$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa File: 49cb8b45-24ac-3df5-8192-267514fc0835.roa (raw, json) Hash identifier: hwBO66v/bSx2AoAIEb91NppUi6nMVceM9ajFG9UXSDo= Subject key identifier: 61:22:24:CF:D9:CE:EC:A6:C6:53:87:7E:9E:34:D8:29:64:20:24:4E Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Certificate serial: 010D0C9F4328584CB551EA6DF81C61268AF9B700 Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 26677 IP address blocks: 199.212.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:ea:6d:f8:1c:61:26:8a:f9:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=90bccae3-f312-4dd2-a881-902cb8d27d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:55:d8:f7:95:6a:be:98:b3:28:0f:07:4f: f9:6a:0d:ce:7e:8c:4c:b2:bc:ff:c3:e9:74:7d:48: bf:c4:d0:3f:57:92:f8:6b:1f:20:13:f8:89:cd:59: 9f:3e:4d:83:9d:e1:47:25:fb:64:2c:08:d9:2f:68: bd:bb:5e:70:b3:1d:c4:f9:c7:2b:87:f2:ec:db:ee: 73:06:b1:70:99:8c:41:64:60:ef:46:e2:38:3e:10: 7c:eb:2d:64:35:11:14:aa:33:4f:4a:55:b3:d4:9d: 94:3c:c7:38:3d:d2:4f:43:de:43:d1:f0:1d:24:36: 3c:ce:b7:33:f9:67:cd:96:fd:92:fe:2d:03:b4:5b: d0:63:02:75:d7:cd:ad:5f:36:9a:c0:37:8c:d3:29: 65:6c:f7:63:ae:4f:3c:f7:97:7b:ac:7b:62:b0:5b: 0f:a8:4e:aa:7e:43:3a:99:ef:be:5c:ec:a7:e4:6c: 8f:ea:75:55:2b:ea:40:90:33:e6:00:e9:ae:d3:fc: 74:06:87:08:6a:23:62:8b:80:bf:e8:a4:99:35:35: fa:ba:db:c2:af:dd:0a:2e:4e:79:5f:c1:52:60:b1: 30:e2:ea:54:7e:35:6d:70:b7:5e:d1:16:2e:ac:7a: de:e9:1c:a3:9a:7a:13:a4:93:7a:74:40:ad:2a:89: 10:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:22:24:CF:D9:CE:EC:A6:C6:53:87:7E:9E:34:D8:29:64:20:24:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl X509v3 Authority Key Identifier: keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer sbgp-ipAddrBlock: critical IPv4: 199.212.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c3:af:1e:81:5b:d7:d5:77:ce:57:4f:86:22:13:09:20:5f: 4e:55:b7:c4:81:0c:44:c3:f9:84:9a:42:1a:87:91:67:da:c4: 48:59:c4:59:dd:1a:73:cf:72:82:0e:95:97:cd:ba:54:bc:ca: c9:fd:8f:d0:72:3c:7a:8e:b1:20:f4:c1:84:18:43:08:9c:40: f8:00:a2:0d:09:58:63:a0:b2:d1:5e:21:aa:c9:2c:80:04:71: 71:a9:71:9f:56:6f:dd:01:54:4b:e2:8d:d0:6f:19:be:d4:39: 8d:72:07:42:68:c1:55:ab:97:65:59:30:b4:43:82:14:e8:01: a1:cb:2d:3e:9a:20:6e:08:9a:9e:49:63:e4:a5:13:18:24:0b: 07:02:70:e1:ba:b4:42:b3:09:f4:e3:e4:a7:81:50:8c:61:1f: d8:5e:bf:c9:5b:66:1c:52:d7:e7:78:70:6b:39:a2:68:79:18: a5:03:04:5a:26:a1:9f:6c:cb:c7:f5:cc:83:cd:30:b0:81:1d: df:4c:9c:c3:5e:34:d1:0c:a9:54:53:d5:c1:89:f2:c1:5f:a5: 1b:d8:12:c1:da:64:f5:b5:af:be:88:0e:7f:6f:06:6d:8a:03: 21:26:18:68:4f:4f:0e:7f:74:aa:55:f8:f0:06:f4:45:23:3b: 56:ea:e2:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1Uept+BxhJor5twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlNGUyOWMtZjNjYS00ZWU1LTkyZGEtNDQ0Mzk2OWUz ZGViMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk OTBiY2NhZTMtZjMxMi00ZGQyLWE4ODEtOTAyY2I4ZDI3ZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVdV2PeVar6YsygPB0/5ag3OfoxMsrz/w+l0 fUi/xNA/V5L4ax8gE/iJzVmfPk2DneFHJftkLAjZL2i9u15wsx3E+ccrh/Ls2+5z BrFwmYxBZGDvRuI4PhB86y1kNREUqjNPSlWz1J2UPMc4PdJPQ95D0fAdJDY8zrcz +WfNlv2S/i0DtFvQYwJ1182tXzaawDeM0yllbPdjrk8895d7rHtisFsPqE6qfkM6 me++XOyn5GyP6nVVK+pAkDPmAOmu0/x0BocIaiNii4C/6KSZNTX6utvCr90KLk55 X8FSYLEw4upUfjVtcLde0RYurHre6RyjmnoTpJN6dECtKokQYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEiJM/ZzuymxlOHfp402ClkICROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xZmU0 ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQzOTY5ZTNkZWIvNDljYjhiNDUtMjRhYy0z ZGY1LTgxOTItMjY3NTE0ZmMwODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWZlNGUyOWMtZjNjYS00ZWU1LTky ZGEtNDQ0Mzk2OWUzZGViLzFmZTRlMjljLWYzY2EtNGVlNS05MmRhLTQ0NDM5Njll M2RlYi5jcmwwHwYDVR0jBBgwFoAUCbXJ9Jrd59UO6Ntu9RFJXobmFlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xZmU0ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQz OTY5ZTNkZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfDrx6BW9fVd85XT4YiEwkgX05Vt8SBDETD+YSaQhqHkWfaxEhZxFnd GnPPcoIOlZfNulS8ysn9j9ByPHqOsSD0wYQYQwicQPgAog0JWGOgstFeIarJLIAE cXGpcZ9Wb90BVEvijdBvGb7UOY1yB0JowVWrl2VZMLRDghToAaHLLT6aIG4Imp5J Y+SlExgkCwcCcOG6tEKzCfTj5KeBUIxhH9hev8lbZhxS1+d4cGs5omh5GKUDBFom oZ9sy8f1zIPNMLCBHd9MnMNeNNEMqVRT1cGJ8sFfpRvYEsHaZPW1r76IDn9vBm2K AyEmGGhPTw5/dKpV+PAG9EUjO1bq4iw= -----END CERTIFICATE-----Generated at Mon Mar 2 11:37:55 2026 by rpki-client