$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa File: cdd97578-6813-332c-a0bf-22a87019cc3f.roa (raw, json) Hash identifier: Zo2+Yt5zt0br9kfbp4tKORbdsuvCNK7OQwZwBh6IeYQ= Subject key identifier: 30:84:0A:72:D7:85:02:65:32:34:BC:66:48:E3:14:8A:32:1B:B5:01 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79BDAD91582DACFA477CC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 199.254.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:da:d9:15:82:da:cf:a4:77:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dc1597e5-64cf-42ce-8827-27bdaf284912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:f0:9c:2f:6d:17:0f:72:6e:2c:97:44:8a: f9:57:40:7f:4e:9b:dd:9a:2d:90:6d:d5:61:66:22: d1:17:77:dd:e3:eb:a4:8c:b7:f0:02:34:d3:42:bc: ea:df:63:0c:ef:21:b5:53:1e:65:8d:ee:30:4a:29: e8:8b:ef:3e:aa:91:83:7d:97:22:c9:11:ad:56:d9: 1f:31:41:0b:68:dd:9b:ee:25:81:45:89:16:f4:76: d1:03:0a:75:49:52:00:11:0c:fb:82:1a:64:ba:fb: a6:bf:fb:28:d4:af:fd:d0:79:e0:58:48:fe:d8:fe: 41:5f:10:b5:50:11:bf:3b:ba:2a:f2:e6:01:91:eb: c0:06:b6:13:03:5b:6f:3e:86:0e:b9:24:2d:c2:fd: 9d:9c:0c:13:30:dd:9e:02:df:11:da:c1:ad:43:7d: 96:32:da:ba:1e:75:2d:76:29:82:9b:ed:38:a2:64: cc:ea:21:bb:36:a7:f6:94:f3:e3:9d:ef:3a:26:c7: ab:f7:3d:98:ad:d7:f5:58:5d:7a:6e:d1:4b:66:80: 56:25:a1:a8:5f:83:c2:ce:d8:8e:98:61:8c:98:0b: 1f:8e:76:4e:29:0d:25:59:0d:04:9a:a0:06:2b:3b: 7b:3e:6e:1c:bf:a3:1e:43:3f:ad:56:35:83:9e:15: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:84:0A:72:D7:85:02:65:32:34:BC:66:48:E3:14:8A:32:1B:B5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:86:df:ff:7b:b9:36:30:49:a1:f5:9d:5a:62:fd:61:19:38: 2f:0c:a0:61:48:be:4a:ed:a6:41:11:c9:27:41:f7:d7:ab:49: a1:4f:5f:81:82:53:80:f6:1b:89:fc:f0:5d:13:0d:77:56:5d: 38:33:5a:00:7c:36:e7:63:69:8a:a4:fc:88:c5:99:06:0b:49: 9e:05:46:cc:f4:a2:c4:f9:12:fd:3b:fb:5c:90:bb:3c:c5:97: 2c:ab:b0:18:ff:91:fd:f2:cd:88:b6:a0:bd:9d:88:0d:e5:2b: fd:3b:cf:da:c3:5d:40:73:80:e2:b5:e2:48:ee:eb:2b:5f:ff: 3e:7a:fe:28:46:75:47:a7:3e:7b:54:a9:6e:55:c5:a3:d6:85: f7:8f:53:0a:8c:a8:95:07:5e:ae:ee:54:c0:b4:df:b2:ad:64: 05:38:ca:7f:07:86:1e:6d:de:b0:c2:71:00:73:d2:9d:25:ec: c5:ff:ea:ae:1a:d3:e1:b0:5d:3d:cf:86:6d:d2:60:12:a0:93: 39:9c:4a:0d:20:37:31:9a:98:91:36:52:40:2c:41:c0:9e:ad: 08:ec:c6:aa:78:83:f6:ac:34:94:69:52:5c:14:13:2d:03:ab: 6b:47:bb:40:c6:a9:c9:25:da:b8:8f:d0:64:cd:6d:f0:8a:be: 8b:66:90:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm9rZFYLaz6R3zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGMxNTk3ZTUtNjRjZi00MmNlLTg4MjctMjdiZGFmMjg0OTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+vwnC9tFw9ybiyXRIr5V0B/Tpvdmi2QbdVh ZiLRF3fd4+ukjLfwAjTTQrzq32MM7yG1Ux5lje4wSinoi+8+qpGDfZciyRGtVtkf MUELaN2b7iWBRYkW9HbRAwp1SVIAEQz7ghpkuvumv/so1K/90HngWEj+2P5BXxC1 UBG/O7oq8uYBkevABrYTA1tvPoYOuSQtwv2dnAwTMN2eAt8R2sGtQ32WMtq6HnUt dimCm+04omTM6iG7Nqf2lPPjne86Jser9z2Yrdf1WF16btFLZoBWJaGoX4PCztiO mGGMmAsfjnZOKQ0lWQ0EmqAGKzt7Pm4cv6MeQz+tVjWDnhUQ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCECnLXhQJlMjS8ZkjjFIoyG7UBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2RkOTc1NzgtNjgxMy0z MzJjLWEwYmYtMjJhODcwMTljYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCG3/97uTYwSaH1nVpi/WEZOC8MoGFIvkrtpkERySdB99erSaFPX4GC U4D2G4n88F0TDXdWXTgzWgB8NudjaYqk/IjFmQYLSZ4FRsz0osT5Ev07+1yQuzzF lyyrsBj/kf3yzYi2oL2diA3lK/07z9rDXUBzgOK14kju6ytf/z56/ihGdUenPntU qW5VxaPWhfePUwqMqJUHXq7uVMC037KtZAU4yn8Hhh5t3rDCcQBz0p0l7MX/6q4a 0+GwXT3Phm3SYBKgkzmcSg0gNzGamJE2UkAsQcCerQjsxqp4g/asNJRpUlwUEy0D q2tHu0DGqckl2riP0GTNbfCKvotmkDo= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:38 2026 by rpki-client