$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa File: 3b03f92f-103e-3d7e-abfa-c7431f00a281.roa (raw, json) Hash identifier: 1MQVQGb9c00/pk3+4D/UfK2dboDht1m3j9EPNRUgEjQ= Subject key identifier: 08:24:7E:31:EA:E6:7A:FB:68:EE:6B:8E:0C:6A:C2:60:57:50:04:0D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498B73C077A86A3034F23680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.249.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:73:c0:77:a8:6a:30:34:f2:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3b0a7c70-6f8f-4f75-9e4a-496b36efa372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bd:19:37:64:49:1b:09:33:ff:45:05:08:94: 03:89:38:8f:8a:87:9a:1f:c2:3e:fa:96:16:13:23: d7:c5:08:ca:be:b6:0a:c0:0c:28:27:6d:7b:2d:4c: 8f:4c:82:4f:6c:68:7d:d9:a2:c6:61:8e:c4:9a:e3: fa:c5:5d:f8:7a:97:cb:85:1f:89:b9:a3:7b:a0:f4: 51:ab:45:39:22:cc:19:80:af:9b:d2:9d:cf:68:f8: 49:bb:e8:47:0e:fd:99:37:07:11:e0:d3:a7:24:41: d0:c1:03:5b:71:32:bb:a3:90:0d:cf:bf:e8:37:15: cb:3d:bd:dd:a1:4e:1e:12:f5:77:c9:57:91:66:45: 16:da:63:e2:f6:ac:72:1a:8a:68:18:68:0f:8d:a7: a1:18:ba:e2:4e:f0:bb:5b:4c:b8:bc:2f:e4:f8:7f: 44:65:29:b3:9c:ca:6a:20:1a:11:88:c7:d6:7c:ca: 98:54:14:52:d2:ef:16:6a:a7:79:eb:6b:12:19:e2: 61:32:15:0c:81:22:b6:63:ab:5a:ec:97:94:cd:fb: d4:fb:7a:0e:18:50:f1:c1:83:0a:ac:ad:77:53:30: 21:6b:e9:63:99:ef:f3:5e:0b:33:76:db:51:99:60: 16:2f:cb:ba:ea:af:49:d5:05:71:bd:e6:aa:1e:95: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:24:7E:31:EA:E6:7A:FB:68:EE:6B:8E:0C:6A:C2:60:57:50:04:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:2b:b0:40:b5:25:8b:67:03:0f:64:52:c7:1d:06:a3:7f:73: 57:2b:f1:42:4c:f0:bc:f7:29:67:dd:8d:cf:a9:3d:3f:fb:b5: 0e:3d:a1:ed:77:15:38:a0:c8:87:4c:61:ba:5d:fa:e1:e9:8c: 54:bf:67:e2:91:cf:fa:64:3a:dd:2a:f3:cc:23:46:61:1e:1b: 69:47:21:b0:53:d9:27:71:89:e8:0d:4c:50:ab:d5:5a:9b:7a: 5f:49:1f:ff:09:3c:77:b5:c6:52:71:c2:c9:a6:8d:19:cc:5a: 81:41:ec:e2:99:d5:94:2d:4b:7c:be:75:41:e2:9b:b4:55:ac: a6:ec:1b:a0:68:94:c0:cf:41:53:e4:a7:86:b4:74:42:13:fc: 74:b2:2c:b3:fd:4f:98:bb:a8:25:b9:e9:6d:2d:c7:67:6e:e4: 6d:53:be:16:1b:a6:ea:c8:2a:42:a3:b0:ac:4f:7c:7e:9c:5e: 9a:99:74:31:51:18:51:2c:ef:cc:a9:20:f0:f1:0e:df:2b:87: 37:f0:8d:4a:2a:50:c4:0e:41:82:f9:aa:12:60:1b:b6:25:c3: 2b:6a:49:6b:64:16:85:a2:0f:0d:b6:ca:85:d7:f1:bb:ee:68: 6c:fd:71:70:5d:08:f7:18:7e:37:06:f6:34:46:aa:a4:26:9e: fc:27:c5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji3PAd6hqMDTyNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2IwYTdjNzAtNmY4Zi00Zjc1LTllNGEtNDk2YjM2ZWZhMzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir0ZN2RJGwkz/0UFCJQDiTiPioeaH8I++pYW EyPXxQjKvrYKwAwoJ217LUyPTIJPbGh92aLGYY7EmuP6xV34epfLhR+JuaN7oPRR q0U5IswZgK+b0p3PaPhJu+hHDv2ZNwcR4NOnJEHQwQNbcTK7o5ANz7/oNxXLPb3d oU4eEvV3yVeRZkUW2mPi9qxyGopoGGgPjaehGLriTvC7W0y4vC/k+H9EZSmznMpq IBoRiMfWfMqYVBRS0u8Waqd562sSGeJhMhUMgSK2Y6ta7JeUzfvU+3oOGFDxwYMK rK13UzAha+ljme/zXgszdttRmWAWL8u66q9J1QVxveaqHpUz6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgkfjHq5nr7aO5rjgxqwmBXUAQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2IwM2Y5MmYtMTAzZS0z ZDdlLWFiZmEtYzc0MzFmMDBhMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0rsEC1JYtnAw9kUscdBqN/c1cr8UJM8Lz3KWfdjc+pPT/7tQ49oe13 FTigyIdMYbpd+uHpjFS/Z+KRz/pkOt0q88wjRmEeG2lHIbBT2SdxiegNTFCr1Vqb el9JH/8JPHe1xlJxwsmmjRnMWoFB7OKZ1ZQtS3y+dUHim7RVrKbsG6BolMDPQVPk p4a0dEIT/HSyLLP9T5i7qCW56W0tx2du5G1TvhYbpurIKkKjsKxPfH6cXpqZdDFR GFEs78ypIPDxDt8rhzfwjUoqUMQOQYL5qhJgG7YlwytqSWtkFoWiDw22yoXX8bvu aGz9cXBdCPcYfjcG9jRGqqQmnvwnxa8= -----END CERTIFICATE-----Generated at Fri Sep 25 10:58:08 2026 by rpki-client