$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa File: 34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa (raw, json) Hash identifier: 7j1smLQb8BcNAIiOvkpN/soNMU1SRmquvF6pN/CcdMM= Subject key identifier: A2:75:E7:F8:F4:26:61:A8:6A:D8:CA:F0:2B:7C:40:16:17:E3:0B:79 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D4D5A9B02B9F9350C6F392300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 393246 IP address blocks: 199.115.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:9b:02:b9:f9:35:0c:6f:39:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=c283b930-352c-47ab-862b-3be667f64c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:55:d2:25:80:75:f5:3d:9a:1a:96:3f:4e: 5f:da:fc:77:73:28:bd:a3:91:f2:36:85:4c:36:79: 62:82:82:d5:af:4e:ba:91:aa:0c:64:2e:f1:c2:6f: f3:f0:d1:b0:f7:c6:16:f4:4f:20:a0:7e:02:ae:62: 25:0f:a6:47:1c:21:70:1c:27:f2:1a:07:b3:c8:e0: 33:cd:be:69:3e:b1:9e:53:a5:0d:87:d1:01:b6:ba: c0:1d:e6:dc:c6:a4:6b:5c:bd:7e:81:09:89:73:84: af:6b:c6:90:e7:7e:4f:c2:23:63:4b:7a:0d:03:fb: 8e:d8:a8:15:01:f5:39:18:e2:2e:7c:8f:78:6c:9c: 73:7b:50:2b:27:09:01:cb:e7:9b:85:3f:df:36:a0: f7:9b:09:39:6a:23:48:86:3c:21:3a:4f:2b:ad:9a: 36:fb:3c:3b:ea:cc:f8:7e:ec:96:1a:4e:77:5e:46: 2d:ae:f7:a6:c8:d1:63:44:38:2b:b3:31:05:7d:f5: 28:13:10:a2:c4:3c:d8:16:a4:5e:4a:98:45:70:27: cf:ee:f8:5d:d2:11:5a:a0:63:1f:4e:7f:ac:f3:b1: 0d:ea:c3:f2:48:a7:dc:ca:66:45:88:0a:dd:d8:3e: 6c:04:d2:84:f1:7a:c6:0b:59:35:17:57:7b:8d:d2: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:75:E7:F8:F4:26:61:A8:6A:D8:CA:F0:2B:7C:40:16:17:E3:0B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2a:81:57:cc:25:92:7a:af:47:c9:03:79:94:cc:1c:1c:8e: ea:d5:92:24:ad:62:b1:d2:0f:01:4f:56:90:e3:a1:b8:8c:fe: e5:c5:70:c2:13:78:6e:f4:51:05:de:b3:2f:c6:e8:b2:5f:c8: 72:5f:8e:50:d8:6e:86:a9:c7:5b:b8:50:f2:8b:26:8d:8b:d4: 24:b3:d9:0f:e1:3e:d2:32:c6:8b:f5:e3:25:f6:83:71:a8:f8: a2:d6:0d:12:6f:f3:2c:04:48:0d:eb:44:e1:a7:80:8d:cd:e2: 90:8e:18:f8:45:fe:70:ad:da:99:ce:88:f8:b5:54:a1:c4:7b: 46:48:9a:c0:c8:63:67:b7:65:b4:53:8a:ec:43:4b:ce:59:84: f5:0f:35:67:cc:02:e0:28:39:59:de:c8:23:b2:25:30:4f:3c: db:f8:78:e9:56:23:79:e7:e4:3f:ce:73:49:b3:16:04:80:18: 3a:d9:e6:17:2e:eb:03:1a:c5:05:63:e1:ec:2d:6e:37:78:75: 11:0e:cb:99:b7:13:ae:70:58:26:3a:13:fc:9d:26:64:38:99: c9:c7:f4:f9:cc:c6:5f:fa:78:3b:d4:c2:e0:7e:9d:62:5e:8f: 38:9d:a5:8e:29:66:2b:d0:6f:73:81:93:f9:03:22:eb:76:b4: a0:af:75:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWpsCufk1DG85IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YzI4M2I5MzAtMzUyYy00N2FiLTg2MmItM2JlNjY3ZjY0YzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz39V0iWAdfU9mhqWP05f2vx3cyi9o5HyNoVM NnligoLVr066kaoMZC7xwm/z8NGw98YW9E8goH4CrmIlD6ZHHCFwHCfyGgezyOAz zb5pPrGeU6UNh9EBtrrAHebcxqRrXL1+gQmJc4Sva8aQ535PwiNjS3oNA/uO2KgV AfU5GOIufI94bJxze1ArJwkBy+ebhT/fNqD3mwk5aiNIhjwhOk8rrZo2+zw76sz4 fuyWGk53XkYtrvemyNFjRDgrszEFffUoExCixDzYFqReSphFcCfP7vhd0hFaoGMf Tn+s87EN6sPySKfcymZFiArd2D5sBNKE8XrGC1k1F1d7jdLbVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ15/j0JmGoatjK8Ct8QBYX4wt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzRjMmZiY2YtMzdiNS0z OTgzLThlODItNWI3YjMzNDNmMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIqgVfMJZJ6r0fJA3mUzBwcjurVkiStYrHSDwFPVpDjobiM/uXFcMIT eG70UQXesy/G6LJfyHJfjlDYboapx1u4UPKLJo2L1CSz2Q/hPtIyxov14yX2g3Go +KLWDRJv8ywESA3rROGngI3N4pCOGPhF/nCt2pnOiPi1VKHEe0ZImsDIY2e3ZbRT iuxDS85ZhPUPNWfMAuAoOVneyCOyJTBPPNv4eOlWI3nn5D/Oc0mzFgSAGDrZ5hcu 6wMaxQVj4ewtbjd4dREOy5m3E65wWCY6E/ydJmQ4mcnH9PnMxl/6eDvUwuB+nWJe jzidpY4pZivQb3OBk/kDIut2tKCvdW4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:48:50 2026 by rpki-client