$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa File: 038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa (raw, json) Hash identifier: y9RWe7apG7Gd0veFYsVK5AEoyFrrlH/SlGZOZj6Vplg= Subject key identifier: 53:7C:ED:20:E0:22:05:6D:BE:BD:92:0F:5B:B7:B1:48:62:C8:B9:21 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C30AFB288C73442132E80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 199.249.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:30:af:b2:88:c7:34:42:13:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=92deb7b1-d7e5-416f-be78-1a35f91e473f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d5:6c:27:93:4f:a4:ee:49:76:85:69:b0:26: 34:ed:72:f4:a0:a1:c8:d4:f0:f0:63:90:44:3a:6e: e5:29:52:aa:7a:8b:0c:2b:51:e6:3e:04:02:6b:87: 28:ef:e1:d1:de:c2:1d:85:f4:69:b4:ee:4f:66:20: 8e:25:43:42:ce:48:1a:45:b6:05:eb:bf:a2:e1:c4: 3a:19:35:3b:d7:75:c7:db:49:db:52:7d:54:e7:7b: fb:18:4c:be:47:b1:8f:28:55:66:fa:da:47:9f:82: 9a:20:8b:2f:ce:e4:25:06:77:fa:89:f5:0a:e2:be: 81:e8:aa:98:0d:49:97:e4:b8:80:53:7b:79:d8:f9: 92:5e:39:4e:5a:49:27:08:bb:db:de:f3:05:5a:aa: 6e:92:93:5a:8e:dd:64:ed:4e:70:de:2f:5a:52:83: 8c:6d:8e:8d:78:3a:35:89:fd:bc:db:42:57:0c:ff: d3:e4:70:16:28:d1:86:fc:7f:78:57:84:79:0c:58: 04:d1:91:dc:83:38:a5:eb:62:70:27:65:84:7c:42: b0:90:cc:b6:49:f3:1f:5a:22:04:c4:0b:6b:5f:35: 3d:ea:d2:54:f0:f3:d9:2a:94:0f:85:9c:ae:5f:5c: e2:67:ce:61:c5:21:d2:14:a9:73:53:5d:6a:5b:cf: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7C:ED:20:E0:22:05:6D:BE:BD:92:0F:5B:B7:B1:48:62:C8:B9:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5c:24:b6:83:84:6a:00:77:11:88:29:d9:8e:f2:f8:60:44: d6:fa:14:45:4b:8a:1d:92:74:43:10:cf:2e:1b:fa:78:e2:00: 31:7d:64:b8:86:d0:9b:43:a8:61:6b:80:d2:a9:cc:22:65:4f: d4:f0:d9:0e:eb:22:dc:3e:b1:0e:f9:2e:95:66:32:77:78:e3: 9f:a8:34:a8:c9:48:4b:02:34:63:d3:db:3e:8c:b9:db:57:d7: 96:01:31:8b:8e:3d:53:b4:d6:8d:04:58:0f:c5:c9:46:96:77: 3a:48:5e:97:2d:68:15:63:7e:3a:b3:b7:41:a0:81:4d:26:ff: a8:09:c4:2c:a4:0f:2a:04:db:08:a4:bf:dc:e6:ac:f5:07:b5: aa:f9:05:4e:9f:03:8b:68:b6:a3:f2:64:8e:51:36:56:14:e7: 18:30:0f:f7:02:21:d2:a3:73:09:e4:64:89:cd:7a:2d:c0:6f: 36:77:81:21:26:55:6d:1f:e6:0b:d9:17:dc:58:74:5a:6f:52: 77:00:b7:53:fa:14:54:50:06:78:ea:bc:84:f3:93:3d:26:52: 79:85:9b:0d:80:08:60:02:62:75:2c:3a:cc:97:f5:02:98:07: 01:4e:fe:3a:32:37:d7:4e:b8:54:23:03:f6:32:22:86:43:5c: ed:d4:c9:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnDCvsojHNEITLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTJkZWI3YjEtZDdlNS00MTZmLWJlNzgtMWEzNWY5MWU0NzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNVsJ5NPpO5JdoVpsCY07XL0oKHI1PDwY5BE Om7lKVKqeosMK1HmPgQCa4co7+HR3sIdhfRptO5PZiCOJUNCzkgaRbYF67+i4cQ6 GTU713XH20nbUn1U53v7GEy+R7GPKFVm+tpHn4KaIIsvzuQlBnf6ifUK4r6B6KqY DUmX5LiAU3t52PmSXjlOWkknCLvb3vMFWqpukpNajt1k7U5w3i9aUoOMbY6NeDo1 if2820JXDP/T5HAWKNGG/H94V4R5DFgE0ZHcgzil62JwJ2WEfEKwkMy2SfMfWiIE xAtrXzU96tJU8PPZKpQPhZyuX1ziZ85hxSHSFKlzU11qW8/oiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFN87SDgIgVtvr2SD1u3sUhiyLkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDM4ZDA0YzUtYjNhZi0z NWE4LWJiZTgtNDlmNTJkYzZlM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRcJLaDhGoAdxGIKdmO8vhgRNb6FEVLih2SdEMQzy4b+njiADF9ZLiG 0JtDqGFrgNKpzCJlT9Tw2Q7rItw+sQ75LpVmMnd445+oNKjJSEsCNGPT2z6MudtX 15YBMYuOPVO01o0EWA/FyUaWdzpIXpctaBVjfjqzt0GggU0m/6gJxCykDyoE2wik v9zmrPUHtar5BU6fA4totqPyZI5RNlYU5xgwD/cCIdKjcwnkZInNei3AbzZ3gSEm VW0f5gvZF9xYdFpvUncAt1P6FFRQBnjqvITzkz0mUnmFmw2ACGACYnUsOsyX9QKY BwFO/joyN9dOuFQjA/YyIoZDXO3UybE= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:22 2026 by rpki-client