$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa File: a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa (raw, json) Hash identifier: k1cAzBFuqJaIS0X5upg9xR5GfEDq+flN6/fA1VE3xZo= Subject key identifier: F4:6B:6C:0A:8B:68:06:A2:21:76:94:E5:B5:44:3E:64:ED:8B:58:0F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C84730CD4ACE56EE3C800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 199.115.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:84:73:0c:d4:ac:e5:6e:e3:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=15c0f908-cf77-4a49-98f0-6497692b6481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:61:e6:31:55:9e:e8:9c:6a:25:9a:1e:9c: 73:2d:96:05:5a:91:51:2d:fa:91:d8:59:a2:1f:db: 94:a9:3d:96:25:fb:85:bd:29:95:41:77:8b:e4:5b: 39:aa:70:4d:14:8d:08:3d:e5:1b:7b:73:59:5b:2c: 79:f8:50:0d:ba:d6:75:fe:55:72:11:a3:2f:18:d9: e7:d9:09:32:d4:04:5b:3c:98:e5:b2:17:4c:c3:09: c4:94:16:5f:4a:0f:64:40:10:15:03:94:21:29:49: 88:24:13:cb:c4:a3:7e:f6:6c:4d:b8:db:74:d1:f8: cb:2b:f8:dd:aa:87:6e:58:93:b1:d5:00:37:e2:f1: 05:6e:44:29:b5:6b:9e:47:15:9e:df:d2:71:96:87: fe:e7:03:83:e3:8b:93:50:6f:7b:07:bb:c1:91:e5: 99:ae:bf:71:ad:0b:e7:15:a1:dd:61:07:e3:36:c0: ba:5f:84:0d:6e:7b:e7:66:81:e9:ee:2c:82:86:7c: 69:a5:06:13:56:ef:0f:1d:06:41:88:fe:9d:e0:38: 5e:be:be:f8:d3:42:af:b6:4e:7d:cb:b8:e8:7b:41: 12:6c:af:05:1b:07:e2:33:de:d9:9f:46:82:15:6b: db:26:01:dc:11:29:19:a7:d2:ae:c5:39:50:52:23: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6B:6C:0A:8B:68:06:A2:21:76:94:E5:B5:44:3E:64:ED:8B:58:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b5:5b:22:ea:aa:b5:f6:a4:40:48:8e:e1:e8:67:c6:cf:57: 71:49:1e:fa:ef:cc:03:8d:a4:17:8b:af:89:63:cf:4f:10:fe: 5b:a2:62:93:9d:07:0c:de:24:41:e4:62:01:54:98:98:de:d6: 33:69:da:31:ae:ab:b6:c9:96:d5:35:42:9f:09:f8:c0:a4:12: 7b:bb:68:31:91:f4:cd:f2:c6:fd:30:90:13:72:69:34:53:26: f9:f4:11:ed:87:26:cc:1c:d9:69:11:38:c9:be:1a:40:f3:02: 63:1a:c9:56:b9:50:0a:17:67:8a:b6:14:0a:df:f6:6f:60:8f: 19:a7:fe:69:06:80:b9:05:14:53:47:f5:e9:2a:17:8d:35:2d: 87:32:56:9d:dd:ec:40:fd:fd:3b:29:fe:ea:3d:b7:63:1d:a5: d3:a1:d5:7f:0c:47:e2:1e:b5:7d:ab:22:c8:c4:e0:90:db:88: 28:a4:b4:ab:50:79:22:25:c3:4c:34:93:55:ed:d3:b9:fd:df: dc:c9:0d:5d:96:32:08:52:c2:69:f7:47:e9:b3:46:b8:77:27: ae:6e:4c:81:d6:23:bb:d1:a6:84:e4:6a:75:a4:52:67:f0:34: e0:44:f4:88:87:ca:5d:3f:7b:dd:d0:56:e5:83:2a:93:9c:22: b0:24:7c:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnIRzDNSs5W7jyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTVjMGY5MDgtY2Y3Ny00YTQ5LTk4ZjAtNjQ5NzY5MmI2NDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFNh5jFVnuicaiWaHpxzLZYFWpFRLfqR2Fmi H9uUqT2WJfuFvSmVQXeL5Fs5qnBNFI0IPeUbe3NZWyx5+FANutZ1/lVyEaMvGNnn 2Qky1ARbPJjlshdMwwnElBZfSg9kQBAVA5QhKUmIJBPLxKN+9mxNuNt00fjLK/jd qoduWJOx1QA34vEFbkQptWueRxWe39Jxlof+5wOD44uTUG97B7vBkeWZrr9xrQvn FaHdYQfjNsC6X4QNbnvnZoHp7iyChnxppQYTVu8PHQZBiP6d4Dhevr7400Kvtk59 y7joe0ESbK8FGwfiM97Zn0aCFWvbJgHcESkZp9KuxTlQUiPbHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRrbAqLaAaiIXaU5bVEPmTti1gPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTU2NWExOWMtYTA2ZC0z ZTcwLWIxZjUtMTRhMGI5ZThkNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE21WyLqqrX2pEBIjuHoZ8bPV3FJHvrvzAONpBeLr4ljz08Q/luiYpOd BwzeJEHkYgFUmJje1jNp2jGuq7bJltU1Qp8J+MCkEnu7aDGR9M3yxv0wkBNyaTRT Jvn0Ee2HJswc2WkROMm+GkDzAmMayVa5UAoXZ4q2FArf9m9gjxmn/mkGgLkFFFNH 9ekqF401LYcyVp3d7ED9/Tsp/uo9t2MdpdOh1X8MR+IetX2rIsjE4JDbiCiktKtQ eSIlw0w0k1Xt07n939zJDV2WMghSwmn3R+mzRrh3J65uTIHWI7vRpoTkanWkUmfw NOBE9IiHyl0/e93QVuWDKpOcIrAkfL4= -----END CERTIFICATE-----Generated at Wed Jul 29 09:05:58 2026 by rpki-client