$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3126372-297f-334d-8c96-7abcf2d19c7a.roa File: d3126372-297f-334d-8c96-7abcf2d19c7a.roa (raw, json) Hash identifier: hOzuJeyT4j2ibEFyYvIlPU8JlUB5Nt+XkkuR4/GB0wQ= Subject key identifier: 39:2E:77:04:30:D3:9E:14:1E:3D:9C:C3:41:B1:C7:F8:C2:A9:71:41 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A0DFF758E41E13FEE1480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3126372-297f-334d-8c96-7abcf2d19c7a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.254.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:0d:ff:75:8e:41:e1:3f:ee:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f5bd5865-29d7-48c4-9161-f3a5a0fcfb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:c8:5a:fc:dd:9b:26:56:11:6c:08:d9:5a: f2:c5:30:76:93:e0:bb:c3:3f:37:d0:ec:13:1f:7c: dc:85:d7:cd:d6:a0:fb:98:30:14:d4:50:03:0b:de: 9b:00:df:38:87:c6:91:3f:6a:0e:cc:a3:9e:bd:f5: 1f:7f:58:8b:39:f9:40:c1:d1:b2:65:c8:d0:3c:02: 66:ac:10:ce:00:76:47:3c:c6:f4:3f:cb:f5:32:28: 46:64:44:7e:26:e2:50:12:8c:ab:44:b6:2e:44:66: ea:b5:8d:d4:8d:61:31:6b:6b:00:95:f3:52:58:f0: 3a:3e:79:ad:0c:51:a5:6e:73:a1:1d:dd:ad:bc:d5: 3a:74:35:0a:d0:e6:97:22:4d:18:a3:07:28:30:34: 08:01:a3:2e:3d:10:4a:78:73:48:c8:48:3c:8e:19: cb:39:52:79:09:56:a4:40:92:ac:ab:44:97:1e:97: 5d:3f:1d:2d:20:ee:cb:ce:d0:ef:bd:a4:50:c4:c5: 6e:d9:f0:5f:b9:59:dd:ec:78:d1:10:38:08:f4:c8: c8:ff:12:71:87:b0:a2:23:75:ec:6b:33:cb:97:fc: 49:cb:e8:46:14:b7:81:55:a0:11:85:02:13:f0:7c: 33:14:55:4e:d2:a0:12:32:4b:d3:c8:ae:e0:c6:fb: 11:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2E:77:04:30:D3:9E:14:1E:3D:9C:C3:41:B1:C7:F8:C2:A9:71:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3126372-297f-334d-8c96-7abcf2d19c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:39:84:d1:52:62:87:02:69:4f:a7:55:77:08:5f:a7:a9:3c: ad:12:0e:7e:f7:64:6d:a8:49:8a:18:69:7a:a7:cd:69:e5:34: fc:67:65:27:ee:7f:7e:b1:1c:e9:62:65:04:cf:b4:03:89:22: 19:66:33:13:8e:bc:0f:fa:6f:b0:64:f9:a4:d0:09:ef:fe:6e: df:4a:d7:e6:30:c6:4e:a8:d4:d1:61:a9:ee:ba:ac:7e:b0:c6: 30:b3:66:e9:3d:34:3f:2b:b9:52:e3:1b:55:71:f4:38:98:f2: 24:71:ef:f1:20:01:0c:cb:1e:9b:43:d6:69:ef:26:cc:d5:66: 24:ec:db:97:93:c0:a8:28:ce:da:ae:bb:ae:63:fb:3c:12:b6: b4:03:35:5f:0b:62:f8:16:e5:4c:c7:c2:40:6d:71:6c:5c:58: 7f:2a:d4:0a:5d:e2:f5:15:42:d4:c9:63:6c:c5:90:f5:2e:e7: e1:6b:17:37:18:da:fd:9c:de:92:8d:7b:ab:eb:1c:06:21:4c: 2b:e5:a5:52:a9:2b:c4:65:19:2d:75:64:2d:84:5a:01:bf:a0: d2:67:70:5f:cf:4a:f5:58:32:45:9f:6f:33:91:9a:73:b8:fe: ee:32:68:7d:3d:1c:1c:ee:d8:82:f9:b5:37:df:fb:ba:11:d3: b9:c6:ae:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeg3/dY5B4T/uFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjViZDU4NjUtMjlkNy00OGM0LTkxNjEtZjNhNWEwZmNmYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgTIWvzdmyZWEWwI2VryxTB2k+C7wz830OwT H3zchdfN1qD7mDAU1FADC96bAN84h8aRP2oOzKOevfUff1iLOflAwdGyZcjQPAJm rBDOAHZHPMb0P8v1MihGZER+JuJQEoyrRLYuRGbqtY3UjWExa2sAlfNSWPA6Pnmt DFGlbnOhHd2tvNU6dDUK0OaXIk0YowcoMDQIAaMuPRBKeHNIyEg8jhnLOVJ5CVak QJKsq0SXHpddPx0tIO7LztDvvaRQxMVu2fBfuVnd7HjREDgI9MjI/xJxh7CiI3Xs azPLl/xJy+hGFLeBVaARhQIT8HwzFFVO0qASMkvTyK7gxvsR8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkudwQw054UHj2cw0Gxx/jCqXFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDMxMjYzNzItMjk3Zi0z MzRkLThjOTYtN2FiY2YyZDE5YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALM5hNFSYocCaU+nVXcIX6epPK0SDn73ZG2oSYoYaXqnzWnlNPxnZSfu f36xHOliZQTPtAOJIhlmMxOOvA/6b7Bk+aTQCe/+bt9K1+Ywxk6o1NFhqe66rH6w xjCzZuk9ND8ruVLjG1Vx9DiY8iRx7/EgAQzLHptD1mnvJszVZiTs25eTwKgoztqu u65j+zwStrQDNV8LYvgW5UzHwkBtcWxcWH8q1Apd4vUVQtTJY2zFkPUu5+FrFzcY 2v2c3pKNe6vrHAYhTCvlpVKpK8RlGS11ZC2EWgG/oNJncF/PSvVYMkWfbzORmnO4 /u4yaH09HBzu2IL5tTff+7oR07nGrnY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:35 2026 by rpki-client