$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa File: ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa (raw, json) Hash identifier: GE0yHw7xolfZEr7uJx3qJ39rrbHERTAcvx/dWtD75pg= Subject key identifier: 8A:93:71:80:C2:B9:A1:4E:06:7B:AC:E4:26:E1:CA:86:BE:90:EC:77 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A5562C2D27CF5A81C6400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.182.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:55:62:c2:d2:7c:f5:a8:1c:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e157809d-231f-44a6-8871-9ce865fd7f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:aa:ab:c9:97:0c:ba:92:c8:f4:58:1c:8c: 36:9a:2d:67:bb:bb:e9:71:26:77:bc:f6:43:b1:e0: 94:04:19:de:d6:01:2b:90:88:a7:8c:cc:55:16:96: 9b:ce:9f:7d:d8:a7:94:ca:38:36:03:a5:5b:e2:57: 5c:2f:80:1f:38:a8:e4:07:f6:a8:1d:9a:4a:25:d7: d9:66:64:d0:27:fe:65:66:3f:49:00:21:97:eb:46: 4c:62:a5:be:d5:51:d1:14:97:9c:62:cb:b6:05:65: ff:b5:fc:b7:1f:04:05:6e:f1:cb:52:92:90:e4:d4: 75:57:ee:0d:15:34:54:f2:03:53:de:36:bc:6f:e1: f6:41:80:ce:84:66:6b:8f:ff:d7:e4:dd:01:3d:41: 8f:10:8c:92:34:9a:1c:87:79:7c:75:d2:e0:6d:75: c0:6e:65:a5:75:40:48:0e:a3:e0:ad:3c:a6:ba:e4: bb:08:22:77:75:69:85:53:4c:e9:d6:83:b2:02:69: b3:ff:ff:ec:1c:29:91:86:78:8c:c4:0e:fc:1d:5b: fd:f3:ff:52:95:51:b2:e8:8c:76:83:93:8e:49:de: 90:15:ea:0d:dc:ff:c4:0c:82:a3:77:92:a9:4b:18: 78:84:8b:86:8c:3a:6d:77:e6:04:ff:65:03:7b:3a: 12:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:93:71:80:C2:B9:A1:4E:06:7B:AC:E4:26:E1:CA:86:BE:90:EC:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:83:0b:54:98:a8:6f:b4:88:34:7c:69:78:54:05:5d:32:e9: a2:c3:c2:3b:2f:0b:23:54:49:f5:24:45:94:d0:50:0f:04:02: 91:92:34:a8:24:33:21:e4:2b:f7:df:e9:a0:55:05:86:54:90: 6c:92:37:6d:6d:ef:c8:53:90:eb:5e:38:d0:34:28:15:94:1d: 26:fd:d4:5d:d8:e7:e8:d3:50:ae:21:65:4d:80:26:64:63:8c: 04:ca:f8:3b:92:17:26:3d:a9:82:8b:2a:00:ad:c5:31:26:ae: 50:ef:46:66:f8:7a:c9:5b:e2:ac:68:ae:36:6f:09:2a:ac:54: 47:41:8a:87:39:39:e9:32:4b:ae:24:23:06:95:a1:2b:de:0c: 74:a2:ad:36:ab:5f:cb:a0:de:9b:eb:62:87:2d:15:be:1e:c4: 17:b6:4a:77:e6:35:04:f4:e2:b0:9f:e0:ca:25:fe:ad:1c:19: 25:f0:f3:d0:cd:ef:15:a9:6c:50:9d:2e:fe:bc:c7:81:70:47: b8:f8:4f:ad:5a:8f:4f:04:be:fb:f1:7e:bd:02:23:30:7d:ed: f4:64:e4:7d:6f:e7:6f:98:73:1f:99:96:b0:b0:8d:11:a9:94: 92:8e:38:1d:ab:c7:09:07:47:d8:a2:7a:8e:55:c0:2f:33:4f: 35:ce:2b:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelViwtJ89agcZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTE1NzgwOWQtMjMxZi00NGE2LTg4NzEtOWNlODY1ZmQ3ZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozSqq8mXDLqSyPRYHIw2mi1nu7vpcSZ3vPZD seCUBBne1gErkIinjMxVFpabzp992KeUyjg2A6Vb4ldcL4AfOKjkB/aoHZpKJdfZ ZmTQJ/5lZj9JACGX60ZMYqW+1VHRFJecYsu2BWX/tfy3HwQFbvHLUpKQ5NR1V+4N FTRU8gNT3ja8b+H2QYDOhGZrj//X5N0BPUGPEIySNJoch3l8ddLgbXXAbmWldUBI DqPgrTymuuS7CCJ3dWmFU0zp1oOyAmmz///sHCmRhniMxA78HVv98/9SlVGy6Ix2 g5OOSd6QFeoN3P/EDIKjd5KpSxh4hIuGjDptd+YE/2UDezoSVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqTcYDCuaFOBnus5Cbhyoa+kOx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGVkNzM2NTctYjViYy0z MGVhLWI3YzEtZTg1YTVlZGI5YTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeDC1SYqG+0iDR8aXhUBV0y6aLDwjsvCyNUSfUkRZTQUA8EApGSNKgk MyHkK/ff6aBVBYZUkGySN21t78hTkOteONA0KBWUHSb91F3Y5+jTUK4hZU2AJmRj jATK+DuSFyY9qYKLKgCtxTEmrlDvRmb4eslb4qxorjZvCSqsVEdBioc5OekyS64k IwaVoSveDHSirTarX8ug3pvrYoctFb4exBe2SnfmNQT04rCf4Mol/q0cGSXw89DN 7xWpbFCdLv68x4FwR7j4T61aj08Evvvxfr0CIzB97fRk5H1v52+Ycx+ZlrCwjRGp lJKOOB2rxwkHR9iieo5VwC8zTzXOKyA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:17 2026 by rpki-client