$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ef12246c-9d7a-30c3-80ba-732121f21aa9.roa File: ef12246c-9d7a-30c3-80ba-732121f21aa9.roa (raw, json) Hash identifier: LGdYolgau7/oD+M6djGO/75SwcKP0Nbxb4F+nwjCMFU= Subject key identifier: 6A:58:D4:EA:45:B5:90:EE:9D:9C:FD:45:8F:FD:8D:F9:FA:20:07:B5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D2379F881AF5FFE41BFB0A480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ef12246c-9d7a-30c3-80ba-732121f21aa9.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.254.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f8:81:af:5f:fe:41:bf:b0:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=5cb0b228-39d9-4642-834d-e4e712859f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a4:6e:d6:13:ad:2e:2f:fe:44:5e:6a:f4:55: f8:24:e5:fc:1b:16:05:39:47:cd:c2:1a:28:3a:2b: 31:e5:08:14:d6:28:9f:47:bb:2a:21:8b:16:a6:c8: 0a:f2:86:d2:b7:a0:98:e5:cb:68:a8:5f:15:0f:bb: a7:54:13:49:84:53:17:75:76:9e:0f:a1:30:8b:3d: a5:f5:54:f2:2a:19:00:2b:0d:2d:28:1d:87:21:98: 03:64:7b:e0:23:57:ae:f4:d8:62:e2:73:a4:8a:a7: 79:e2:f1:9f:07:b1:a4:66:1e:08:5e:9b:42:4c:ac: 5e:98:f4:e5:7e:6a:89:e5:7d:d6:e4:d8:56:17:4e: dd:1c:04:58:24:4d:a9:34:c1:89:60:b4:6d:6e:fc: 0b:de:e9:16:cf:8d:52:75:d9:12:8f:4c:61:17:60: 5a:da:96:1f:3a:c0:31:67:81:1d:2d:76:18:ba:9e: 40:54:86:b0:ca:55:c3:a1:67:f3:35:14:86:1c:da: 43:1e:16:cd:c6:df:cc:2a:cd:2e:7f:d4:dd:3f:d3: 4e:b5:13:cb:f2:9b:f5:e6:86:a7:b6:d0:7a:5c:9f: b6:12:f1:9a:4e:4c:ce:16:24:56:96:ae:e7:4e:7e: 04:16:06:89:6f:d2:90:7b:be:e6:a6:f3:4f:d8:43: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:58:D4:EA:45:B5:90:EE:9D:9C:FD:45:8F:FD:8D:F9:FA:20:07:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ef12246c-9d7a-30c3-80ba-732121f21aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:04:d0:8d:4c:12:25:68:55:8a:34:f8:89:ad:0c:dc:40:b3: 3a:93:90:96:15:08:44:cd:be:85:ac:46:b4:73:77:3c:2d:75: 57:30:f7:94:49:3d:6f:74:2d:7d:ed:43:fc:b8:83:f0:2a:a0: bd:9d:a5:55:4f:95:d2:a7:ab:5c:26:a9:d7:74:ea:1b:e0:68: 58:4e:25:2d:cb:b3:6d:fa:75:1f:1a:37:4c:11:57:4b:ab:52: 1f:22:34:d3:42:72:06:68:0a:0c:5c:53:95:30:6d:94:db:c1: f7:01:d9:d2:46:69:4d:70:2b:fc:36:96:27:c5:fe:d4:5a:66: 32:62:b6:4e:d5:ed:0d:2b:80:39:ff:0d:11:ea:76:51:f6:ca: 2a:58:30:ef:03:f1:1e:ff:98:92:26:f9:f6:8d:c1:55:90:1d: a2:42:80:4c:94:48:95:bc:bc:d6:b5:41:aa:2c:c7:3a:cf:e9: fe:0a:56:4b:2a:1a:b1:71:79:ae:58:2d:98:07:06:b0:82:2a: a9:84:6f:62:31:60:ba:ef:ee:62:4a:df:70:69:c0:58:74:00: 19:b2:0f:15:6b:21:c2:da:0b:43:bc:68:eb:0c:c8:ab:30:37: c7:4a:d9:a2:87:da:60:51:a2:7c:65:30:7d:ba:fe:07:a7:9b: b4:72:bb:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefiBr1/+Qb+wpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NWNiMGIyMjgtMzlkOS00NjQyLTgzNGQtZTRlNzEyODU5ZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46Ru1hOtLi/+RF5q9FX4JOX8GxYFOUfNwhoo Oisx5QgU1iifR7sqIYsWpsgK8obSt6CY5ctoqF8VD7unVBNJhFMXdXaeD6Ewiz2l 9VTyKhkAKw0tKB2HIZgDZHvgI1eu9Nhi4nOkiqd54vGfB7GkZh4IXptCTKxemPTl fmqJ5X3W5NhWF07dHARYJE2pNMGJYLRtbvwL3ukWz41SddkSj0xhF2Ba2pYfOsAx Z4EdLXYYup5AVIawylXDoWfzNRSGHNpDHhbNxt/MKs0uf9TdP9NOtRPL8pv15oan ttB6XJ+2EvGaTkzOFiRWlq7nTn4EFgaJb9KQe77mpvNP2EPdmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpY1OpFtZDunZz9RY/9jfn6IAe1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWYxMjI0NmMtOWQ3YS0z MGMzLTgwYmEtNzMyMTIxZjIxYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoE0I1MEiVoVYo0+ImtDNxAszqTkJYVCETNvoWsRrRzdzwtdVcw95RJ PW90LX3tQ/y4g/AqoL2dpVVPldKnq1wmqdd06hvgaFhOJS3Ls236dR8aN0wRV0ur Uh8iNNNCcgZoCgxcU5UwbZTbwfcB2dJGaU1wK/w2lifF/tRaZjJitk7V7Q0rgDn/ DRHqdlH2yipYMO8D8R7/mJIm+faNwVWQHaJCgEyUSJW8vNa1QaosxzrP6f4KVksq GrFxea5YLZgHBrCCKqmEb2IxYLrv7mJK33BpwFh0ABmyDxVrIcLaC0O8aOsMyKsw N8dK2aKH2mBRonxlMH26/genm7Ryu7A= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:08 2026 by rpki-client