$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa File: 7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa (raw, json) Hash identifier: 1V+ewPWhOyERlANOFNFw9nAPGnKM9dx/Fuwlnwoc3f0= Subject key identifier: 48:23:C6:65:34:92:30:B8:A7:47:B9:EF:64:37:B9:53:4A:3A:89:21 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974B5E8FB4207D287BFB600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.254.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b5:e8:fb:42:07:d2:87:bf:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=be4f64fe-1060-48f8-a624-5653ea5466d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:82:a6:a4:c6:6c:08:fb:cf:bf:30:4e:6a: 7c:c9:58:fd:56:a8:35:17:34:51:d0:a9:ea:14:12: a5:e8:d9:a6:f1:ae:f8:3a:11:77:4d:44:bf:36:b5: 9e:32:36:46:91:96:01:4e:7a:39:39:9f:80:b7:35: da:0c:6e:18:5e:ff:12:bc:86:a2:9f:48:fa:1b:e6: e0:e6:ae:74:69:63:24:61:4f:23:4d:15:e3:ca:b0: b2:92:f9:17:c2:61:7d:74:88:ad:cd:8e:a4:7b:98: 7a:9f:1d:23:1d:fc:1a:d7:c0:0f:a0:8a:84:f2:fa: 0e:8d:05:f3:d0:61:cc:49:3e:09:d8:57:f6:e9:81: 9f:d6:8d:43:4b:5c:7d:83:02:6a:34:4a:7e:99:2a: ad:f0:56:f3:aa:3f:ae:65:fe:d3:d4:84:43:52:49: 77:69:6f:c4:b1:c4:ef:84:97:85:16:1d:98:8f:52: 87:af:53:4e:b7:fa:2f:1c:26:2a:b8:29:5d:6f:77: e8:e0:40:8a:e8:d1:1a:51:93:bb:91:5e:10:86:6d: 67:1d:45:c1:46:e0:06:70:84:49:e8:e3:06:9d:4b: 49:a7:58:1f:79:40:58:85:91:61:71:39:0d:8a:10: 04:b4:a7:a5:93:b2:4a:d7:79:f5:23:aa:80:d2:d8: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:23:C6:65:34:92:30:B8:A7:47:B9:EF:64:37:B9:53:4A:3A:89:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:13:24:87:af:9f:a5:04:49:13:12:d4:c4:c7:ef:32:19:94: 90:81:0a:3a:2b:eb:10:b0:d6:b1:c4:47:9b:a1:12:b8:d3:74: 6b:d8:ae:79:e0:65:1d:3a:d4:81:41:54:66:80:c2:5b:d2:9e: 4e:7e:a6:2f:d7:43:e3:7a:05:43:c9:05:64:19:91:e2:69:06: 9f:c5:ee:38:34:bd:82:70:70:e0:f3:80:96:68:81:1d:f0:fc: b9:1c:4a:1e:72:46:41:99:a4:0f:9c:86:d0:a5:3f:1c:2e:e2: c4:2c:f1:8b:ae:2b:da:bf:d0:ea:a8:56:79:2a:71:8d:15:3f: 8d:6e:75:2a:ce:36:2c:b0:ab:1d:d4:f0:a9:08:21:c2:50:ae: 23:b4:f5:4c:b1:2c:45:af:aa:92:1c:23:e0:4a:9b:a1:83:ab: c5:13:8f:14:cf:78:d1:a4:9d:e4:e0:8f:9c:c4:df:d0:65:36: ec:6f:92:b2:02:be:68:be:c3:31:6d:01:30:ba:b6:fd:19:79: cd:c6:1e:0b:ee:14:4b:9a:4a:f6:12:85:c6:5b:cb:f8:6e:78: 3b:f3:40:61:7b:5e:e8:3d:10:ba:01:07:aa:86:5d:39:0c:76: 85:9a:0d:69:96:78:c7:3e:67:64:f1:82:c7:c9:f2:d4:c0:ea: 98:8c:db:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLXo+0IH0oe/tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmU0ZjY0ZmUtMTA2MC00OGY4LWE2MjQtNTY1M2VhNTQ2NmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6OCpqTGbAj7z78wTmp8yVj9Vqg1FzRR0Knq FBKl6Nmm8a74OhF3TUS/NrWeMjZGkZYBTno5OZ+AtzXaDG4YXv8SvIain0j6G+bg 5q50aWMkYU8jTRXjyrCykvkXwmF9dIitzY6ke5h6nx0jHfwa18APoIqE8voOjQXz 0GHMST4J2Ff26YGf1o1DS1x9gwJqNEp+mSqt8Fbzqj+uZf7T1IRDUkl3aW/EscTv hJeFFh2Yj1KHr1NOt/ovHCYquCldb3fo4ECK6NEaUZO7kV4Qhm1nHUXBRuAGcIRJ 6OMGnUtJp1gfeUBYhZFhcTkNihAEtKelk7JK13n1I6qA0thOvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgjxmU0kjC4p0e572Q3uVNKOokhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2MyNWY2MGQtZTY1Mi0z OWMyLWFkM2ItZTdiY2I0NmVlMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIITJIevn6UESRMS1MTH7zIZlJCBCjor6xCw1rHER5uhErjTdGvYrnng ZR061IFBVGaAwlvSnk5+pi/XQ+N6BUPJBWQZkeJpBp/F7jg0vYJwcODzgJZogR3w /LkcSh5yRkGZpA+chtClPxwu4sQs8YuuK9q/0OqoVnkqcY0VP41udSrONiywqx3U 8KkIIcJQriO09UyxLEWvqpIcI+BKm6GDq8UTjxTPeNGkneTgj5zE39BlNuxvkrIC vmi+wzFtATC6tv0Zec3GHgvuFEuaSvYShcZby/hueDvzQGF7Xug9ELoBB6qGXTkM doWaDWmWeMc+Z2TxgsfJ8tTA6piM26k= -----END CERTIFICATE-----Generated at Fri Sep 25 22:23:01 2026 by rpki-client