$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d37def54-88c6-3173-8458-6ac8076da5df.roa File: d37def54-88c6-3173-8458-6ac8076da5df.roa (raw, json) Hash identifier: aE+Zr67aXjWkQRXVN6Wi2ZXhvMBeKq9g7YQI2ZnuNsI= Subject key identifier: B1:C1:77:F9:26:68:DA:A6:0A:7B:86:F7:1C:3A:70:53:67:B9:4E:29 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A1E1CD1A2D28D177A92C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d37def54-88c6-3173-8458-6ac8076da5df.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.254.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1e:1c:d1:a2:d2:8d:17:7a:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e6e8c8b5-5fd0-400a-9898-a4ffa7aeaeb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:57:4e:a9:81:4d:86:32:77:33:94:e9:4e: f4:20:15:36:53:65:eb:d9:0b:61:21:9f:bb:a3:72: 8f:86:90:3f:99:bc:77:90:d0:6d:eb:01:6b:d3:fa: 4e:ac:45:fc:e9:42:1e:16:8b:d9:f3:d6:46:c7:b1: c9:a3:2e:04:58:6f:e9:d2:b2:8d:c0:5c:4d:cf:4d: 33:7b:ba:8b:f3:c5:b1:6d:02:97:1a:41:2c:08:18: 71:5e:95:91:4e:6b:9f:5a:31:56:df:f1:a9:8a:04: df:a6:d8:fc:4c:4b:da:8c:d3:10:26:71:79:b9:c6: 09:4b:a3:54:b2:09:76:57:9a:95:38:ad:9f:34:9c: bb:72:eb:22:5a:8b:59:d0:36:0a:78:43:b6:96:ce: 82:99:be:04:e0:ae:d2:f7:7c:35:66:f6:80:68:27: bd:16:cb:ab:ab:36:43:6b:98:50:53:73:15:05:0f: 3d:62:67:b3:f3:91:54:6e:57:38:15:73:9b:1d:d9: 1e:89:e1:8d:24:2c:d0:b8:a5:b3:cd:c0:f2:ca:b7: 1e:5e:85:e3:23:1d:6f:0e:fc:b4:cc:86:ab:b2:32: 51:e3:02:f0:a1:92:36:64:e6:04:23:1d:a7:ae:2f: 9a:1e:fd:e5:ad:67:62:67:74:29:26:53:61:5a:d7: 24:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C1:77:F9:26:68:DA:A6:0A:7B:86:F7:1C:3A:70:53:67:B9:4E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d37def54-88c6-3173-8458-6ac8076da5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:92:43:83:8d:fa:ef:c2:e3:df:cb:98:0f:8d:74:80:64:53: cb:4b:3b:6d:a6:47:c9:f6:e2:af:e4:85:07:c8:82:c4:0a:54: 8b:ad:95:dd:31:9f:97:68:2d:7f:0b:5a:8a:cb:3f:34:41:a9: a3:6f:96:1a:79:02:21:35:3c:42:ad:d1:89:4c:1a:17:5e:05: fd:a5:f3:c5:01:37:60:2a:7c:3e:6c:f8:e1:c9:67:3b:6a:0b: f8:56:57:d7:fd:61:fc:96:c4:e7:bf:f3:95:51:37:6a:c1:9f: e5:2f:45:61:9d:bb:bf:db:0e:6f:6d:06:e0:ea:b9:0f:9f:3c: b6:1e:04:87:67:4e:eb:93:3b:f4:1f:26:31:c6:2a:09:4b:57: b5:a8:2b:b0:6d:65:4b:af:1f:72:2b:13:41:3e:50:76:ca:f6: 1b:07:07:a0:48:f8:aa:7f:99:77:19:0c:e6:4a:ef:90:25:d9: 99:7e:38:b8:18:e9:bb:9a:48:a6:81:40:fd:1c:e2:a6:60:22: 77:5e:4e:42:60:7d:80:3f:78:a9:4c:83:be:a2:02:1a:51:6a: e1:37:ab:c1:11:0b:4f:1a:1c:b8:58:81:70:7c:69:74:b7:90: a6:ea:7c:a5:8a:f7:3a:47:ae:59:7e:5c:5c:af:f8:25:74:27: ef:4a:6c:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeh4c0aLSjRd6ksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTZlOGM4YjUtNWZkMC00MDBhLTk4OTgtYTRmZmE3YWVhZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhlXTqmBTYYydzOU6U70IBU2U2Xr2QthIZ+7 o3KPhpA/mbx3kNBt6wFr0/pOrEX86UIeFovZ89ZGx7HJoy4EWG/p0rKNwFxNz00z e7qL88WxbQKXGkEsCBhxXpWRTmufWjFW3/GpigTfptj8TEvajNMQJnF5ucYJS6NU sgl2V5qVOK2fNJy7cusiWotZ0DYKeEO2ls6Cmb4E4K7S93w1ZvaAaCe9FsurqzZD a5hQU3MVBQ89Ymez85FUblc4FXObHdkeieGNJCzQuKWzzcDyyrceXoXjIx1vDvy0 zIarsjJR4wLwoZI2ZOYEIx2nri+aHv3lrWdiZ3QpJlNhWtckXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHBd/kmaNqmCnuG9xw6cFNnuU4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDM3ZGVmNTQtODhjNi0z MTczLTg0NTgtNmFjODA3NmRhNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaSQ4ON+u/C49/LmA+NdIBkU8tLO22mR8n24q/khQfIgsQKVIutld0x n5doLX8LWorLPzRBqaNvlhp5AiE1PEKt0YlMGhdeBf2l88UBN2AqfD5s+OHJZztq C/hWV9f9YfyWxOe/85VRN2rBn+UvRWGdu7/bDm9tBuDquQ+fPLYeBIdnTuuTO/Qf JjHGKglLV7WoK7BtZUuvH3IrE0E+UHbK9hsHB6BI+Kp/mXcZDOZK75Al2Zl+OLgY 6buaSKaBQP0c4qZgIndeTkJgfYA/eKlMg76iAhpRauE3q8ERC08aHLhYgXB8aXS3 kKbqfKWK9zpHrll+XFyv+CV0J+9KbCg= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:51 2026 by rpki-client