$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d06901a7-df13-35ea-a39e-950723299f16.roa File: d06901a7-df13-35ea-a39e-950723299f16.roa (raw, json) Hash identifier: cg36qSdnfsFLoPVALl0UVJuXAbCdTDFJC/GrV3EnIlE= Subject key identifier: D9:6B:39:AF:63:96:C0:0A:CE:1D:6F:53:27:1D:B0:34:FB:50:B2:29 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A75F9ADE74A5ABA593AA0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d06901a7-df13-35ea-a39e-950723299f16.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 199.249.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:75:f9:ad:e7:4a:5a:ba:59:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e5b11879-fe61-4f8c-b1a3-0b2659d956e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:58:fb:2c:69:b6:50:b7:33:9f:9b:ae:96: 4e:cf:bd:fa:c6:cc:3d:b8:37:c0:7f:93:0f:c3:8c: a2:18:c8:3c:16:f5:2d:28:11:85:1b:67:63:cc:ff: 34:15:67:d4:45:b0:c6:f6:75:5b:9c:12:c4:db:f4: b9:42:7e:9f:31:1a:a3:94:56:6b:04:12:a0:e4:52: a3:df:4f:5b:0b:8b:07:0d:b6:3f:03:74:94:ea:0b: fe:f9:6e:40:98:ee:43:5c:a2:0d:d5:bc:1c:8e:10: c8:c6:5b:ba:29:25:16:82:e1:c2:b9:ec:7b:fd:0e: 57:45:bf:4f:51:f7:b9:fd:9a:f5:58:9e:73:57:89: ce:ac:8d:3f:5d:d7:45:be:a9:f4:1f:44:40:41:e7: 82:da:76:90:e7:ca:33:21:19:5f:03:db:e8:6e:91: 22:8d:5c:fb:18:b1:7b:b7:a2:44:5e:29:d3:c9:b1: 47:be:9d:24:2c:e8:f6:f5:ee:b0:24:09:e2:42:44: ea:48:f0:8d:8f:7f:5e:74:e9:36:4c:c4:b8:cb:77: e5:5e:c0:61:10:cc:fc:95:b8:3d:be:6a:96:b2:2c: e4:69:8a:5b:30:ee:17:59:eb:e3:12:cc:ed:e5:d3: 9a:0e:60:2e:ee:52:df:4f:cd:d9:d7:ef:f7:77:1c: ed:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6B:39:AF:63:96:C0:0A:CE:1D:6F:53:27:1D:B0:34:FB:50:B2:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d06901a7-df13-35ea-a39e-950723299f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:54:3e:fb:c3:59:d6:c8:10:c2:08:1c:9d:d6:79:97:90:d6: 43:17:58:19:ca:93:12:65:47:9d:bd:b0:49:9f:e1:88:bb:99: b5:32:8f:0a:f7:bb:aa:16:da:66:de:10:90:02:09:14:c6:53: 98:c7:a7:c3:13:ae:8e:e6:ef:26:33:ea:52:47:3b:43:ca:93: 42:53:5e:0c:43:7c:19:d9:73:19:8e:80:a0:1f:92:89:0d:a9: 37:89:44:83:3a:9d:25:19:f0:3d:76:1f:e9:9c:ae:18:6b:8c: 66:03:6f:85:fd:21:62:4b:43:18:da:3a:30:3d:70:51:6b:27: 0b:0a:f0:7e:ff:c8:78:48:d3:da:b5:62:87:3d:cf:0e:07:77: b2:4f:81:c4:60:22:25:75:64:ab:77:44:63:3d:ad:09:bb:be: 4f:65:71:c3:8e:55:95:b9:57:6c:04:3e:d6:dc:c7:69:24:6e: ef:21:0d:a6:a3:8f:97:6f:8a:70:32:7e:96:2c:1c:3c:19:52: 97:41:f5:bb:dd:0b:c4:d4:8e:00:57:3a:65:12:13:83:28:55: d9:ab:33:a4:ca:69:cd:ea:f0:65:c8:7c:8e:ea:85:5b:51:a2: 3d:29:c6:73:83:49:90:6f:ff:c2:4f:19:fb:19:ca:94:42:ee: 00:18:f8:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jenX5redKWrpZOqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTViMTE4NzktZmU2MS00ZjhjLWIxYTMtMGIyNjU5ZDk1NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqlY+yxptlC3M5+brpZOz736xsw9uDfAf5MP w4yiGMg8FvUtKBGFG2djzP80FWfURbDG9nVbnBLE2/S5Qn6fMRqjlFZrBBKg5FKj 309bC4sHDbY/A3SU6gv++W5AmO5DXKIN1bwcjhDIxlu6KSUWguHCuex7/Q5XRb9P Ufe5/Zr1WJ5zV4nOrI0/XddFvqn0H0RAQeeC2naQ58ozIRlfA9vobpEijVz7GLF7 t6JEXinTybFHvp0kLOj29e6wJAniQkTqSPCNj39edOk2TMS4y3flXsBhEMz8lbg9 vmqWsizkaYpbMO4XWevjEszt5dOaDmAu7lLfT83Z1+/3dxztDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlrOa9jlsAKzh1vUycdsDT7ULIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDA2OTAxYTctZGYxMy0z NWVhLWEzOWUtOTUwNzIzMjk5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxUPvvDWdbIEMIIHJ3WeZeQ1kMXWBnKkxJlR529sEmf4Yi7mbUyjwr3 u6oW2mbeEJACCRTGU5jHp8MTro7m7yYz6lJHO0PKk0JTXgxDfBnZcxmOgKAfkokN qTeJRIM6nSUZ8D12H+mcrhhrjGYDb4X9IWJLQxjaOjA9cFFrJwsK8H7/yHhI09q1 Yoc9zw4Hd7JPgcRgIiV1ZKt3RGM9rQm7vk9lccOOVZW5V2wEPtbcx2kkbu8hDaaj j5dvinAyfpYsHDwZUpdB9bvdC8TUjgBXOmUSE4MoVdmrM6TKac3q8GXIfI7qhVtR oj0pxnODSZBv/8JPGfsZypRC7gAY+Hc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:17 2026 by rpki-client