$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a44394b-6a40-31c4-a8be-3fed2d02740f.roa File: 9a44394b-6a40-31c4-a8be-3fed2d02740f.roa (raw, json) Hash identifier: n+9SywVAs0VqPu18uP94yVticTy4W6H9Ws4trgRzgeE= Subject key identifier: 39:2E:7D:95:32:68:79:73:E9:DD:B2:84:2A:C2:92:0A:DD:12:5D:3E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4987351EE4FA27BD39077CC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a44394b-6a40-31c4-a8be-3fed2d02740f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.182.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:35:1e:e4:fa:27:bd:39:07:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5658011d-ff47-4d16-a464-cc44899d5382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:ce:96:c7:32:57:d9:4f:8c:c6:59:82:3a: e7:69:ce:c1:22:fd:48:ec:4e:78:8a:dd:20:34:b1: 8b:1b:08:96:55:3a:98:ee:fa:8a:de:f8:28:e1:0b: 88:04:e3:36:94:7e:e9:b7:05:62:64:99:6b:cd:28: a5:dd:e7:1b:0f:55:1c:8e:44:a8:ec:ea:3d:90:3c: 4e:20:c4:69:99:30:49:92:36:d8:55:ab:50:7a:b0: 50:94:41:d9:af:14:bf:5d:7c:04:40:41:9a:74:2b: e8:e2:2d:7a:a5:10:29:db:35:27:60:51:ec:d7:91: 2a:a4:be:cb:14:58:76:e6:37:78:c8:6b:69:82:78: 51:bd:60:d1:7e:a8:55:18:b0:d8:6f:5f:44:46:c5: 3d:3e:2e:ce:2b:7a:43:34:91:22:d4:ff:0c:7e:66: dc:b5:69:fc:8f:25:05:3c:4a:8b:00:20:01:0e:17: b4:bd:10:21:0a:3b:d9:06:3d:33:dc:e0:82:00:2c: 74:4c:b8:02:58:db:b5:17:c8:0c:6f:b0:f0:37:e4: 12:6a:b1:df:71:bd:81:be:46:56:81:a2:92:6f:64: fb:6e:0d:2c:ae:fd:b1:0d:6d:4d:19:a2:33:d5:79: 29:4f:14:96:f8:79:60:57:69:3c:a0:47:cc:4d:d9: 63:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2E:7D:95:32:68:79:73:E9:DD:B2:84:2A:C2:92:0A:DD:12:5D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a44394b-6a40-31c4-a8be-3fed2d02740f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:04:46:32:fe:ac:b9:0b:a3:54:a7:bc:ec:79:67:db:10:98: 5b:a0:2c:e7:57:b8:08:e7:b8:14:c0:dc:84:0a:b1:98:e4:84: 7b:ab:00:dd:ea:9a:91:07:17:a7:e6:37:79:23:63:5b:3b:44: 97:9f:2b:be:f1:2b:b8:48:22:0d:bd:3a:23:b0:67:bb:02:46: 3a:50:65:6b:bb:a0:6e:dd:48:c7:7b:74:6a:34:af:41:05:69: f5:97:2b:47:c9:f5:6f:07:9e:92:48:de:04:53:22:93:39:b6: 02:2a:4f:4a:10:e4:6c:b4:a3:6a:5e:95:ee:ee:01:69:56:4b: 0a:94:e2:81:66:21:d5:90:b2:22:91:30:34:ec:ef:1a:b0:a0: a7:aa:54:31:b3:d2:e5:b6:8f:4f:0c:f0:96:d7:1b:bf:b1:fe: 09:91:b7:4c:b9:04:54:3b:c8:13:ae:a9:c5:2e:74:90:13:d5: 6d:bb:1c:8f:48:57:51:da:f4:ee:f4:e6:01:bc:43:01:d1:c2: a2:41:92:1d:f9:82:3b:c1:a2:76:e4:d1:be:32:64:82:0d:55: 01:73:a5:89:06:eb:cc:8a:f5:09:ef:e9:2e:fa:dc:64:f1:ec: 34:bc:ed:6c:8b:ae:a5:de:3a:69:83:9a:83:09:c0:aa:9d:4f: 69:5d:95:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhzUe5PonvTkHfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTY1ODAxMWQtZmY0Ny00ZDE2LWE0NjQtY2M0NDg5OWQ1MzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+jOlscyV9lPjMZZgjrnac7BIv1I7E54it0g NLGLGwiWVTqY7vqK3vgo4QuIBOM2lH7ptwViZJlrzSil3ecbD1UcjkSo7Oo9kDxO IMRpmTBJkjbYVatQerBQlEHZrxS/XXwEQEGadCvo4i16pRAp2zUnYFHs15EqpL7L FFh25jd4yGtpgnhRvWDRfqhVGLDYb19ERsU9Pi7OK3pDNJEi1P8MfmbctWn8jyUF PEqLACABDhe0vRAhCjvZBj0z3OCCACx0TLgCWNu1F8gMb7DwN+QSarHfcb2BvkZW gaKSb2T7bg0srv2xDW1NGaIz1XkpTxSW+HlgV2k8oEfMTdljVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkufZUyaHlz6d2yhCrCkgrdEl0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWE0NDM5NGItNmE0MC0z MWM0LWE4YmUtM2ZlZDJkMDI3NDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYERjL+rLkLo1SnvOx5Z9sQmFugLOdXuAjnuBTA3IQKsZjkhHurAN3q mpEHF6fmN3kjY1s7RJefK77xK7hIIg29OiOwZ7sCRjpQZWu7oG7dSMd7dGo0r0EF afWXK0fJ9W8HnpJI3gRTIpM5tgIqT0oQ5Gy0o2pele7uAWlWSwqU4oFmIdWQsiKR MDTs7xqwoKeqVDGz0uW2j08M8JbXG7+x/gmRt0y5BFQ7yBOuqcUudJAT1W27HI9I V1Ha9O705gG8QwHRwqJBkh35gjvBonbk0b4yZIINVQFzpYkG68yK9Qnv6S763GTx 7DS87WyLrqXeOmmDmoMJwKqdT2ldlbM= -----END CERTIFICATE-----Generated at Fri Sep 25 08:42:11 2026 by rpki-client