$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5fdb2e9c-826b-31d4-952e-dd705720abb8.roa File: 5fdb2e9c-826b-31d4-952e-dd705720abb8.roa (raw, json) Hash identifier: D4lAD+EBztyRkij5Pk1fUDp5DmnvfnRkqkGD8T2oOMc= Subject key identifier: C3:6E:FC:FA:7E:CA:55:AC:F9:5B:E4:F1:59:CD:39:A3:A0:1A:21:03 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49883193A35F978530DEDFA0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5fdb2e9c-826b-31d4-952e-dd705720abb8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.115.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:31:93:a3:5f:97:85:30:de:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3e247d70-90dd-4bce-8487-78f7166f978e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:96:2f:84:7e:56:20:6a:f4:68:59:18:1c:4a: 1e:00:dc:55:fa:70:3e:43:fc:da:5e:8a:82:bd:6f: 22:05:91:3f:2b:36:d1:1b:8d:76:1e:93:12:98:43: 04:00:b2:8e:bf:ea:3e:98:a0:5b:8e:83:78:26:82: e1:85:c4:c6:44:d2:85:13:39:a8:29:ec:95:92:55: 14:ac:98:a1:a5:fc:e5:2b:af:85:ad:49:55:02:c7: 97:38:46:4a:3b:8e:32:56:ee:d2:68:6b:a5:03:36: de:88:e6:03:7b:94:73:2f:e5:1a:27:43:16:da:a8: 8d:fd:36:f0:44:18:00:20:47:e3:f0:8f:a3:65:a4: 3c:66:88:ca:a6:66:05:94:f7:88:cb:7c:ca:e6:69: 3d:9d:83:e0:1c:4b:5c:2c:d3:77:06:91:52:11:f5: 23:8d:29:cb:0f:fa:83:ac:7c:0e:61:64:b3:a6:9d: 68:1b:47:1d:81:2f:cf:e0:c3:af:2b:83:8f:0c:71: 94:62:bb:f9:8b:e3:8c:f0:d4:d6:2c:c9:3e:dd:a4: 5c:a4:f6:e3:40:4a:4f:9f:e2:20:d1:d7:69:00:bd: dc:2e:55:c6:e5:6e:16:13:20:c0:cb:e6:59:eb:5e: d5:70:8f:df:8a:22:54:86:e8:ca:b9:2c:61:6b:1e: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6E:FC:FA:7E:CA:55:AC:F9:5B:E4:F1:59:CD:39:A3:A0:1A:21:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5fdb2e9c-826b-31d4-952e-dd705720abb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:42:42:fd:ad:68:fb:1e:fa:ef:a8:8f:db:ed:34:74:f0:5d: 21:21:db:ea:a1:61:f3:78:c5:58:15:5f:89:cb:ce:ca:d2:b1: 06:30:8c:fc:68:c5:82:e1:48:7d:b2:b5:7a:c8:13:f2:66:a2: f6:ef:6a:ab:de:c7:fa:98:3d:f7:cb:76:a4:b4:b2:5d:4d:85: 54:8a:c6:bb:6a:41:db:fd:a2:97:a1:68:81:2f:51:f4:20:22: c6:ab:12:c9:34:30:de:10:b2:5b:d0:58:e7:8a:4f:1c:c2:21: 33:5b:dc:a8:f9:cb:55:ed:1d:76:47:04:4a:a5:c2:36:5e:ac: 0e:42:32:e9:d2:50:8c:e6:97:a8:40:51:4c:9b:47:b2:09:7b: 5b:72:0d:f4:4e:e0:75:ff:13:5b:29:3e:da:49:bd:a0:e2:c6: 01:88:9c:d3:0e:2b:3b:d6:80:e3:5c:3b:6d:bd:68:81:14:12: ee:2a:82:29:1e:18:70:22:dd:20:d2:80:da:a2:44:96:d7:2a: f3:55:aa:22:30:7a:f0:82:94:35:ba:c2:0d:ec:02:ab:a0:61: ec:f7:17:d5:80:20:bf:56:76:3b:1d:cf:09:aa:42:3d:4a:ad: ad:87:0b:07:68:ca:8c:e5:df:c8:f8:e2:d0:82:be:0c:f2:01: a0:df:8f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiDGTo1+XhTDe36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2UyNDdkNzAtOTBkZC00YmNlLTg0ODctNzhmNzE2NmY5NzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5YvhH5WIGr0aFkYHEoeANxV+nA+Q/zaXoqC vW8iBZE/KzbRG412HpMSmEMEALKOv+o+mKBbjoN4JoLhhcTGRNKFEzmoKeyVklUU rJihpfzlK6+FrUlVAseXOEZKO44yVu7SaGulAzbeiOYDe5RzL+UaJ0MW2qiN/Tbw RBgAIEfj8I+jZaQ8ZojKpmYFlPeIy3zK5mk9nYPgHEtcLNN3BpFSEfUjjSnLD/qD rHwOYWSzpp1oG0cdgS/P4MOvK4OPDHGUYrv5i+OM8NTWLMk+3aRcpPbjQEpPn+Ig 0ddpAL3cLlXG5W4WEyDAy+ZZ617VcI/fiiJUhujKuSxhax7CSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNu/Pp+ylWs+Vvk8VnNOaOgGiEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWZkYjJlOWMtODI2Yi0z MWQ0LTk1MmUtZGQ3MDU3MjBhYmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdCQv2taPse+u+oj9vtNHTwXSEh2+qhYfN4xVgVX4nLzsrSsQYwjPxo xYLhSH2ytXrIE/Jmovbvaqvex/qYPffLdqS0sl1NhVSKxrtqQdv9opehaIEvUfQg IsarEsk0MN4QslvQWOeKTxzCITNb3Kj5y1XtHXZHBEqlwjZerA5CMunSUIzml6hA UUybR7IJe1tyDfRO4HX/E1spPtpJvaDixgGInNMOKzvWgONcO229aIEUEu4qgike GHAi3SDSgNqiRJbXKvNVqiIwevCClDW6wg3sAqugYez3F9WAIL9WdjsdzwmqQj1K ra2HCwdoyozl38j44tCCvgzyAaDfj+M= -----END CERTIFICATE-----Generated at Sat Sep 26 07:06:21 2026 by rpki-client