$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/48e0ef6a-67a8-334b-9e51-da45099855b0.roa File: 48e0ef6a-67a8-334b-9e51-da45099855b0.roa (raw, json) Hash identifier: NRqxbTEbOd+n6Bi/qJ/afaN3PRkCLjeXhDgktduQPeM= Subject key identifier: 9A:B2:39:E9:F0:D1:23:C7:BE:99:2F:C3:3B:FA:F0:BD:C2:1F:B3:DF Certificate issuer: /CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97 Certificate serial: 010D0C9F4328584CAA2709E6899735A3743BB8B0 Authority key identifier: 90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/48e0ef6a-67a8-334b-9e51-da45099855b0.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 141237 IP address blocks: 208.99.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:09:e6:89:97:35:a3:74:3b:b8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=4dcec8d7-3bb6-4652-8773-113073a4ad3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:f3:f7:c0:2f:18:2e:b1:7d:6c:d9:a5:ec: a4:67:dc:54:fe:ba:f9:71:0a:e9:57:20:dc:57:4e: 10:ed:93:7f:a6:cd:54:a2:cc:9b:1c:5b:f4:64:d9: 8e:4f:df:9c:cf:40:0f:25:16:40:46:51:64:c6:48: e7:dc:3d:6c:b1:75:b7:8f:3e:05:3b:79:a8:59:9a: 71:52:cc:ba:85:db:08:e1:a2:e3:cb:d0:b2:f1:fa: 42:2c:0a:6b:2e:57:fc:58:5d:dc:e5:c4:e3:04:45: e0:44:c6:83:42:d4:4e:dd:49:a7:a8:84:4f:6a:07: 46:31:b5:81:7c:44:e4:2b:27:b6:9d:ec:9a:bc:da: 9e:81:d7:3f:03:61:2f:c5:09:b4:23:bd:0d:da:58: 92:4b:6d:ee:29:19:89:03:6e:10:5f:43:14:27:a0: ce:94:4e:60:00:29:b3:f2:37:d7:8e:b9:50:f0:3a: f8:8c:c1:ac:c5:bc:4c:97:ad:16:39:c8:ae:e0:8c: f3:0c:12:d5:f3:93:63:d5:4d:cf:37:52:c8:15:40: 39:1d:a5:42:33:d9:20:f8:f7:75:7d:10:e4:cc:b0: c5:e4:bc:3e:76:59:72:01:b9:48:27:73:49:75:93: ca:fc:67:12:fa:13:f0:41:e5:37:c6:8e:3a:33:8a: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B2:39:E9:F0:D1:23:C7:BE:99:2F:C3:3B:FA:F0:BD:C2:1F:B3:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/48e0ef6a-67a8-334b-9e51-da45099855b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl X509v3 Authority Key Identifier: keyid:90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer sbgp-ipAddrBlock: critical IPv4: 208.99.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:19:5f:31:14:bf:03:ea:d2:11:44:37:67:63:ba:a1:6b:5e: a0:b1:22:86:e2:79:b3:dc:d5:56:86:a2:f6:94:51:77:34:a9: 69:f3:48:57:e8:9f:74:e7:60:98:25:7d:eb:38:61:1c:84:fd: a2:d8:5c:b4:0e:72:f6:02:c2:85:c7:e3:41:f3:05:3e:c0:6d: a7:d6:bb:89:be:3a:f9:30:f0:cf:8b:ba:d5:a2:b6:c2:c9:45: d0:35:e7:8f:eb:c1:dd:4b:88:38:5b:8a:6a:5b:03:69:bc:07: 30:ae:95:a8:c0:61:ff:ba:60:9d:f2:0c:83:17:21:25:ea:18: f6:c0:f8:b5:ba:fd:86:ac:18:8c:9a:b7:e7:e1:c5:6a:81:69: c5:64:e9:32:b9:56:ff:7c:47:79:6c:f3:cf:5c:94:80:2e:51: 3b:a3:52:72:72:b8:36:83:35:3b:98:cb:42:91:4c:1e:5e:f3: f1:dd:d9:2d:fd:6e:5d:d4:db:1c:f8:9c:74:47:89:0c:1e:65: d9:ca:d7:f8:79:82:33:3b:3d:df:2e:f7:fa:24:6c:d3:40:82: a6:3a:63:c1:22:cd:cf:a9:e6:78:c8:1c:23:83:60:33:59:18: b3:69:82:51:e1:3c:11:65:1a:bb:33:12:28:c1:8e:7a:11:b1: 7c:60:b0:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwnmiZc1o3Q7uLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzMzkxMDUtMGRjOC00ZTEzLWFiMGQtMzI3OWE2YjU4 Zjk3MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NGRjZWM4ZDctM2JiNi00NjUyLTg3NzMtMTEzMDczYTRhZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+7z98AvGC6xfWzZpeykZ9xU/rr5cQrpVyDc V04Q7ZN/ps1UosybHFv0ZNmOT9+cz0APJRZARlFkxkjn3D1ssXW3jz4FO3moWZpx Usy6hdsI4aLjy9Cy8fpCLAprLlf8WF3c5cTjBEXgRMaDQtRO3UmnqIRPagdGMbWB fETkKye2neyavNqegdc/A2EvxQm0I70N2liSS23uKRmJA24QX0MUJ6DOlE5gACmz 8jfXjrlQ8Dr4jMGsxbxMl60WOciu4IzzDBLV85Nj1U3PN1LIFUA5HaVCM9kg+Pd1 fRDkzLDF5Lw+dllyAblIJ3NJdZPK/GcS+hPwQeU3xo46M4qOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqyOenw0SPHvpkvwzv68L3CH7PfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTMz OTEwNS0wZGM4LTRlMTMtYWIwZC0zMjc5YTZiNThmOTcvNDhlMGVmNmEtNjdhOC0z MzRiLTllNTEtZGE0NTA5OTg1NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmEzMzkxMDUtMGRjOC00ZTEzLWFi MGQtMzI3OWE2YjU4Zjk3L2JhMzM5MTA1LTBkYzgtNGUxMy1hYjBkLTMyNzlhNmI1 OGY5Ny5jcmwwHwYDVR0jBBgwFoAUkLha7pLEmm3od0VgDy13KiYRg8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTMzOTEwNS0wZGM4LTRlMTMtYWIwZC0zMjc5 YTZiNThmOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEZXzEUvwPq0hFEN2djuqFrXqCxIobiebPc1VaGovaUUXc0qWnzSFfo n3TnYJglfes4YRyE/aLYXLQOcvYCwoXH40HzBT7AbafWu4m+Ovkw8M+LutWitsLJ RdA154/rwd1LiDhbimpbA2m8BzCulajAYf+6YJ3yDIMXISXqGPbA+LW6/YasGIya t+fhxWqBacVk6TK5Vv98R3ls889clIAuUTujUnJyuDaDNTuYy0KRTB5e8/Hd2S39 bl3U2xz4nHRHiQweZdnK1/h5gjM7Pd8u9/okbNNAgqY6Y8Eizc+p5njIHCODYDNZ GLNpglHhPBFlGrszEijBjnoRsXxgsLg= -----END CERTIFICATE-----Generated at Thu Feb 26 09:13:53 2026 by rpki-client