$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa File: 7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa (raw, json) Hash identifier: KXmL9RjNHBp/jSXDml+oUJ0ncNzQDYWRNU12+JdkmAI= Subject key identifier: 87:85:93:6A:CC:52:9B:3B:C8:59:80:9C:F6:BD:20:E0:0D:E7:C0:F0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C2C6108683492A14DF0C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 199.254.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:2c:61:08:68:34:92:a1:4d:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9b10e974-e5b2-4f56-89a2-56d8a5366edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:d8:21:8d:1e:18:df:23:ed:86:47:03:de: 99:44:ac:8a:04:7f:8b:5a:64:02:4b:01:77:5a:e4: 19:85:65:c3:b0:71:71:e7:68:1d:5e:38:3e:f9:7e: 2f:35:7f:cc:67:7b:79:96:aa:13:1d:f2:87:b6:ef: c2:18:82:6e:05:fe:e7:d1:02:9c:63:d7:ea:86:96: 39:0d:25:68:9b:9d:6f:79:58:b0:0d:9d:b1:50:be: 52:fb:b6:46:36:d1:4c:0d:66:f3:e8:43:60:42:1b: d5:04:67:b1:99:bd:25:0a:ab:fd:27:d2:66:90:10: ec:00:3c:70:f2:56:53:4d:5e:94:55:b1:6c:7a:da: 9c:2c:60:db:8f:fb:31:72:bc:95:cb:3e:92:f2:f1: 3b:ae:c2:bc:bc:e6:df:31:e4:c2:57:3d:b8:cd:33: 75:7f:f6:4a:63:f4:59:72:31:2d:f3:c2:04:84:6e: 53:dc:55:88:47:d0:22:7f:d0:b6:fc:46:aa:da:d9: 11:1b:c3:48:1b:42:10:80:73:a1:76:39:fb:ad:71: 14:4a:13:d0:ac:3b:98:7d:dc:a1:fd:82:b1:df:1c: 81:e9:e5:fe:c4:ed:18:57:ce:6a:21:a9:a0:2a:14: fd:c0:9d:40:28:41:17:47:46:05:26:2e:2f:69:3d: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:85:93:6A:CC:52:9B:3B:C8:59:80:9C:F6:BD:20:E0:0D:E7:C0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:af:9e:b0:bb:dd:ad:dc:20:08:13:7d:e3:5e:65:40:b4:fd: b0:0e:96:76:08:63:b1:f4:b8:ce:09:6c:5e:97:c8:41:a4:53: e4:e0:94:90:74:90:09:09:24:70:de:57:a7:6a:ef:88:6f:c3: ce:04:59:a5:b5:f3:18:c7:08:1c:e0:fb:f8:1d:16:7c:98:e4: eb:9f:36:60:3e:f9:c0:35:ea:29:b5:b4:71:6e:6d:8c:c8:03: 9c:47:d5:ea:bb:4c:72:b5:b4:72:ec:d6:46:3c:9b:aa:26:23: 59:a4:0a:64:15:cf:4c:1b:5b:44:b2:0e:6d:f4:cc:0c:46:85: 01:2a:4c:79:7a:94:6d:f2:b6:e8:1a:80:88:39:b9:66:ee:1b: 8c:62:61:7b:d4:42:ee:53:1a:f2:8f:41:7e:45:56:49:a9:ca: c8:da:f7:8d:66:1e:b6:ed:d9:11:48:d4:82:ee:28:f8:27:6b: c6:98:93:b1:95:6c:61:d2:35:ee:91:c5:a0:c1:bc:89:76:3e: 24:8a:d6:07:db:e0:29:78:ce:21:78:8d:bc:54:51:70:2d:1f: e9:e2:50:f4:0f:7f:08:cf:a8:80:c0:bb:40:8d:f3:85:6c:d3: d8:44:01:06:e4:bf:3f:25:37:c1:05:d9:b1:de:65:88:42:f7: 60:18:69:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnCxhCGg0kqFN8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWIxMGU5NzQtZTViMi00ZjU2LTg5YTItNTZkOGE1MzY2ZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9bYIY0eGN8j7YZHA96ZRKyKBH+LWmQCSwF3 WuQZhWXDsHFx52gdXjg++X4vNX/MZ3t5lqoTHfKHtu/CGIJuBf7n0QKcY9fqhpY5 DSVom51veViwDZ2xUL5S+7ZGNtFMDWbz6ENgQhvVBGexmb0lCqv9J9JmkBDsADxw 8lZTTV6UVbFsetqcLGDbj/sxcryVyz6S8vE7rsK8vObfMeTCVz24zTN1f/ZKY/RZ cjEt88IEhG5T3FWIR9Aif9C2/Eaq2tkRG8NIG0IQgHOhdjn7rXEUShPQrDuYfdyh /YKx3xyB6eX+xO0YV85qIamgKhT9wJ1AKEEXR0YFJi4vaT2hGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeFk2rMUps7yFmAnPa9IOAN58DwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2MyNWY2MGQtZTY1Mi0z OWMyLWFkM2ItZTdiY2I0NmVlMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCvnrC73a3cIAgTfeNeZUC0/bAOlnYIY7H0uM4JbF6XyEGkU+TglJB0 kAkJJHDeV6dq74hvw84EWaW18xjHCBzg+/gdFnyY5OufNmA++cA16im1tHFubYzI A5xH1eq7THK1tHLs1kY8m6omI1mkCmQVz0wbW0SyDm30zAxGhQEqTHl6lG3ytuga gIg5uWbuG4xiYXvUQu5TGvKPQX5FVkmpysja941mHrbt2RFI1ILuKPgna8aYk7GV bGHSNe6RxaDBvIl2PiSK1gfb4Cl4ziF4jbxUUXAtH+niUPQPfwjPqIDAu0CN84Vs 09hEAQbkvz8lN8EF2bHeZYhC92AYaZs= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:36 2026 by rpki-client