$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0990a821-708b-37b1-9308-d5b257c1268b.roa File: 0990a821-708b-37b1-9308-d5b257c1268b.roa (raw, json) Hash identifier: lEWfiXpA3Rx8RHs0nv3rzAkyfdkzBEP3ipnzf/Dye8g= Subject key identifier: C9:C2:67:5A:AF:51:99:5D:3B:9A:B4:08:BE:D0:BA:79:1F:60:B3:15 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498713996D065784F286A248 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0990a821-708b-37b1-9308-d5b257c1268b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.182.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:13:99:6d:06:57:84:f2:86:a2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=00c255ec-05a5-4964-a418-ee453dc28cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5f:78:d5:7e:cb:dc:92:8d:70:7f:10:2c:e2: 10:9c:64:23:73:5a:06:00:56:df:6d:54:54:03:bb: 9f:e0:31:e6:e6:19:1f:cd:df:f9:6d:17:65:2a:59: c8:d0:8c:f5:2b:79:18:b6:30:d4:37:4c:78:30:32: 91:e3:a5:70:41:96:2c:ed:33:6b:b0:af:ab:c5:8d: e1:18:0c:58:45:1a:ce:24:db:f8:ef:c4:3b:fb:e3: cb:4f:a3:06:cc:ba:46:6f:76:47:ec:e9:10:2f:70: 11:6b:85:fc:e7:d2:33:e0:7c:25:fa:9b:50:2e:a5: 4b:b5:58:13:51:3a:07:9f:7a:c7:81:44:4a:6e:9c: 35:86:9c:f5:3f:d6:31:97:5a:be:01:0d:77:53:0d: 3a:ab:dc:99:a4:0d:29:04:ca:72:55:e8:1a:12:7d: 65:f1:d5:ac:8f:22:d9:b7:78:99:4c:68:02:3a:33: 3c:8a:39:0c:6d:52:bf:09:ed:91:6a:df:5b:19:ed: f2:d3:ca:b2:33:50:df:f3:8e:ee:a0:4c:85:2a:60: a3:d3:29:36:94:97:05:6c:eb:66:7a:82:99:1e:b8: 54:10:dd:d3:c2:c1:c6:46:81:99:45:2b:b9:5b:a1: 61:12:58:41:4a:ef:db:06:9e:3d:d2:ef:9b:f7:e2: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C2:67:5A:AF:51:99:5D:3B:9A:B4:08:BE:D0:BA:79:1F:60:B3:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0990a821-708b-37b1-9308-d5b257c1268b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:52:c5:6e:24:c2:be:90:d8:85:13:8e:40:22:3d:1e:13:63: ef:7a:7c:2f:83:6d:8e:95:d9:da:a7:c0:e8:62:2b:a3:45:6a: c9:66:b8:70:a2:b4:65:00:3e:c8:51:95:77:3c:60:17:e0:50: c1:b3:74:1b:3a:7b:2f:2e:15:e5:41:6e:af:33:24:a8:a1:c5: db:3a:0b:d2:c2:43:8a:f1:d6:cc:f8:aa:db:91:c7:a5:9a:52: 28:73:9d:cc:25:63:6f:95:d4:f6:a9:4f:4d:49:6c:bb:ba:7f: 63:24:ca:07:fc:81:37:c3:75:e6:f7:95:33:7b:84:1e:e0:c3: d4:44:1f:87:b7:9b:3c:2a:b2:e3:34:83:8d:32:4c:ee:f9:3e: 88:c1:36:d7:3c:46:6b:d6:1d:95:3b:09:1e:be:9f:71:43:b8: da:59:6f:1f:76:f9:e6:57:79:59:ac:ea:3a:3c:e6:7b:7d:0d: 4e:13:09:89:4a:36:79:9a:5c:3a:54:e5:de:39:d2:b9:41:7a: 07:14:cb:c8:ee:f0:31:56:ed:97:6c:e7:ee:70:04:bf:89:26: ee:e7:e7:89:4c:53:de:f6:c4:53:ab:b4:28:51:1f:7e:1a:b3: f7:60:04:81:06:78:41:01:5c:9a:43:b5:df:8b:b7:74:d7:12: ef:8f:87:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhxOZbQZXhPKGokgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDBjMjU1ZWMtMDVhNS00OTY0LWE0MTgtZWU0NTNkYzI4Y2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF941X7L3JKNcH8QLOIQnGQjc1oGAFbfbVRU A7uf4DHm5hkfzd/5bRdlKlnI0Iz1K3kYtjDUN0x4MDKR46VwQZYs7TNrsK+rxY3h GAxYRRrOJNv478Q7++PLT6MGzLpGb3ZH7OkQL3ARa4X859Iz4Hwl+ptQLqVLtVgT UToHn3rHgURKbpw1hpz1P9Yxl1q+AQ13Uw06q9yZpA0pBMpyVegaEn1l8dWsjyLZ t3iZTGgCOjM8ijkMbVK/Ce2Rat9bGe3y08qyM1Df847uoEyFKmCj0yk2lJcFbOtm eoKZHrhUEN3TwsHGRoGZRSu5W6FhElhBSu/bBp490u+b9+LUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnCZ1qvUZldO5q0CL7QunkfYLMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDk5MGE4MjEtNzA4Yi0z N2IxLTkzMDgtZDViMjU3YzEyNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpSxW4kwr6Q2IUTjkAiPR4TY+96fC+DbY6V2dqnwOhiK6NFaslmuHCi tGUAPshRlXc8YBfgUMGzdBs6ey8uFeVBbq8zJKihxds6C9LCQ4rx1sz4qtuRx6Wa UihzncwlY2+V1PapT01JbLu6f2Mkygf8gTfDdeb3lTN7hB7gw9REH4e3mzwqsuM0 g40yTO75PojBNtc8RmvWHZU7CR6+n3FDuNpZbx92+eZXeVms6jo85nt9DU4TCYlK NnmaXDpU5d450rlBegcUy8ju8DFW7Zds5+5wBL+JJu7n54lMU972xFOrtChRH34a s/dgBIEGeEEBXJpDtd+Lt3TXEu+Ph70= -----END CERTIFICATE-----Generated at Sat Sep 26 10:40:33 2026 by rpki-client