$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa File: ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa (raw, json) Hash identifier: u7VCBw2i9y/UDSclf04qP97RmFpXRmF4Ji2jHXW5hEw= Subject key identifier: 24:E5:21:D0:A2:C4:D2:71:A7:67:A9:FB:0E:01:75:17:52:15:A8:E4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CB16D3D3366EF87FE3F2E Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 199.182.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:b1:6d:3d:33:66:ef:87:fe:3f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bce6b449-4000-464d-9b47-4d09d01be8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c3:6c:14:87:5c:e9:56:00:84:a5:5a:d0:9a: d2:c8:7b:56:14:4a:f5:78:0c:12:5f:7b:96:c0:b4: d7:90:e7:49:71:3c:d7:4a:5b:2e:f0:6a:4c:7c:92: 21:26:17:c8:63:d3:45:22:8f:f3:92:e3:32:52:f1: 4f:38:c3:74:1c:5b:68:89:f7:1a:96:fa:c1:8f:b8: 16:7f:1f:49:67:7a:54:f6:7e:31:54:12:3c:05:b4: 36:39:f7:97:65:c3:94:0a:96:08:c3:f3:c6:4b:6e: 5f:87:72:ff:ca:cb:56:69:88:02:4f:b0:23:22:32: b4:6e:ba:a5:a3:88:a9:89:fe:47:17:dc:a5:92:9f: 30:4a:9d:bf:71:86:83:29:75:9c:35:89:f6:14:44: 7d:b6:d1:08:91:a3:46:96:6a:ef:dd:2d:14:5a:4d: 02:4e:64:49:fd:90:9b:ba:51:96:bf:ec:bc:2c:aa: 18:53:10:14:c7:c1:d2:99:67:3f:cf:57:94:85:03: be:38:71:ad:a4:5a:36:82:a6:09:74:7c:02:3c:96: c5:1e:e5:3c:a7:00:80:ae:69:62:bf:a4:55:20:cd: 3b:f3:36:d7:ce:cb:d4:e9:c8:03:06:05:4c:28:05: a6:f6:b1:8a:e0:ba:a3:55:e0:e0:00:76:b6:f9:3e: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E5:21:D0:A2:C4:D2:71:A7:67:A9:FB:0E:01:75:17:52:15:A8:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:62:b5:25:63:16:00:8b:5c:d7:3e:2d:8f:62:e5:76:9d:35: 5d:99:6f:2b:06:33:10:d0:60:45:68:d5:5d:31:81:06:41:65: 0d:01:b4:31:d6:08:ee:b7:ee:af:f0:95:1a:69:cf:fc:98:e5: 0d:ed:71:30:6a:d4:e0:8f:9f:b9:ef:ba:ca:3c:92:74:22:e7: b4:fe:86:be:2c:31:20:aa:5e:42:55:f8:c8:31:7d:e3:61:1a: e3:80:2b:79:49:d2:7f:90:a8:7b:0c:9b:fe:b3:ba:66:14:e6: 68:46:70:76:94:63:d4:a6:f0:89:db:88:39:a0:71:1b:bd:a6: e6:aa:fa:a1:51:55:86:b5:bf:e1:11:07:04:17:c4:d1:2c:10: 53:01:36:5f:bd:21:87:fb:6b:79:63:7f:05:ff:04:f6:d2:0c: b3:11:b2:5d:9b:97:11:ea:8c:e2:5a:8a:54:4f:10:4c:a5:5c: 07:9a:f2:27:fe:6c:1a:4e:11:ce:4d:93:c3:e9:3e:2c:1f:b7: f3:59:62:f5:51:70:f7:22:32:56:bc:58:50:eb:b9:14:dc:34: 25:dc:74:d5:e7:38:51:aa:fd:72:f3:62:f6:1d:4e:08:d9:b2: cb:34:14:63:c8:e5:8e:fe:45:59:a5:86:1d:be:7c:71:17:76: 58:47:bb:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnLFtPTNm74f+Py4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmNlNmI0NDktNDAwMC00NjRkLTliNDctNGQwOWQwMWJlOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsNsFIdc6VYAhKVa0JrSyHtWFEr1eAwSX3uW wLTXkOdJcTzXSlsu8GpMfJIhJhfIY9NFIo/zkuMyUvFPOMN0HFtoifcalvrBj7gW fx9JZ3pU9n4xVBI8BbQ2OfeXZcOUCpYIw/PGS25fh3L/ystWaYgCT7AjIjK0brql o4ipif5HF9ylkp8wSp2/cYaDKXWcNYn2FER9ttEIkaNGlmrv3S0UWk0CTmRJ/ZCb ulGWv+y8LKoYUxAUx8HSmWc/z1eUhQO+OHGtpFo2gqYJdHwCPJbFHuU8pwCArmli v6RVIM078zbXzsvU6cgDBgVMKAWm9rGK4LqjVeDgAHa2+T6h5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTlIdCixNJxp2ep+w4BdRdSFajkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGVkNzM2NTctYjViYy0z MGVhLWI3YzEtZTg1YTVlZGI5YTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBitSVjFgCLXNc+LY9i5XadNV2ZbysGMxDQYEVo1V0xgQZBZQ0BtDHW CO637q/wlRppz/yY5Q3tcTBq1OCPn7nvuso8knQi57T+hr4sMSCqXkJV+MgxfeNh GuOAK3lJ0n+QqHsMm/6zumYU5mhGcHaUY9Sm8InbiDmgcRu9puaq+qFRVYa1v+ER BwQXxNEsEFMBNl+9IYf7a3ljfwX/BPbSDLMRsl2blxHqjOJailRPEEylXAea8if+ bBpOEc5Nk8PpPiwft/NZYvVRcPciMla8WFDruRTcNCXcdNXnOFGq/XLzYvYdTgjZ sss0FGPI5Y7+RVmlhh2+fHEXdlhHu9A= -----END CERTIFICATE-----Generated at Wed Jul 29 11:17:26 2026 by rpki-client