$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa File: e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa (raw, json) Hash identifier: GBr0qMST4KlzuI/7oEswZZevS0xlNsrBiozluO8zlfI= Subject key identifier: 81:4B:F4:26:0D:54:5C:69:8C:89:12:3D:F6:2A:75:5A:8D:AA:52:96 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A6340F679ACB4660B08A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 207266 IP address blocks: 199.249.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:63:40:f6:79:ac:b4:66:0b:08:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ae1ee975-efc3-454c-8623-ed5204f5a5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:4a:50:fa:41:73:6b:74:cf:b4:af:f2:04: 75:cb:3f:7e:75:ee:8d:48:88:2b:b9:c7:6e:1c:4c: 86:8e:d9:63:b6:5c:2a:72:43:3f:d2:cb:55:c1:28: 43:76:87:c0:80:eb:8a:21:2d:a3:3b:bf:25:0e:98: 9c:de:46:6f:e4:35:c5:34:5a:47:fc:ca:3c:7b:7d: 7f:76:1c:cc:6c:82:9d:78:c4:02:4a:87:54:1f:94: e8:70:e4:aa:72:9e:bf:3b:da:5d:e2:7f:97:bf:0f: 81:80:fa:ec:42:f3:e3:5f:89:69:0d:ad:48:64:56: 4b:a4:b0:1b:7c:89:1d:cd:ad:65:0e:75:5c:f1:7a: c1:f0:76:35:6d:a8:48:5c:13:80:1d:45:4b:e1:25: 06:f5:44:91:d9:ef:6a:80:39:7b:22:df:fc:85:dc: 15:f1:3f:ce:bc:36:30:9b:3d:c2:8b:60:10:c4:12: c4:f5:09:73:eb:21:88:82:06:50:e5:29:74:a2:16: 7e:66:5f:8d:e8:9e:16:62:5d:a9:bd:6a:9c:61:53: 87:68:b6:81:fc:44:6e:1d:8d:03:4f:55:c1:b6:af: df:96:87:ae:1c:00:41:a5:d8:71:85:30:b3:e8:e6: 15:aa:25:11:86:e5:f1:83:42:c7:d9:3a:16:06:45: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4B:F4:26:0D:54:5C:69:8C:89:12:3D:F6:2A:75:5A:8D:AA:52:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d2:d0:51:d1:04:28:d2:27:c2:7e:1a:d8:7c:2f:c6:30:2f: ad:9e:50:08:75:0d:5d:0e:9a:10:be:ed:ef:a2:23:64:48:e8: d2:f0:da:bd:af:45:c4:a1:ef:48:36:3d:80:dd:76:73:fe:bb: 81:e1:81:93:1a:06:7a:d7:08:39:5f:db:71:e0:1b:48:0b:a2: 84:a5:7f:d4:b9:32:a9:ef:4e:b8:b8:56:a3:ea:13:1f:a3:0a: 07:22:d6:25:5e:dd:84:1a:6d:72:07:1b:56:b5:12:3c:4e:da: 49:c9:0b:28:a4:d2:fe:e2:8e:33:be:8c:0e:a0:84:a3:06:d4: 15:4f:ed:0d:47:0b:fb:08:03:35:e3:65:0f:6e:c4:ba:6c:11: 50:0e:ee:29:77:4f:45:87:43:8f:05:dd:a5:23:b6:37:2f:46: 78:45:2c:40:63:ae:8b:88:b5:5d:e9:f7:24:44:8e:f8:c8:45: bc:94:b3:33:25:c6:a6:5b:c4:52:58:cd:a9:f2:f5:f8:31:21: 8a:89:6a:a1:10:88:bd:97:5c:00:fe:94:99:89:62:d2:bd:72: 1e:16:09:cd:2c:8a:89:23:52:ed:74:02:7d:c8:2a:dd:0d:7a: 5b:e4:4b:bb:02:44:8b:92:27:ca:0e:71:40:d5:56:e6:3f:30: 45:66:ec:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemNA9nmstGYLCKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YWUxZWU5NzUtZWZjMy00NTRjLTg2MjMtZWQ1MjA0ZjVhNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz5KUPpBc2t0z7Sv8gR1yz9+de6NSIgrucdu HEyGjtljtlwqckM/0stVwShDdofAgOuKIS2jO78lDpic3kZv5DXFNFpH/Mo8e31/ dhzMbIKdeMQCSodUH5TocOSqcp6/O9pd4n+Xvw+BgPrsQvPjX4lpDa1IZFZLpLAb fIkdza1lDnVc8XrB8HY1bahIXBOAHUVL4SUG9USR2e9qgDl7It/8hdwV8T/OvDYw mz3Ci2AQxBLE9Qlz6yGIggZQ5Sl0ohZ+Zl+N6J4WYl2pvWqcYVOHaLaB/ERuHY0D T1XBtq/floeuHABBpdhxhTCz6OYVqiURhuXxg0LH2ToWBkVIXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFL9CYNVFxpjIkSPfYqdVqNqlKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTRiYmEzYjQtNzZkOC0z YTQ4LTgyZWYtZjI0NmUyMjVkYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvS0FHRBCjSJ8J+Gth8L8YwL62eUAh1DV0OmhC+7e+iI2RI6NLw2r2v RcSh70g2PYDddnP+u4HhgZMaBnrXCDlf23HgG0gLooSlf9S5MqnvTri4VqPqEx+j Cgci1iVe3YQabXIHG1a1EjxO2knJCyik0v7ijjO+jA6ghKMG1BVP7Q1HC/sIAzXj ZQ9uxLpsEVAO7il3T0WHQ48F3aUjtjcvRnhFLEBjrouItV3p9yREjvjIRbyUszMl xqZbxFJYzany9fgxIYqJaqEQiL2XXAD+lJmJYtK9ch4WCc0siokjUu10An3IKt0N elvkS7sCRIuSJ8oOcUDVVuY/MEVm7Dc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:04 2026 by rpki-client