$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa File: f25e2b6a-11b7-35e3-a462-57f557c7d879.roa (raw, json) Hash identifier: Tm69WicRUHiACUrDIYS86iNPvb0Au5tMIaL1AMwoFH0= Subject key identifier: B6:FC:03:E8:87:80:D9:5F:35:F1:E1:93:DD:B6:20:7F:5E:8D:29:3D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A29BE9A4C569739575F40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.254.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:29:be:9a:4c:56:97:39:57:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=bfcbd929-51df-453d-b542-0f68ce710fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:70:50:cf:e3:3c:ab:9b:4a:d2:4c:40:1e:6d: d8:d6:c0:24:06:a0:fb:fa:f0:3f:0a:53:42:ad:da: 34:8b:fa:16:55:f1:36:57:41:63:9c:14:43:ef:1a: a8:d3:b6:a5:e7:05:a0:7c:6b:e9:d2:48:dd:39:9a: 84:6f:6a:31:fb:cf:1b:52:a0:aa:f8:25:99:26:1d: 69:de:58:6d:cd:65:9c:1a:77:65:0f:a6:7b:c8:91: ea:ad:42:e2:22:e6:d9:ab:d7:28:ea:6d:83:fe:8d: a5:c3:43:b7:3d:bd:b6:dc:2a:4a:9a:fc:b2:84:3a: 7f:d8:66:7d:20:44:95:08:c0:c8:c3:54:2d:90:81: 07:99:36:7f:af:14:f6:50:a4:5c:d0:8d:47:c2:a6: be:9f:f9:2c:b3:b8:42:50:41:dd:84:b7:30:17:12: 6a:b1:ed:35:9e:34:64:2c:20:60:3e:b2:c4:6c:17: 18:75:37:6e:df:55:14:2b:a1:ac:18:5c:82:1b:fe: 3f:05:89:13:b0:07:81:de:34:7c:e4:65:0f:24:f2: b0:52:35:66:47:25:ae:eb:d7:e0:36:a1:39:1e:9d: f1:c7:97:44:9f:5a:83:70:7e:22:86:5d:a6:6f:b4: f0:f5:50:25:f2:d7:e5:36:07:a9:96:54:b5:f4:ea: 59:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FC:03:E8:87:80:D9:5F:35:F1:E1:93:DD:B6:20:7F:5E:8D:29:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ac:31:cf:85:f3:de:2b:30:d0:ac:71:be:08:af:ef:1f:06: fa:28:c8:13:4e:df:ec:3d:e4:d9:05:bf:ea:40:a3:c5:00:07: 9c:d7:8f:8a:3d:52:19:ed:a7:73:a6:e7:b0:98:12:d8:5c:0f: 31:b7:55:58:8a:9c:3c:68:32:2b:99:b8:b8:3c:42:41:2a:be: 88:f1:75:a4:3e:9e:87:9c:41:61:09:9e:3d:d9:70:2c:9c:ba: e0:e6:da:4e:12:e6:33:18:78:d8:38:56:ae:24:3c:16:bd:ff: bf:46:4d:70:09:d4:be:e5:5f:40:f9:a3:75:66:95:d9:15:e4: eb:2b:24:78:2b:60:72:1f:39:00:86:0c:0d:fb:74:41:fa:c5: 87:a5:f6:94:9f:a0:77:be:70:02:ea:3d:ce:21:cf:30:3e:40: 81:67:c2:9c:f7:c5:e3:f7:fb:36:30:7d:e0:3b:30:b6:a8:ca: 3d:d7:2b:eb:0e:3b:18:bb:0e:42:c0:ec:21:3b:80:f5:75:6a: ce:c9:27:6c:1d:51:86:a8:25:02:34:88:bd:ac:39:fe:6e:ca: 51:be:0d:ec:d8:62:b1:18:0d:c2:1b:37:20:dd:e5:17:d5:bb: af:7c:a8:25:26:dc:e1:af:56:57:f6:9c:11:97:98:dc:7c:96: a5:91:3f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeim+mkxWlzlXX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YmZjYmQ5MjktNTFkZi00NTNkLWI1NDItMGY2OGNlNzEwZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnBQz+M8q5tK0kxAHm3Y1sAkBqD7+vA/ClNC rdo0i/oWVfE2V0FjnBRD7xqo07al5wWgfGvp0kjdOZqEb2ox+88bUqCq+CWZJh1p 3lhtzWWcGndlD6Z7yJHqrULiIubZq9co6m2D/o2lw0O3Pb223CpKmvyyhDp/2GZ9 IESVCMDIw1QtkIEHmTZ/rxT2UKRc0I1Hwqa+n/kss7hCUEHdhLcwFxJqse01njRk LCBgPrLEbBcYdTdu31UUK6GsGFyCG/4/BYkTsAeB3jR85GUPJPKwUjVmRyWu69fg NqE5Hp3xx5dEn1qDcH4ihl2mb7Tw9VAl8tflNgepllS19OpZUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb8A+iHgNlfNfHhk922IH9ejSk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjI1ZTJiNmEtMTFiNy0z NWUzLWE0NjItNTdmNTU3YzdkODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOsMc+F894rMNCscb4Ir+8fBvooyBNO3+w95NkFv+pAo8UAB5zXj4o9 Uhntp3Om57CYEthcDzG3VViKnDxoMiuZuLg8QkEqvojxdaQ+noecQWEJnj3ZcCyc uuDm2k4S5jMYeNg4Vq4kPBa9/79GTXAJ1L7lX0D5o3VmldkV5OsrJHgrYHIfOQCG DA37dEH6xYel9pSfoHe+cALqPc4hzzA+QIFnwpz3xeP3+zYwfeA7MLaoyj3XK+sO Oxi7DkLA7CE7gPV1as7JJ2wdUYaoJQI0iL2sOf5uylG+DezYYrEYDcIbNyDd5RfV u698qCUm3OGvVlf2nBGXmNx8lqWRP/w= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:33 2026 by rpki-client