$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d37def54-88c6-3173-8458-6ac8076da5df.roa File: d37def54-88c6-3173-8458-6ac8076da5df.roa (raw, json) Hash identifier: NyAZkr2iyEex5ACBV8Q74Ydd2BYhVaq8XEUMpdQJ5pk= Subject key identifier: 52:2B:19:76:D7:52:BB:D5:1D:22:CD:4B:5C:72:2A:46:4C:B7:BC:59 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435F818D1F2253C4A3CAC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d37def54-88c6-3173-8458-6ac8076da5df.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 199.254.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:f8:18:d1:f2:25:3c:4a:3c:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=68a2c91b-da3d-4d91-ae14-070ba4b7cbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:a9:0a:e7:fb:2f:c3:97:e8:67:b5:26:86: a0:1e:b9:30:30:e0:68:71:5b:fd:e7:e2:15:df:c5: 49:8b:41:0b:af:d8:6b:05:cf:c9:b8:ab:aa:58:2b: 0c:5f:5f:c5:11:d4:ae:60:a3:54:d3:b8:6c:4c:3d: a8:97:6c:1c:7b:ee:3c:8d:cd:ff:1c:c0:14:05:c3: bb:c9:db:a8:60:e5:1c:fa:d5:a0:1e:a6:33:c3:32: 1e:cf:d7:95:55:73:3b:77:bf:c8:ca:27:ef:71:13: d8:37:7f:3d:e0:2d:88:2e:e3:54:8b:79:4d:a6:46: 08:8e:6c:60:0c:2c:e3:f4:a8:c9:33:16:c0:7c:12: ed:0c:e1:36:54:86:00:f6:62:03:a0:84:26:37:3b: ac:2c:57:32:60:b0:05:58:80:9a:47:9f:86:b4:78: 63:71:dc:1f:33:db:bd:a9:f7:42:de:51:6b:d5:45: 7b:93:43:69:12:f8:f8:c8:49:a6:2a:25:9f:d8:68: cd:ea:07:82:41:08:b6:07:f6:42:f3:26:53:de:b6: 02:e0:bf:18:11:d9:d5:81:8e:d6:54:6f:93:bf:b1: 81:1d:74:1b:e6:49:7b:3f:82:a0:1e:aa:4e:fc:a6: ab:4c:8d:5c:15:d7:4b:f6:f6:57:65:11:29:de:12: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2B:19:76:D7:52:BB:D5:1D:22:CD:4B:5C:72:2A:46:4C:B7:BC:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d37def54-88c6-3173-8458-6ac8076da5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f5:f6:e6:39:0a:9b:f7:97:8b:8f:dd:15:78:ff:ea:95:3f: 0f:9b:02:92:4b:3f:bc:c4:3e:03:64:48:72:60:9b:f4:f0:eb: c5:bb:1b:60:ce:6e:0e:c7:13:c4:f2:71:9c:c6:d9:2a:6f:0b: c6:fb:b3:21:74:3a:24:79:34:89:88:77:12:6d:e8:39:e3:d1: 37:d1:14:97:44:19:32:8b:ff:2a:c2:4c:ff:50:0a:4d:55:21: 16:cc:a9:5b:1f:f9:93:7c:2d:ba:fa:e1:da:7f:22:df:2a:af: 40:15:5f:a8:9a:f5:59:83:c7:41:1d:ca:84:36:a7:39:89:bd: 7c:32:04:8f:e3:21:5c:1e:4a:a4:2f:0e:a1:80:64:6e:8c:04: 23:18:c2:6a:a4:4f:12:07:eb:bb:38:ed:36:6a:63:2f:73:4f: 2e:eb:8c:b9:23:5e:37:96:ee:17:e0:26:ef:ba:3d:86:af:4e: 42:ba:50:5f:a7:7c:3b:4b:ae:91:dc:af:b6:95:66:0e:88:95: 88:6a:dc:6d:9b:d2:87:30:96:51:e7:e5:7a:ae:d1:77:a1:6d: 05:67:2c:cd:a3:07:80:a3:e0:1b:a9:51:b6:dc:97:e4:cc:db: d8:ed:a0:e8:bf:46:36:82:98:7d:57:44:a5:40:1d:37:e1:70: a7:ad:bc:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENfgY0fIlPEo8rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NjhhMmM5MWItZGEzZC00ZDkxLWFlMTQtMDcwYmE0YjdjYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLOpCuf7L8OX6Ge1JoagHrkwMOBocVv95+IV 38VJi0ELr9hrBc/JuKuqWCsMX1/FEdSuYKNU07hsTD2ol2wce+48jc3/HMAUBcO7 yduoYOUc+tWgHqYzwzIez9eVVXM7d7/IyifvcRPYN3894C2ILuNUi3lNpkYIjmxg DCzj9KjJMxbAfBLtDOE2VIYA9mIDoIQmNzusLFcyYLAFWICaR5+GtHhjcdwfM9u9 qfdC3lFr1UV7k0NpEvj4yEmmKiWf2GjN6geCQQi2B/ZC8yZT3rYC4L8YEdnVgY7W VG+Tv7GBHXQb5kl7P4KgHqpO/KarTI1cFddL9vZXZREp3hJqmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIrGXbXUrvVHSLNS1xyKkZMt7xZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDM3ZGVmNTQtODhjNi0z MTczLTg0NTgtNmFjODA3NmRhNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI719uY5Cpv3l4uP3RV4/+qVPw+bApJLP7zEPgNkSHJgm/Tw68W7G2DO bg7HE8TycZzG2SpvC8b7syF0OiR5NImIdxJt6Dnj0TfRFJdEGTKL/yrCTP9QCk1V IRbMqVsf+ZN8Lbr64dp/It8qr0AVX6ia9VmDx0EdyoQ2pzmJvXwyBI/jIVweSqQv DqGAZG6MBCMYwmqkTxIH67s47TZqYy9zTy7rjLkjXjeW7hfgJu+6PYavTkK6UF+n fDtLrpHcr7aVZg6IlYhq3G2b0ocwllHn5Xqu0XehbQVnLM2jB4Cj4BupUbbcl+TM 29jtoOi/RjaCmH1XRKVAHTfhcKetvLs= -----END CERTIFICATE-----Generated at Sat Jun 13 21:25:13 2026 by rpki-client