$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf9f3ac7-a986-36f1-8fd9-b262a8b439c9.roa File: bf9f3ac7-a986-36f1-8fd9-b262a8b439c9.roa (raw, json) Hash identifier: RuACg1CKm2dO5Ejcv0lEYbpTzm3G3cpAo8vJlTrxjVE= Subject key identifier: 9F:C8:D5:22:FC:B1:E4:C1:F7:2D:57:D6:A0:13:54:68:1F:88:FD:2F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49732F2EA8D500F214CD1AC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf9f3ac7-a986-36f1-8fd9-b262a8b439c9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.182.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2f:2e:a8:d5:00:f2:14:cd:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=81b8792b-6cb3-4235-9fec-0b03a424425f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:ab:69:18:e9:92:33:ec:eb:fe:14:03:ac: 25:48:8f:d8:dc:7d:20:d2:ba:11:47:21:61:01:08: f1:d1:16:07:f8:73:5f:ed:e4:dd:2b:bd:3b:58:4c: eb:94:b0:c8:88:d7:e1:d6:7c:a6:2e:e5:82:b3:28: e1:2f:5c:cc:f4:d4:f0:31:90:f5:2f:d8:1a:b3:29: b5:f2:7a:79:f6:dc:b4:be:23:19:58:bb:af:d5:ce: 90:65:e4:04:19:63:71:a3:fa:f8:cf:3d:62:96:8c: 22:03:6a:da:a1:fc:ca:f0:dc:18:0e:2e:46:ee:a4: 36:a7:4b:51:fb:be:62:7d:cf:c2:76:14:93:0e:cb: e5:e8:ca:de:85:c7:ec:da:9b:0d:ca:47:e9:ae:14: 69:d9:63:55:28:19:0c:45:f9:5e:ac:ca:ca:9a:94: 14:a9:62:29:5c:c2:f6:fb:e9:74:56:20:93:9d:b5: 7e:bf:32:cc:84:1d:27:44:be:a0:b0:42:7b:36:c4: a9:b4:8c:eb:34:78:70:52:71:46:8a:23:fc:0c:0b: cc:2f:a8:22:ec:7b:ab:d5:92:7f:e9:49:36:48:90: be:f3:b2:20:ae:0a:06:f6:fc:a4:85:54:48:23:bf: 7d:00:ce:cf:0f:0a:6b:88:83:a4:c6:81:61:30:d0: 2e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C8:D5:22:FC:B1:E4:C1:F7:2D:57:D6:A0:13:54:68:1F:88:FD:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf9f3ac7-a986-36f1-8fd9-b262a8b439c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:45:77:8a:48:60:ec:42:d9:58:2a:3f:86:6c:bd:67:e5:f7: 77:2e:f6:61:73:5c:75:cc:c7:ac:20:36:42:a5:9a:c3:be:1b: b5:7e:f2:8f:34:b6:b7:b5:33:4d:61:37:89:19:56:f1:c2:bd: 28:72:18:d7:3b:46:98:2f:f8:d3:5a:c0:ce:9b:af:1a:ab:81: 8b:aa:d3:3b:0e:33:e6:31:1e:fd:b4:12:c9:6b:2d:69:4d:d3: a2:6b:41:d8:d7:13:20:cf:9a:fc:3c:a3:ce:9a:70:59:9c:df: b7:3a:01:a7:8a:2d:6b:5d:44:4e:7c:06:ac:7b:6c:df:a9:4d: b1:1d:c7:ca:9d:37:44:96:28:e6:d0:85:3b:41:47:8c:8a:64: 71:0f:d7:10:60:fb:ae:67:90:1e:ef:f0:81:ea:d3:40:d0:8b: c8:f8:eb:af:bd:37:0a:b6:3f:f0:87:b2:b8:32:b2:2b:57:6c: 1b:6c:b4:eb:43:19:cd:11:97:3c:ba:c0:4b:0e:6a:5c:b9:1b: 07:2c:49:45:25:a2:9f:78:68:46:2e:06:a1:d3:89:8a:98:4d: 61:d4:3f:f2:67:f7:89:a1:c5:69:6c:3d:bc:fb:3d:9d:ef:58: 46:d7:96:0b:50:e8:2e:ff:84:54:90:6c:ed:27:a5:0c:57:1c: 97:8a:a9:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcy8uqNUA8hTNGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODFiODc5MmItNmNiMy00MjM1LTlmZWMtMGIwM2E0MjQ0MjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGOraRjpkjPs6/4UA6wlSI/Y3H0g0roRRyFh AQjx0RYH+HNf7eTdK707WEzrlLDIiNfh1nymLuWCsyjhL1zM9NTwMZD1L9gasym1 8np59ty0viMZWLuv1c6QZeQEGWNxo/r4zz1ilowiA2raofzK8NwYDi5G7qQ2p0tR +75ifc/CdhSTDsvl6Mrehcfs2psNykfprhRp2WNVKBkMRflerMrKmpQUqWIpXML2 ++l0ViCTnbV+vzLMhB0nRL6gsEJ7NsSptIzrNHhwUnFGiiP8DAvML6gi7Hur1ZJ/ 6Uk2SJC+87IgrgoG9vykhVRII799AM7PDwpriIOkxoFhMNAuEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/I1SL8seTB9y1X1qATVGgfiP0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmY5ZjNhYzctYTk4Ni0z NmYxLThmZDktYjI2MmE4YjQzOWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBFd4pIYOxC2VgqP4ZsvWfl93cu9mFzXHXMx6wgNkKlmsO+G7V+8o80 tre1M01hN4kZVvHCvShyGNc7Rpgv+NNawM6brxqrgYuq0zsOM+YxHv20EslrLWlN 06JrQdjXEyDPmvw8o86acFmc37c6AaeKLWtdRE58Bqx7bN+pTbEdx8qdN0SWKObQ hTtBR4yKZHEP1xBg+65nkB7v8IHq00DQi8j466+9Nwq2P/CHsrgysitXbBtstOtD Gc0Rlzy6wEsOaly5GwcsSUUlop94aEYuBqHTiYqYTWHUP/Jn94mhxWlsPbz7PZ3v WEbXlgtQ6C7/hFSQbO0npQxXHJeKqQQ= -----END CERTIFICATE-----Generated at Fri Sep 25 21:43:28 2026 by rpki-client