$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa File: ea5646e1-1195-382d-8eec-de8a18c25b3c.roa (raw, json) Hash identifier: YwKgEqH1OcD+d8ABFicOmEFk48l23diGJ4lyyHcSZrs= Subject key identifier: 2D:E0:77:D9:36:13:5F:F0:14:A1:98:3B:D8:63:6F:4E:86:B8:AD:51 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A169EE9883F3C03ACA080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.182.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:16:9e:e9:88:3f:3c:03:ac:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f1f07845-5c64-44d0-8b8d-c90cd5b4ef9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:1c:70:7a:9f:1f:d9:78:a0:d8:53:cd:a0: e0:d9:b5:9c:60:79:e0:25:18:a2:86:59:51:0b:dc: 70:3c:47:2a:8e:11:ea:6a:dd:e8:e5:fd:e8:b4:56: 2d:3a:c5:eb:fd:87:5d:a6:29:4b:4c:9c:5a:2f:2e: 7d:ab:28:92:c0:34:13:29:30:1c:cd:b4:f9:78:90: b0:ea:12:6f:8c:ff:84:09:3b:21:35:96:fa:62:e5: 9c:45:9d:1b:a0:34:83:bc:46:25:ca:32:8a:83:1c: 96:0c:3f:56:08:6d:8a:51:bf:33:be:5d:c0:0e:2d: 25:f5:98:47:7c:28:5d:c9:4f:bf:e6:ef:84:00:5b: 2c:3b:8b:3f:cb:58:27:6b:35:cc:79:9f:f3:99:a9: a2:a7:46:be:05:a0:d6:88:b4:bc:ee:b0:10:c8:d7: b7:04:26:4d:ed:30:1f:07:2c:16:81:fd:bb:0a:c4: e6:04:bf:22:6b:45:58:8b:7c:55:94:20:39:6a:80: bf:1d:5d:54:d3:cd:46:25:41:17:22:89:c5:31:7a: be:d1:e8:a3:7c:46:8a:f9:dc:c4:bf:49:8c:3c:17: aa:88:50:4f:1d:59:68:fa:bd:9e:16:0b:c5:3d:cd: c7:6e:75:01:dd:9b:4e:6f:7d:a6:45:b0:01:a0:a6: 8d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E0:77:D9:36:13:5F:F0:14:A1:98:3B:D8:63:6F:4E:86:B8:AD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:6a:46:98:12:e9:0b:de:5e:00:ec:6f:c9:f2:2c:6e:06:d4: 13:d6:db:03:73:ae:b7:e9:17:e3:7c:d6:8a:1e:17:34:47:9c: d5:6a:19:1e:10:34:5a:47:74:20:86:f6:12:05:31:f3:cd:a4: 03:9c:b5:fa:bc:7b:0a:24:e5:28:f8:cf:2d:a2:9e:67:ee:03: 41:ab:8c:0c:7c:29:e4:28:d6:ab:8e:f1:f7:2d:63:e7:de:b2: e2:3f:02:21:e1:c0:ab:ee:d9:01:2c:99:b0:c9:87:dc:61:02: b8:fa:32:82:c6:79:11:3e:49:0b:5a:03:b7:dc:af:77:25:b8: 53:3c:d4:c6:eb:e5:57:d6:08:22:5c:81:c1:25:e3:da:96:70: 15:de:5c:41:67:d5:06:2d:b1:b5:23:82:b7:ef:f9:8c:c1:1b: 8b:d0:a1:19:83:51:77:a2:c2:07:bc:42:ec:8f:fb:17:ed:36: 24:ac:01:e6:eb:ea:af:04:08:8f:f9:44:29:8e:74:7f:08:03: 98:40:77:00:9d:b9:0a:c7:b9:33:da:46:f7:f6:48:7a:e9:3f: 35:69:8e:e9:f1:38:d2:28:b5:0a:c8:b1:49:e0:60:5e:fe:75: 83:34:a9:af:3e:cf:69:24:6c:91:66:5c:77:b1:70:46:81:eb: c6:05:33:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehae6Yg/PAOsoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjFmMDc4NDUtNWM2NC00NGQwLThiOGQtYzkwY2Q1YjRlZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+gccHqfH9l4oNhTzaDg2bWcYHngJRiihllR C9xwPEcqjhHqat3o5f3otFYtOsXr/YddpilLTJxaLy59qyiSwDQTKTAczbT5eJCw 6hJvjP+ECTshNZb6YuWcRZ0boDSDvEYlyjKKgxyWDD9WCG2KUb8zvl3ADi0l9ZhH fChdyU+/5u+EAFssO4s/y1gnazXMeZ/zmamip0a+BaDWiLS87rAQyNe3BCZN7TAf BywWgf27CsTmBL8ia0VYi3xVlCA5aoC/HV1U081GJUEXIonFMXq+0eijfEaK+dzE v0mMPBeqiFBPHVlo+r2eFgvFPc3HbnUB3ZtOb32mRbABoKaNEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3gd9k2E1/wFKGYO9hjb06GuK1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWE1NjQ2ZTEtMTE5NS0z ODJkLThlZWMtZGU4YTE4YzI1YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlqRpgS6QveXgDsb8nyLG4G1BPW2wNzrrfpF+N81ooeFzRHnNVqGR4Q NFpHdCCG9hIFMfPNpAOctfq8ewok5Sj4zy2inmfuA0GrjAx8KeQo1quO8fctY+fe suI/AiHhwKvu2QEsmbDJh9xhArj6MoLGeRE+SQtaA7fcr3cluFM81Mbr5VfWCCJc gcEl49qWcBXeXEFn1QYtsbUjgrfv+YzBG4vQoRmDUXeiwge8QuyP+xftNiSsAebr 6q8ECI/5RCmOdH8IA5hAdwCduQrHuTPaRvf2SHrpPzVpjunxONIotQrIsUngYF7+ dYM0qa8+z2kkbJFmXHexcEaB68YFM2E= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:50 2026 by rpki-client