$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa File: e17505ed-a126-32cf-9db9-3508bbbe2d54.roa (raw, json) Hash identifier: sTzp06Nm3ublMr67xbffKY0u2WVkl5qN4Y2sfXdv2gU= Subject key identifier: 04:00:13:B2:F5:46:66:A9:25:76:FE:3D:19:67:5E:41:68:B7:1C:A5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379FA5C053B35E7ABCC1F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.249.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fa:5c:05:3b:35:e7:ab:cc:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=88135e54-637c-4284-b303-9dfc9aa7412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9b:ec:74:92:10:c2:ad:ab:11:c0:54:61:d7: 27:78:dd:db:9d:42:ea:c0:c8:2f:eb:d9:81:7c:df: 6a:c0:5b:fd:4c:03:4a:a5:73:fb:a3:ac:1d:80:8e: 43:84:87:48:0d:34:fd:3a:69:50:71:50:37:4c:26: d7:12:03:20:d4:9e:a7:0e:1e:1a:5c:b0:9a:74:1d: bd:92:90:44:40:c9:e9:e8:da:42:30:29:88:cf:dc: a5:29:98:20:22:88:47:22:8e:b3:0b:a4:f1:4b:52: 43:b1:8e:7b:65:69:2d:f9:74:ab:60:ba:8a:0f:f8: 19:60:19:9c:54:c7:65:11:c5:cf:3c:fd:69:e0:88: 68:c1:33:0f:70:b7:41:60:ee:09:23:78:b9:d2:7f: f3:98:90:12:17:ce:13:16:8e:2c:f0:d6:b2:2b:98: ff:17:9e:8e:ee:8c:1d:76:1b:dd:42:ca:bc:6a:66: e0:79:5f:f3:77:01:8c:03:cb:63:40:2a:7a:42:8d: c2:d1:56:5d:03:22:bd:cd:dc:40:95:ce:87:0a:d2: 8e:58:1b:06:69:a3:67:48:31:06:e6:f9:5f:59:7a: 75:50:68:7a:14:70:26:3d:b4:1c:0b:b4:cf:e7:10: 8a:ed:1b:e2:9c:89:d3:f6:e7:3d:0f:f4:60:33:f7: 54:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:00:13:B2:F5:46:66:A9:25:76:FE:3D:19:67:5E:41:68:B7:1C:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ed:86:2c:5c:4a:62:40:46:0b:09:af:43:7a:c7:fe:6e:a4: 3c:d9:c5:ba:f3:0e:d4:da:a1:3b:85:e5:90:7a:46:0b:96:60: f0:a9:9f:7e:8a:ad:8d:2c:3e:b3:6e:47:a9:58:95:e8:66:07: 60:1b:33:3d:92:63:46:62:e0:71:01:de:c3:4a:20:53:69:29: d7:29:d7:68:67:7a:63:ff:ef:fb:cc:cc:98:c4:ac:bc:41:dc: 0e:4a:1f:c9:c0:c5:a4:8c:ec:fa:9e:57:c4:62:5b:7a:50:4e: 0a:2b:b2:25:18:2c:19:0c:ca:53:0e:53:1d:cf:3e:ea:ec:4b: ea:5d:e8:8b:0f:9d:9d:e1:a2:91:b3:ab:db:94:61:90:9b:4b: ca:0f:eb:3e:3f:af:c9:fd:fd:4a:a8:d5:6c:9a:20:e6:08:b7: 1a:58:45:8a:49:51:3c:21:5f:f7:ab:d6:40:75:63:bc:ff:cf: dc:fa:47:b4:52:02:2d:36:af:93:38:ce:13:03:e1:eb:97:2c: 95:c0:2a:33:35:ee:19:6f:70:ae:3f:f3:bd:69:ad:04:50:a9: 5f:49:19:03:29:49:8c:e3:ab:27:e6:92:25:5f:1b:74:79:cc: cd:e4:be:86:5a:4a:95:41:5e:da:06:9e:92:34:c3:81:17:a3: 03:b6:7e:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefpcBTs156vMH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODgxMzVlNTQtNjM3Yy00Mjg0LWIzMDMtOWRmYzlhYTc0MTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5vsdJIQwq2rEcBUYdcneN3bnULqwMgv69mB fN9qwFv9TANKpXP7o6wdgI5DhIdIDTT9OmlQcVA3TCbXEgMg1J6nDh4aXLCadB29 kpBEQMnp6NpCMCmIz9ylKZggIohHIo6zC6TxS1JDsY57ZWkt+XSrYLqKD/gZYBmc VMdlEcXPPP1p4IhowTMPcLdBYO4JI3i50n/zmJASF84TFo4s8NayK5j/F56O7owd dhvdQsq8ambgeV/zdwGMA8tjQCp6Qo3C0VZdAyK9zdxAlc6HCtKOWBsGaaNnSDEG 5vlfWXp1UGh6FHAmPbQcC7TP5xCK7RvinInT9uc9D/RgM/dUiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQAE7L1RmapJXb+PRlnXkFotxylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTE3NTA1ZWQtYTEyNi0z MmNmLTlkYjktMzUwOGJiYmUyZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzthixcSmJARgsJr0N6x/5upDzZxbrzDtTaoTuF5ZB6RguWYPCpn36K rY0sPrNuR6lYlehmB2AbMz2SY0Zi4HEB3sNKIFNpKdcp12hnemP/7/vMzJjErLxB 3A5KH8nAxaSM7PqeV8RiW3pQTgorsiUYLBkMylMOUx3PPursS+pd6IsPnZ3hopGz q9uUYZCbS8oP6z4/r8n9/Uqo1WyaIOYItxpYRYpJUTwhX/er1kB1Y7z/z9z6R7RS Ai02r5M4zhMD4euXLJXAKjM17hlvcK4/871prQRQqV9JGQMpSYzjqyfmkiVfG3R5 zM3kvoZaSpVBXtoGnpI0w4EXowO2fso= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:25 2026 by rpki-client