$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa File: cdd97578-6813-332c-a0bf-22a87019cc3f.roa (raw, json) Hash identifier: ZWgx3UtYoMh8dx6TUU/UygabdblhkR7vBv+lFqDs5ao= Subject key identifier: 72:A6:57:94:B9:F7:F6:AF:77:A5:76:70:DE:ED:8A:92:63:C6:35:EC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435E06D3262E930D8249940 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 199.254.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:e0:6d:32:62:e9:30:d8:24:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=987ac452-d67c-4b15-9f65-b40ca463c3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:21:51:3e:1d:6e:79:49:ce:c6:41:2c:fa: 78:32:cc:6d:bf:8d:98:30:10:66:e0:68:0b:c6:fa: 38:48:ac:ce:50:79:92:68:23:37:e2:57:03:40:26: ab:44:6a:31:45:1e:f9:c5:7d:e0:3d:d1:75:bf:ab: 57:69:0e:1c:4c:ee:99:6a:34:e3:88:8a:42:1e:16: 55:ae:b6:56:34:79:0e:6e:91:7a:d5:37:ef:e9:65: 10:eb:99:f8:f6:5f:02:d2:71:21:8a:54:e0:d4:70: 5d:c2:0c:80:f6:87:23:cd:16:e9:42:45:1f:4b:a6: f6:4e:6b:8f:bb:66:9f:71:34:37:ef:58:0f:52:6a: 39:e6:88:93:cf:cb:30:65:49:63:a9:73:02:bc:24: 77:97:65:75:65:0d:81:4b:63:2e:ae:6f:47:d5:13: 6d:ff:d0:21:78:f3:4b:aa:ce:49:30:38:68:30:24: 07:7c:a8:ea:33:8d:82:62:4e:a1:69:dc:5a:3c:34: b0:3d:9d:16:2a:d5:ca:3e:14:a6:69:9a:b6:3f:b6: ea:30:c0:7e:c9:42:9b:a3:0d:a2:d5:67:2b:eb:e3: ec:2a:be:11:d6:4a:0e:7e:b1:e3:15:7d:60:a2:0a: 02:3c:6a:c0:3a:cd:ad:22:6e:2c:e1:76:e2:4e:c9: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A6:57:94:B9:F7:F6:AF:77:A5:76:70:DE:ED:8A:92:63:C6:35:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9a:0a:c3:58:46:3d:94:95:d2:df:30:ed:f4:00:38:f6:05: 45:67:7b:51:26:8f:5e:15:cf:08:91:ae:44:0d:9f:96:95:b4: 5d:59:0f:90:18:20:43:f8:cf:1d:fd:98:ff:bb:84:ab:8a:46: 89:8c:e2:c2:35:1b:cd:72:ac:ce:c8:9a:61:b2:ad:ed:30:fd: 29:48:57:1c:67:3e:c5:8c:ea:2d:26:85:cf:24:24:48:61:89: e6:9d:61:86:c9:80:0b:29:5a:fd:15:e5:9f:b2:9d:08:ad:cb: 32:d1:1b:95:3b:af:b1:5b:33:1b:bf:1b:61:fd:41:7d:35:87: af:92:25:35:ce:ba:17:8d:73:f9:63:67:4a:be:98:ec:26:ba: 88:48:8d:67:0b:b8:b5:ef:59:bc:cd:43:64:1a:8e:33:9c:f4: ba:f7:76:d7:aa:ec:55:4c:a7:6b:df:ce:46:31:a2:17:1c:31: 72:96:1b:5c:1c:5a:4a:4c:51:70:8c:f3:ce:50:a9:bb:6a:7f: 32:25:f2:66:01:be:f4:f2:61:da:26:05:0c:07:36:39:56:3f: a3:82:0a:0a:fa:ee:8c:b1:6c:ab:68:89:3e:89:80:80:e5:de: 5c:bf:66:d4:51:b9:f3:ee:12:43:cb:f5:a6:d8:df:e3:86:2d: e3:99:39:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENeBtMmLpMNgkmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk OTg3YWM0NTItZDY3Yy00YjE1LTlmNjUtYjQwY2E0NjNjM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NUhUT4dbnlJzsZBLPp4Msxtv42YMBBm4GgL xvo4SKzOUHmSaCM34lcDQCarRGoxRR75xX3gPdF1v6tXaQ4cTO6ZajTjiIpCHhZV rrZWNHkObpF61Tfv6WUQ65n49l8C0nEhilTg1HBdwgyA9ocjzRbpQkUfS6b2TmuP u2afcTQ371gPUmo55oiTz8swZUljqXMCvCR3l2V1ZQ2BS2Murm9H1RNt/9AhePNL qs5JMDhoMCQHfKjqM42CYk6hadxaPDSwPZ0WKtXKPhSmaZq2P7bqMMB+yUKbow2i 1Wcr6+PsKr4R1koOfrHjFX1gogoCPGrAOs2tIm4s4XbiTsnsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKmV5S59/avd6V2cN7tipJjxjXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2RkOTc1NzgtNjgxMy0z MzJjLWEwYmYtMjJhODcwMTljYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2aCsNYRj2UldLfMO30ADj2BUVne1Emj14VzwiRrkQNn5aVtF1ZD5AY IEP4zx39mP+7hKuKRomM4sI1G81yrM7ImmGyre0w/SlIVxxnPsWM6i0mhc8kJEhh ieadYYbJgAspWv0V5Z+ynQityzLRG5U7r7FbMxu/G2H9QX01h6+SJTXOuheNc/lj Z0q+mOwmuohIjWcLuLXvWbzNQ2QajjOc9Lr3dteq7FVMp2vfzkYxohccMXKWG1wc WkpMUXCM885QqbtqfzIl8mYBvvTyYdomBQwHNjlWP6OCCgr67oyxbKtoiT6JgIDl 3ly/ZtRRufPuEkPL9abY3+OGLeOZObQ= -----END CERTIFICATE-----Generated at Sat Jun 13 17:20:32 2026 by rpki-client