$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f59ae8f7-758c-37bf-b044-b9e8fea43f3c.roa File: f59ae8f7-758c-37bf-b044-b9e8fea43f3c.roa (raw, json) Hash identifier: FcWHDzM+j170Y7Sh5xWVRtnJjDbemV0x/TgTlUA2Mag= Subject key identifier: 93:CD:A8:A7:07:9A:C9:16:18:5B:D5:F9:41:11:26:36:7F:E3:DD:F7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A3B591B33F4E039AD7F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f59ae8f7-758c-37bf-b044-b9e8fea43f3c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 199.182.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3b:59:1b:33:f4:e0:39:ad:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=40af7268-c0d8-42ff-9f4c-023c838be8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:68:a0:a0:ab:29:76:d6:dd:03:cc:f6:da: d1:a7:c3:13:53:30:24:7b:1d:20:e8:0e:ce:23:40: 39:58:12:b1:eb:1b:32:f2:01:c9:19:7c:5c:88:3b: 8a:f9:6b:a3:6a:30:c2:79:92:f6:73:43:db:1b:bc: 7f:16:ac:3b:fe:72:8b:d8:c9:6c:4a:35:06:35:e5: 6e:83:38:d4:aa:ef:12:9b:85:56:7a:b0:a8:08:66: c7:97:49:ce:91:ee:a3:73:db:7e:d7:3c:c8:92:7e: 58:21:f9:ac:33:5a:18:1d:52:2e:77:36:58:e7:a5: c2:e1:86:71:3e:75:e0:c2:75:10:c3:af:81:32:a3: 89:29:97:ce:c2:f2:2e:05:20:7f:19:b7:01:78:5d: 8f:88:dd:fc:c3:a5:db:b2:9c:b6:e4:63:e7:73:83: 72:06:62:23:15:75:97:bf:a9:34:e8:90:54:49:16: 6e:e1:97:09:4b:91:0e:47:e2:5f:01:19:f0:44:d9: 02:90:a3:bc:ef:f0:ba:65:fb:12:70:01:02:d9:4c: 2c:cc:56:fe:08:2c:26:47:d1:12:12:22:5a:57:ee: b1:07:4a:59:8e:d2:9e:22:50:ca:46:a8:13:6f:39: 3c:4c:9d:f4:bd:ef:50:53:47:35:47:84:fa:53:95: a0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CD:A8:A7:07:9A:C9:16:18:5B:D5:F9:41:11:26:36:7F:E3:DD:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f59ae8f7-758c-37bf-b044-b9e8fea43f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d1:0b:61:ef:78:45:0c:e8:5e:0f:a3:ce:13:ca:39:13:87: 86:92:75:61:d3:20:f6:0d:b1:52:b5:cf:1c:df:23:cd:fc:db: a2:04:8f:90:f2:e9:57:7a:0a:51:72:59:4a:11:df:7c:56:fd: 48:d3:a6:fc:4c:3f:bf:48:79:82:73:fa:d7:b0:24:bd:58:29: 6d:23:d9:dc:d3:9a:68:f8:80:09:c5:f3:47:ac:97:3c:39:79: dc:66:dc:38:07:7b:d6:1b:26:89:f6:5b:d1:c6:03:72:55:b5: 61:de:71:93:ad:3b:8a:0e:b0:77:4a:2b:f7:a9:4e:98:31:9f: cd:ad:a8:16:b4:24:9b:17:ec:a6:f8:7f:96:9b:76:c6:3c:7b: 5c:75:30:a3:8f:f2:49:36:57:66:d9:af:52:8d:8b:fc:f8:27: f7:d6:6d:de:6e:8f:0f:b4:d8:1e:40:45:8e:dd:3a:97:eb:5d: 5c:a5:2e:f2:01:69:d8:bf:1e:a7:7f:e4:37:23:71:99:69:eb: ec:2d:bc:6b:e1:7b:e5:eb:03:a3:03:b5:24:58:42:8a:9e:96: 1c:77:94:e8:80:5a:97:17:3b:02:ed:c8:28:fa:1a:96:d0:7d: da:9f:db:ea:40:54:36:20:b6:2a:5e:47:58:1f:60:a3:6b:7d: ac:4e:73:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejtZGzP04DmtfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDBhZjcyNjgtYzBkOC00MmZmLTlmNGMtMDIzYzgzOGJlOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7RooKCrKXbW3QPM9trRp8MTUzAkex0g6A7O I0A5WBKx6xsy8gHJGXxciDuK+WujajDCeZL2c0PbG7x/Fqw7/nKL2MlsSjUGNeVu gzjUqu8Sm4VWerCoCGbHl0nOke6jc9t+1zzIkn5YIfmsM1oYHVIudzZY56XC4YZx PnXgwnUQw6+BMqOJKZfOwvIuBSB/GbcBeF2PiN38w6Xbspy25GPnc4NyBmIjFXWX v6k06JBUSRZu4ZcJS5EOR+JfARnwRNkCkKO87/C6ZfsScAEC2UwszFb+CCwmR9ES EiJaV+6xB0pZjtKeIlDKRqgTbzk8TJ30ve9QU0c1R4T6U5WgxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPNqKcHmskWGFvV+UERJjZ/4933MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjU5YWU4ZjctNzU4Yy0z N2JmLWIwNDQtYjllOGZlYTQzZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfRC2HveEUM6F4Po84TyjkTh4aSdWHTIPYNsVK1zxzfI83826IEj5Dy 6Vd6ClFyWUoR33xW/UjTpvxMP79IeYJz+tewJL1YKW0j2dzTmmj4gAnF80eslzw5 edxm3DgHe9YbJon2W9HGA3JVtWHecZOtO4oOsHdKK/epTpgxn82tqBa0JJsX7Kb4 f5abdsY8e1x1MKOP8kk2V2bZr1KNi/z4J/fWbd5ujw+02B5ARY7dOpfrXVylLvIB adi/Hqd/5DcjcZlp6+wtvGvhe+XrA6MDtSRYQoqelhx3lOiAWpcXOwLtyCj6GpbQ fdqf2+pAVDYgtipeR1gfYKNrfaxOc50= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:27 2026 by rpki-client