$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0990a821-708b-37b1-9308-d5b257c1268b.roa File: 0990a821-708b-37b1-9308-d5b257c1268b.roa (raw, json) Hash identifier: dZ0PxW2NWfZc4E/1uanwcA7ABa1HF1orF9IanJTVDD0= Subject key identifier: 27:73:32:2C:83:4F:21:13:D1:3B:F8:F3:8C:45:4C:31:44:29:69:C2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0436129084914D34E7877858 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0990a821-708b-37b1-9308-d5b257c1268b.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 199.182.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:12:90:84:91:4d:34:e7:87:78:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=a1670b09-72d9-4368-ba01-eda1ff958947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:29:db:1f:9e:f4:88:f6:ea:a0:5c:d5:7b: fa:4f:f7:34:b3:0e:d7:a0:3b:f9:c0:8e:60:e9:47: 98:a4:b5:86:34:43:6b:25:ea:73:c7:3f:2a:65:98: 22:b6:13:39:92:5c:83:af:73:43:1a:26:11:48:43: ca:d0:bb:c3:19:0c:af:82:e9:28:27:e8:7f:62:10: bc:2a:d1:a2:5f:fe:82:c5:db:7e:fc:bd:af:27:80: d5:84:5b:68:07:2d:ff:fe:ef:bb:3c:a3:de:fe:50: 76:4c:56:ed:78:17:2f:ae:d1:7e:63:d9:a9:da:4e: b2:31:00:e9:ad:94:a9:c4:43:0f:c2:88:4a:87:43: 6f:6c:bf:b9:ee:fd:02:73:78:ee:d3:71:22:c7:c9: c6:54:f1:2b:f0:e0:49:3a:d8:23:11:1d:84:50:4c: 21:bd:75:01:45:fc:b7:16:d6:ce:48:29:17:21:c0: 75:c3:14:35:39:be:14:e7:dc:a9:be:b6:6e:7c:07: 5b:e7:09:a4:87:d1:d3:72:d8:61:37:35:6d:15:71: ea:e1:7b:4f:c9:e9:72:11:5d:e1:1d:ae:1c:d4:6f: 12:1a:8d:54:c9:f8:17:0f:96:a8:19:c9:57:54:94: 18:fb:81:fb:a7:3a:f6:ad:cf:42:4e:d7:40:94:5d: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:73:32:2C:83:4F:21:13:D1:3B:F8:F3:8C:45:4C:31:44:29:69:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0990a821-708b-37b1-9308-d5b257c1268b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:81:2c:b4:3b:a8:a8:6c:fc:5d:b4:c1:5f:bc:cf:73:67:34: 69:2c:f1:a3:4d:a1:28:17:f0:88:26:53:66:7d:f0:0d:cd:92: f7:03:9f:86:1a:30:5f:f0:16:8f:46:e0:69:7c:95:3b:82:18: e7:26:b8:41:a4:4f:ae:8f:a4:e0:5f:38:75:90:a4:10:03:24: 92:1d:6d:6c:51:b7:29:7a:11:ae:a3:49:6d:ec:27:4b:98:a3: 27:93:ce:b5:2a:1c:49:a3:bc:24:8a:fd:73:43:ce:64:4c:83: 6b:d0:2c:93:86:39:80:66:36:19:e2:9b:cf:a3:4b:bf:b2:54: 67:dd:83:17:88:71:a9:1d:90:34:b3:39:03:79:4a:ac:47:67: cd:b5:75:00:1f:c1:40:b7:eb:e9:6d:d3:9e:f3:c3:72:7b:49: 8e:06:0a:10:aa:e8:84:4d:d2:66:14:2a:33:09:5f:1a:57:cc: cb:e3:20:7b:0b:85:61:b4:6f:14:b0:7a:77:69:e3:54:54:08: 0d:da:d4:d5:81:62:fd:26:76:d2:1b:e0:9b:c1:10:f7:66:70: d9:73:cc:b2:75:27:1c:4b:dc:21:58:68:4d:27:d0:18:94:0b: f6:63:0d:5f:3a:f0:36:0c:67:e1:31:ea:1a:eb:a7:6a:ff:a1: 81:38:94:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENhKQhJFNNOeHeFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YTE2NzBiMDktNzJkOS00MzY4LWJhMDEtZWRhMWZmOTU4OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEIp2x+e9Ij26qBc1Xv6T/c0sw7XoDv5wI5g 6UeYpLWGNENrJepzxz8qZZgithM5klyDr3NDGiYRSEPK0LvDGQyvgukoJ+h/YhC8 KtGiX/6Cxdt+/L2vJ4DVhFtoBy3//u+7PKPe/lB2TFbteBcvrtF+Y9mp2k6yMQDp rZSpxEMPwohKh0NvbL+57v0Cc3ju03Eix8nGVPEr8OBJOtgjER2EUEwhvXUBRfy3 FtbOSCkXIcB1wxQ1Ob4U59ypvrZufAdb5wmkh9HTcthhNzVtFXHq4XtPyelyEV3h Ha4c1G8SGo1UyfgXD5aoGclXVJQY+4H7pzr2rc9CTtdAlF31ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdzMiyDTyET0Tv484xFTDFEKWnCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDk5MGE4MjEtNzA4Yi0z N2IxLTkzMDgtZDViMjU3YzEyNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGBLLQ7qKhs/F20wV+8z3NnNGks8aNNoSgX8IgmU2Z98A3NkvcDn4Ya MF/wFo9G4Gl8lTuCGOcmuEGkT66PpOBfOHWQpBADJJIdbWxRtyl6Ea6jSW3sJ0uY oyeTzrUqHEmjvCSK/XNDzmRMg2vQLJOGOYBmNhnim8+jS7+yVGfdgxeIcakdkDSz OQN5SqxHZ821dQAfwUC36+lt057zw3J7SY4GChCq6IRN0mYUKjMJXxpXzMvjIHsL hWG0bxSwendp41RUCA3a1NWBYv0mdtIb4JvBEPdmcNlzzLJ1JxxL3CFYaE0n0BiU C/ZjDV868DYMZ+Ex6hrrp2r/oYE4lGk= -----END CERTIFICATE-----Generated at Sat Jun 13 16:05:23 2026 by rpki-client