$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa File: b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa (raw, json) Hash identifier: enKJufBO93tyMee+PRt1C+3HGqURmJinBwUHLBuXbyc= Subject key identifier: 9D:6A:08:06:06:64:2B:96:7C:3A:08:0F:EB:00:B2:A1:47:4D:3F:90 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49894000B09F94BAD170AE00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.254.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:40:00:b0:9f:94:ba:d1:70:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e63d05fe-99dd-4e3e-b0df-e714c5496b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:17:bd:fc:65:f9:5d:49:37:30:64:16:51: a6:aa:71:4f:07:b9:0e:91:e1:fb:b9:22:0c:71:6a: d3:d9:84:87:46:6f:40:0a:20:b7:72:c5:a8:a1:60: 3b:93:d5:ef:ae:e8:29:ca:14:51:51:0a:d2:30:6f: a4:cc:d8:b4:4e:ee:bb:fd:5e:bb:b5:b2:00:70:80: 83:23:a3:5d:3f:e4:4c:f1:3e:22:df:82:87:d1:d6: 59:a0:53:79:e4:fd:c1:b3:12:ed:a2:65:8e:aa:0b: 38:6d:45:be:e1:9d:f9:de:f3:fd:8f:82:93:2c:5e: 4c:92:7f:e8:39:20:19:4f:3c:b0:67:1c:a3:08:d5: 28:32:04:11:2b:73:56:e7:cb:ad:cc:e0:c4:36:73: ce:6f:db:66:af:02:9f:b3:d4:b0:83:3c:09:2e:ed: c8:a2:c4:27:0e:8b:ef:fb:05:4b:4b:b2:56:22:7e: d3:30:66:ff:4c:45:cc:15:06:54:75:e1:93:27:2a: 91:76:50:ce:fd:22:e4:4e:1a:87:5c:99:11:7d:ac: cc:21:6f:46:55:8b:0e:08:3f:d6:77:94:50:93:04: 57:72:d6:f3:40:f2:1c:1c:54:d4:38:b9:84:5e:27: 78:25:ad:dc:38:58:46:51:56:d5:1b:70:1b:64:8a: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6A:08:06:06:64:2B:96:7C:3A:08:0F:EB:00:B2:A1:47:4D:3F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:1e:d1:de:84:94:a1:53:f8:07:ca:42:d9:40:bd:dd:d0:40: 3c:21:c3:d8:fe:19:e9:f6:71:4c:53:1b:ce:c3:72:aa:23:07: 3d:a5:0e:e7:38:72:12:2a:49:cd:7b:fc:12:2a:7b:7f:8e:33: 0d:bc:04:cf:4c:5f:a3:b7:64:07:f0:8c:2e:1e:f8:06:1f:8c: 6d:d0:91:05:26:c6:a6:ec:33:9a:a4:22:f5:ec:cb:38:13:3c: 5e:cd:a8:d0:03:76:cb:4f:b6:1a:46:f3:5d:26:41:ef:3f:6f: af:bc:ee:90:a7:c8:d9:f0:e4:d8:a6:cf:d0:93:3b:3b:51:d4: a4:5b:eb:5b:b8:6b:0a:46:98:4f:f0:a5:84:e2:e9:97:6d:8d: 49:a1:11:88:60:56:81:30:86:89:8a:ee:c7:59:0f:97:4a:83: 97:0f:82:d2:06:cb:fb:ac:7d:d5:30:5d:44:8a:ea:61:59:54: 52:80:89:29:4c:f0:9e:15:24:ff:3b:7c:63:f8:a5:dd:ae:76: 0f:08:05:5e:cf:8e:52:c7:d5:8c:6d:77:85:0a:b5:2e:47:65: 13:ec:c6:80:4b:35:90:12:e9:6e:24:8f:a4:03:5d:2a:c6:87: a7:75:99:21:57:2e:7f:64:5c:9c:db:fc:32:45:9f:7e:59:91: 7a:d8:92:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiUAAsJ+UutFwrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTYzZDA1ZmUtOTlkZC00ZTNlLWIwZGYtZTcxNGM1NDk2YjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZwXvfxl+V1JNzBkFlGmqnFPB7kOkeH7uSIM cWrT2YSHRm9ACiC3csWooWA7k9XvrugpyhRRUQrSMG+kzNi0Tu67/V67tbIAcICD I6NdP+RM8T4i34KH0dZZoFN55P3BsxLtomWOqgs4bUW+4Z353vP9j4KTLF5Mkn/o OSAZTzywZxyjCNUoMgQRK3NW58utzODENnPOb9tmrwKfs9SwgzwJLu3IosQnDovv +wVLS7JWIn7TMGb/TEXMFQZUdeGTJyqRdlDO/SLkThqHXJkRfazMIW9GVYsOCD/W d5RQkwRXctbzQPIcHFTUOLmEXid4Ja3cOFhGUVbVG3AbZIpAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1qCAYGZCuWfDoID+sAsqFHTT+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjRkYTIwN2EtNTA4OS0z ZTVhLWIwZWEtZTliZjU0YmY2YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMe0d6ElKFT+AfKQtlAvd3QQDwhw9j+Gen2cUxTG87DcqojBz2lDuc4 chIqSc17/BIqe3+OMw28BM9MX6O3ZAfwjC4e+AYfjG3QkQUmxqbsM5qkIvXsyzgT PF7NqNADdstPthpG810mQe8/b6+87pCnyNnw5Nimz9CTOztR1KRb61u4awpGmE/w pYTi6ZdtjUmhEYhgVoEwhomK7sdZD5dKg5cPgtIGy/usfdUwXUSK6mFZVFKAiSlM 8J4VJP87fGP4pd2udg8IBV7PjlLH1Yxtd4UKtS5HZRPsxoBLNZAS6W4kj6QDXSrG h6d1mSFXLn9kXJzb/DJFn35ZkXrYko4= -----END CERTIFICATE-----Generated at Fri Sep 25 10:58:57 2026 by rpki-client