by rpki-client